Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7fd9d748-c675-34ef-9395-03355cbc269f.roa
File:                     7fd9d748-c675-34ef-9395-03355cbc269f.roa (raw, json)
Hash identifier:          d6nyjdQT9OMjlkn0n1145saqkYcKUatLv+eRIWRboT4=
Subject key identifier:   34:83:4E:B8:B3:77:2B:75:E8:24:B0:3F:72:AC:DD:F1:B9:4F:7F:C9
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584309FB142C9F129EDCE79E3100
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7fd9d748-c675-34ef-9395-03355cbc269f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fb:14:2c:9f:12:9e:dc:e7:9e:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=787d5523-d307-418c-88c2-95749a567507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5b:df:54:2f:67:10:6d:ee:ba:f3:b4:74:53:
                    bd:07:64:12:73:34:21:d3:3d:38:4c:62:b1:28:d6:
                    b0:3c:f8:57:54:ff:4a:74:94:b0:20:b3:e5:a3:e7:
                    8f:ea:26:44:70:77:4f:ab:4b:f1:53:b2:0e:24:a8:
                    5d:ea:d2:94:6d:4d:6a:b0:95:51:26:80:eb:5e:31:
                    67:e1:07:0a:c2:38:90:15:c0:c4:9b:04:fc:a6:d3:
                    6a:30:93:3c:c8:25:f0:27:c1:ca:08:17:8d:f7:6a:
                    72:4c:ee:cd:ab:94:88:09:74:51:5e:56:7e:cc:15:
                    5f:a9:f0:79:80:84:0b:d7:21:38:3f:2a:2c:15:18:
                    e6:c9:a4:14:9c:19:be:73:75:ce:31:26:9b:07:25:
                    a7:58:e8:83:e1:66:51:6d:7b:86:cf:30:d2:b0:42:
                    3a:9c:ab:c0:71:45:e8:82:83:d5:10:de:db:9b:bc:
                    4a:78:d1:d6:9e:c8:1f:af:28:91:2b:b5:d9:57:85:
                    57:f6:9e:c2:2d:9b:86:51:07:98:c0:b3:5f:26:91:
                    65:e2:38:69:21:fc:0f:1f:ee:28:94:bc:c9:53:53:
                    a7:c6:9f:cf:34:43:13:84:62:11:4f:f0:d1:f0:ce:
                    41:6e:63:0f:62:23:f7:e1:94:0e:5b:27:69:6d:c8:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:83:4E:B8:B3:77:2B:75:E8:24:B0:3F:72:AC:DD:F1:B9:4F:7F:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7fd9d748-c675-34ef-9395-03355cbc269f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:50:ad:79:e3:ee:20:c3:90:2e:28:ff:da:28:28:17:cf:43:
         f9:e6:66:a8:f1:8e:e4:60:a0:41:ae:71:53:56:2b:be:34:53:
         ad:64:ed:17:6f:16:d0:32:e6:a3:91:93:d1:78:83:d8:55:eb:
         db:c2:1c:41:34:c6:63:46:ea:80:b0:80:51:2a:d4:e8:2c:75:
         22:a8:ea:5f:6f:92:f3:b7:28:6f:84:3e:3f:7f:21:7a:9a:0e:
         0a:5d:b0:a8:06:da:97:10:9b:22:34:91:43:84:88:59:9c:36:
         2e:0c:b4:bb:13:0b:b3:8d:c3:f3:2b:74:f5:6b:a3:db:93:9c:
         ce:bc:68:a5:18:2d:17:05:03:bb:6f:bb:72:d9:dc:2c:14:d4:
         07:df:9c:d4:3e:37:86:d7:06:8c:6c:5d:c2:7d:5d:f6:4c:e5:
         3c:54:1e:44:f5:03:26:92:d0:8a:9d:87:86:ef:b0:e8:76:fb:
         08:b2:6d:d9:48:bb:5e:6a:f2:f7:96:67:8e:c3:03:79:49:0c:
         75:1c:b3:ce:cd:b8:b9:45:d5:ac:37:3e:30:e1:85:01:80:95:
         da:76:13:b6:d3:98:77:77:c9:6a:a8:ea:68:d4:9e:75:72:4a:
         7d:71:1c:10:7a:e7:1f:0e:19:e5:0e:99:9f:2a:c9:77:27:bb:
         1f:8c:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----