Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/006c12c8-d909-3acd-b859-6a3c0c77b8a7.roa
File:                     006c12c8-d909-3acd-b859-6a3c0c77b8a7.roa (raw, json)
Hash identifier:          ZRv3HaDjgC6XaFDxAS7dMOmoJMv+QWnkTFMYAlGsLVw=
Subject key identifier:   A2:0C:FD:A6:57:D0:7F:87:54:9C:16:7D:06:56:C1:2F:98:ED:99:C9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A11FB1CA2F639B77C2F5140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/006c12c8-d909-3acd-b859-6a3c0c77b8a7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:11:fb:1c:a2:f6:39:b7:7c:2f:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c860ae45-c62e-4649-a4f2-3863602c0d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:48:fb:be:6f:46:bc:be:9d:38:2b:a8:04:
                    cc:68:35:2b:83:4e:4b:d5:28:23:b3:f2:71:ad:33:
                    95:12:b2:9e:59:09:08:cf:91:5a:2a:82:e9:f0:33:
                    be:6b:61:7c:b2:30:7a:b6:75:d5:3f:48:ee:51:67:
                    17:81:0b:3d:90:aa:75:ac:f6:a0:43:4b:f6:cf:3f:
                    da:a0:a1:aa:1e:1e:10:14:82:dd:68:44:69:28:fc:
                    dc:23:0d:f7:dc:6e:58:44:1a:06:0c:d6:01:d7:e5:
                    6e:9f:17:6c:1e:83:f8:49:1a:7b:09:32:56:21:35:
                    72:87:02:f2:73:3c:e9:59:73:ce:95:b0:7d:22:d3:
                    5a:af:39:de:32:05:22:f6:50:d4:cb:3e:c7:2b:bd:
                    6f:24:d3:4a:79:bd:3d:ea:77:6a:9a:9a:4c:7f:47:
                    c3:ae:df:3d:93:a3:9a:f1:ee:62:47:f2:c1:89:87:
                    38:ea:5d:ab:8b:6a:e1:49:eb:4d:00:75:f5:1c:3d:
                    0a:b3:f7:7e:6f:ab:83:66:05:71:81:7c:fc:8e:e5:
                    d3:1e:0e:0c:c5:3e:6a:f8:dd:db:31:60:39:9f:38:
                    1b:4e:62:7c:24:9f:51:bd:28:04:54:7d:df:66:ea:
                    c0:0a:6c:13:6a:88:ac:05:38:68:0c:a9:f4:57:c0:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0C:FD:A6:57:D0:7F:87:54:9C:16:7D:06:56:C1:2F:98:ED:99:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/006c12c8-d909-3acd-b859-6a3c0c77b8a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:84:62:90:f1:a9:e3:44:02:a4:5e:cc:24:7c:77:4c:a1:a7:
         32:71:42:99:c2:db:01:26:cc:c5:95:e8:66:5d:da:00:a2:57:
         96:e4:f4:95:c3:8a:db:79:75:7b:b9:5c:8a:c1:36:1d:5e:b3:
         a7:e4:0e:24:ff:14:3c:be:c3:4f:84:1b:2a:cc:b9:43:9a:6d:
         42:e9:4a:88:6c:25:e0:8f:cf:83:c8:33:c1:a8:be:1b:0c:4d:
         b9:d0:82:e1:44:e6:1a:64:11:f0:c7:f0:82:2d:e1:ae:00:bf:
         73:59:c2:53:f0:b6:fb:9f:71:45:a3:61:dd:3d:73:b0:b6:45:
         87:24:41:22:22:08:c2:8f:e8:0b:07:56:b6:07:48:eb:58:23:
         39:de:d5:66:05:97:0d:97:d0:90:06:62:54:6d:d8:fe:d9:79:
         73:f1:c3:f7:94:72:80:97:61:d0:b0:fb:2c:48:22:31:08:fa:
         b7:3f:1d:00:22:f0:74:94:96:41:42:8e:9f:bf:d3:eb:43:0e:
         a7:01:50:e4:09:4e:21:b9:d4:be:8a:c7:9c:95:89:d0:c4:82:
         01:8e:c5:6f:5d:b2:8f:ce:2e:e6:e8:b6:fb:dc:39:f9:aa:7b:
         c3:f8:72:09:59:78:d5:fd:22:6e:40:53:e4:08:e6:36:ed:55:
         00:f0:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----