Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00ef28a3-f519-3e4b-a1b9-00f32bee818c.roa
File:                     00ef28a3-f519-3e4b-a1b9-00f32bee818c.roa (raw, json)
Hash identifier:          YA6Ml9gdv14M57iRgkEyQjNUN1HE9CsbDWrXMR0E4qo=
Subject key identifier:   A4:96:87:6B:E3:83:75:C8:4B:91:2F:34:54:7F:EC:A3:22:D5:96:10
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A039DBDD983E30AA1856300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00ef28a3-f519-3e4b-a1b9-00f32bee818c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:03:9d:bd:d9:83:e3:0a:a1:85:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=555a9ba7-3f62-4b01-8065-a9e018584e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:12:b0:33:dd:29:73:a6:6d:f0:43:2e:5f:ff:
                    f3:1e:43:e2:13:8f:d3:22:d1:fd:60:3a:ec:30:83:
                    82:a2:11:c5:40:b4:36:e9:3b:53:89:7a:d9:ea:ca:
                    47:02:ae:1f:57:75:6f:ac:2d:88:41:fa:c6:c5:73:
                    94:0e:c8:c6:a6:20:41:59:aa:fa:e2:1a:da:2c:50:
                    cf:7a:34:4d:43:e5:bf:81:41:7f:a1:84:80:e4:48:
                    e0:51:e6:4b:7d:46:ef:46:99:fd:3f:b3:c9:ca:df:
                    be:43:94:32:5f:ea:12:f8:97:ee:3d:8e:11:f5:28:
                    78:e8:c0:2e:a2:89:98:ec:5a:16:fa:ef:30:b5:8b:
                    5e:d4:ef:ab:57:05:ea:09:9b:82:e2:26:31:2c:db:
                    c4:a2:f1:6a:a3:70:38:33:89:11:1b:f4:d0:08:d5:
                    b0:d9:df:04:d9:a7:73:43:5f:4d:58:25:1f:9d:f0:
                    f1:14:b2:d2:cb:a6:72:36:c8:48:41:c7:5d:c7:92:
                    02:de:0e:a3:95:a8:43:99:fb:04:57:06:e4:ef:10:
                    c1:09:26:87:29:e5:66:7d:15:f9:e8:ba:14:b5:12:
                    cb:0b:8a:0e:2b:2d:07:8b:ab:f2:21:16:d8:04:1d:
                    1f:b2:86:a4:ed:3d:4b:99:af:6f:f4:15:a2:1f:42:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:96:87:6B:E3:83:75:C8:4B:91:2F:34:54:7F:EC:A3:22:D5:96:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00ef28a3-f519-3e4b-a1b9-00f32bee818c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:1c:e5:cf:3e:3f:09:ec:65:ae:c5:ca:03:42:62:d4:6e:
         ab:64:49:69:c1:4f:7c:90:2a:cd:90:79:9c:db:e5:fc:af:e6:
         d3:10:13:5e:e1:c2:bc:d4:0c:7f:f5:b6:e0:dc:be:bb:12:fd:
         97:41:5b:60:f7:a7:31:69:bf:80:66:27:b3:6d:1e:a9:9a:f0:
         40:3f:a2:fd:5d:75:86:da:e6:40:9f:92:35:ee:50:ea:ef:19:
         1c:34:1a:ef:ed:62:3f:63:98:a8:14:b7:22:65:70:95:50:bc:
         cf:2d:0a:5a:53:f2:71:ff:03:24:99:20:a4:11:92:09:2a:45:
         86:70:72:43:fc:ad:3e:5b:a4:3a:ac:59:53:4b:5c:bf:08:cf:
         f9:ea:2e:f3:a6:75:89:b3:d4:72:b9:a2:03:16:f2:b5:01:3d:
         e7:7d:f5:3e:bc:74:e7:d7:89:0b:94:89:5e:3b:4d:38:c3:35:
         b7:c0:ee:64:84:31:ec:ad:e2:84:82:24:85:59:7f:28:de:b9:
         f6:8e:c6:8b:d7:23:a3:02:93:13:27:c1:fc:ec:a8:e2:b2:f5:
         72:5c:6e:1a:08:55:e7:32:47:8d:e3:8c:d4:c4:9c:bb:29:9d:
         b4:5b:83:4b:7c:df:e2:c6:cb:84:83:87:c0:36:ae:6a:e8:77:
         36:93:8b:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKA5292YPjCqGFYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTU1YTliYTctM2Y2Mi00YjAxLTgwNjUtYTllMDE4NTg0ZTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BKwM90pc6Zt8EMuX//zHkPiE4/TItH9YDrs
MIOCohHFQLQ26TtTiXrZ6spHAq4fV3VvrC2IQfrGxXOUDsjGpiBBWar64hraLFDP
ejRNQ+W/gUF/oYSA5EjgUeZLfUbvRpn9P7PJyt++Q5QyX+oS+JfuPY4R9Sh46MAu
oomY7FoW+u8wtYte1O+rVwXqCZuC4iYxLNvEovFqo3A4M4kRG/TQCNWw2d8E2adz
Q19NWCUfnfDxFLLSy6ZyNshIQcddx5IC3g6jlahDmfsEVwbk7xDBCSaHKeVmfRX5
6LoUtRLLC4oOKy0Hi6vyIRbYBB0fsoak7T1Lma9v9BWiH0L3xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKSWh2vjg3XIS5EvNFR/7KMi1ZYQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDBlZjI4YTMtZjUxOS0z
ZTRiLWExYjktMDBmMzJiZWU4MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABoKHOXPPj8J7GWuxcoDQmLUbqtkSWnBT3yQKs2QeZzb5fyv5tMQE17h
wrzUDH/1tuDcvrsS/ZdBW2D3pzFpv4BmJ7NtHqma8EA/ov1ddYba5kCfkjXuUOrv
GRw0Gu/tYj9jmKgUtyJlcJVQvM8tClpT8nH/AySZIKQRkgkqRYZwckP8rT5bpDqs
WVNLXL8Iz/nqLvOmdYmz1HK5ogMW8rUBPed99T68dOfXiQuUiV47TTjDNbfA7mSE
Meyt4oSCJIVZfyjeufaOxovXI6MCkxMnwfzsqOKy9XJcbhoIVecyR43jjNTEnLsp
nbRbg0t83+LGy4SDh8A2rmrodzaTi1k=
-----END CERTIFICATE-----