Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/013f17c8-6d09-317b-83cb-dd62e651f942.roa
File:                     013f17c8-6d09-317b-83cb-dd62e651f942.roa (raw, json)
Hash identifier:          /CRDccRJnnSBI8yVsCJ74ZiriRu7RaMcEaJtRPcU0eE=
Subject key identifier:   A9:25:7F:CD:2B:AB:6A:03:84:3C:A6:A4:5E:13:EF:82:26:9B:3B:18
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A067346AD93414E26FC3F40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/013f17c8-6d09-317b-83cb-dd62e651f942.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:06:73:46:ad:93:41:4e:26:fc:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=47258376-6c30-40be-a61a-7eae7fc91905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:21:28:27:16:a7:46:ee:4e:62:0c:ee:44:
                    f3:b1:3e:b1:10:8c:d9:c5:55:47:52:f6:ca:bb:41:
                    85:40:8e:be:ee:d2:55:b4:5c:17:22:a2:d9:98:a3:
                    e5:0d:b3:bc:54:58:12:f9:49:43:1f:db:f2:13:c9:
                    53:b8:2a:a8:bc:22:c7:3f:36:43:e6:35:cb:3f:1d:
                    2d:03:d2:1a:0e:87:c1:98:96:f9:d1:c2:c2:e0:8e:
                    0a:b1:e8:ae:83:cc:c8:13:16:15:ac:84:35:89:9e:
                    61:f5:ca:8b:e1:89:62:27:e0:11:fc:92:6e:3b:69:
                    30:4b:a3:30:e9:ce:e6:59:25:04:71:fd:9c:d4:1a:
                    34:74:4d:89:5b:d8:7d:e7:82:3d:ee:21:42:67:8b:
                    65:3b:52:1e:75:26:ae:de:dd:44:7b:6a:df:5b:28:
                    0a:87:1c:5c:9f:df:f9:60:8d:df:cd:f8:c0:ce:7a:
                    54:d3:80:0b:e9:43:69:5c:90:f1:96:92:89:1f:93:
                    ed:0f:c9:71:4d:5b:c0:71:62:44:09:3c:88:7b:8a:
                    f3:84:11:c5:8e:17:12:ec:53:26:81:3a:9b:42:92:
                    b6:d1:d2:f6:70:69:da:01:5c:b6:0e:d0:cf:17:24:
                    85:fb:0a:7d:1a:93:a6:bf:a0:10:35:05:64:25:74:
                    fb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:25:7F:CD:2B:AB:6A:03:84:3C:A6:A4:5E:13:EF:82:26:9B:3B:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/013f17c8-6d09-317b-83cb-dd62e651f942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:b9:70:11:5c:77:53:9f:ac:72:d9:cb:d1:83:bc:73:83:ca:
         48:01:2f:54:93:95:50:f8:c7:d4:8d:94:cb:a5:5a:aa:d7:70:
         eb:7d:86:11:51:7b:65:52:de:10:a9:aa:70:e0:be:29:b0:e2:
         8c:81:64:b8:dc:b0:41:3a:13:1b:f8:2a:26:3a:2b:39:04:35:
         ea:e4:cf:ad:16:bf:84:21:a2:0f:5a:f7:f9:6d:bb:fd:e9:e6:
         64:c2:7d:5e:17:00:d8:4f:18:f6:02:12:96:6b:fa:26:0f:24:
         48:17:d0:f1:5a:5a:13:22:9c:8a:bf:4f:65:eb:a2:9d:5e:64:
         f5:e1:9f:1d:5c:b5:c0:33:64:20:e8:e9:8d:95:61:c6:58:27:
         c7:36:cd:e2:04:eb:71:6b:e1:e1:f6:df:76:eb:ad:84:40:1e:
         24:8c:3c:1e:b1:02:b7:87:de:c3:be:8b:d7:9e:ba:c3:6e:b3:
         a1:13:d2:35:6a:ff:52:eb:5d:4a:aa:e0:0e:cd:ec:16:57:b6:
         ca:c8:49:86:83:f8:e8:3c:43:05:00:94:49:a0:c3:aa:e5:a0:
         74:b0:54:40:ae:c5:0d:4e:38:c8:34:f4:a2:b3:e7:38:cf:bd:
         17:e9:b1:52:70:e6:9e:a4:ce:fa:83:ea:d2:5c:b8:39:58:9b:
         0e:f8:4e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----