Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/032da5b5-89f8-34aa-921c-415d6553ff6a.roa
File:                     032da5b5-89f8-34aa-921c-415d6553ff6a.roa (raw, json)
Hash identifier:          9zkveQWBFoZubXQ2YVwiPWWFBVXevP+y89qBq5sOSOw=
Subject key identifier:   FA:05:BA:13:ED:B9:5A:CC:DF:4C:19:C6:79:4D:1C:B8:C5:C8:9D:44
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A194881D9620C19DD0FBC80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/032da5b5-89f8-34aa-921c-415d6553ff6a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.192.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:19:48:81:d9:62:0c:19:dd:0f:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=badb2223-39c4-48a3-b8e8-c74d2b16f051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0d:ef:4b:1c:36:58:c6:06:6c:2a:f6:24:0c:
                    61:eb:3a:ab:f7:bd:81:db:02:17:8b:b1:11:92:3f:
                    8d:4f:14:5c:ce:32:23:66:95:9d:86:ee:b9:b5:58:
                    eb:c4:d0:5f:18:17:6d:f6:e6:98:e5:5f:45:e3:9b:
                    14:fd:16:3f:9f:cb:b0:7b:f9:bd:be:13:60:b2:73:
                    48:72:91:2b:71:bc:11:23:8b:f5:fd:f4:14:d0:cb:
                    a6:c4:d7:05:04:99:a4:4f:ea:a4:53:75:d5:8c:74:
                    f5:86:97:be:8f:a5:42:23:c8:96:3f:fc:a9:07:6e:
                    0e:f2:cf:a7:d2:05:df:86:de:96:65:f9:16:62:2d:
                    02:f4:01:fd:39:40:b3:49:ba:fd:f7:fc:5d:74:03:
                    b7:4a:f8:ee:09:0e:ed:c8:52:d4:16:dc:f5:a3:ea:
                    ed:9e:28:b0:84:2a:0a:ad:a0:30:a5:2b:0d:be:7a:
                    b6:e9:05:62:b7:5c:37:88:00:bf:1f:6b:bb:56:d5:
                    40:7c:71:c4:22:99:2b:18:a9:30:cb:fd:81:3e:35:
                    47:fd:83:d5:ed:9f:c4:99:30:74:9b:4f:6b:b2:2e:
                    42:07:26:f7:9b:42:4a:48:53:57:52:d1:1e:1e:aa:
                    de:df:b3:9d:5f:66:48:08:96:ef:de:7b:67:d3:e7:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:05:BA:13:ED:B9:5A:CC:DF:4C:19:C6:79:4D:1C:B8:C5:C8:9D:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/032da5b5-89f8-34aa-921c-415d6553ff6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:d0:df:9f:48:4e:d5:f9:22:ea:00:60:0d:94:16:be:38:7f:
         30:2d:f5:8b:a2:46:83:a2:44:d9:f0:bf:84:0c:30:b9:1e:c1:
         90:ee:dd:a2:51:22:d8:28:18:a6:5f:17:30:bd:db:14:46:df:
         e4:09:7d:f7:05:c6:62:1c:5c:90:45:0c:f9:32:e7:ba:1f:56:
         90:64:fc:80:94:c9:ab:e7:93:3c:fe:65:af:f5:8f:8f:9b:d8:
         b9:6e:60:94:22:36:fc:10:2d:8b:b3:11:2c:27:2c:39:95:35:
         d6:61:96:ae:2a:bf:6d:b5:c7:ae:e9:0e:0f:65:9b:09:01:2a:
         83:50:4e:27:f8:61:3e:d6:88:a6:e2:e1:4f:b4:5f:46:ec:55:
         63:f7:c9:3f:c5:92:c7:2e:f3:7c:69:e2:b7:e8:02:61:31:78:
         be:52:ed:00:9f:f8:80:94:7a:d8:97:42:1c:16:aa:16:50:b5:
         cd:4c:7c:b3:0e:ef:e7:fa:af:ca:63:83:50:3f:4e:cd:cf:86:
         62:7a:9b:27:8e:32:34:be:9a:19:43:aa:08:d7:8b:0c:0a:36:
         b4:ef:dc:7a:0d:60:26:bd:7f:58:80:d3:26:66:d3:c9:f1:14:
         f0:7e:09:bb:f8:3e:da:47:75:8c:9e:62:44:f5:3b:7e:3a:e0:
         2b:5c:42:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGUiB2WIMGd0PvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YmFkYjIyMjMtMzljNC00OGEzLWI4ZTgtYzc0ZDJiMTZmMDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA3vSxw2WMYGbCr2JAxh6zqr972B2wIXi7ER
kj+NTxRczjIjZpWdhu65tVjrxNBfGBdt9uaY5V9F45sU/RY/n8uwe/m9vhNgsnNI
cpErcbwRI4v1/fQU0MumxNcFBJmkT+qkU3XVjHT1hpe+j6VCI8iWP/ypB24O8s+n
0gXfht6WZfkWYi0C9AH9OUCzSbr99/xddAO3SvjuCQ7tyFLUFtz1o+rtniiwhCoK
raAwpSsNvnq26QVit1w3iAC/H2u7VtVAfHHEIpkrGKkwy/2BPjVH/YPV7Z/EmTB0
m09rsi5CByb3m0JKSFNXUtEeHqre37OdX2ZICJbv3ntn0+dicwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPoFuhPtuVrM30wZxnlNHLjFyJ1EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDMyZGE1YjUtODlmOC0z
NGFhLTkyMWMtNDE1ZDY1NTNmZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL7Q359ITtX5IuoAYA2UFr44fzAt9YuiRoOiRNnwv4QMMLkewZDu3aJR
ItgoGKZfFzC92xRG3+QJffcFxmIcXJBFDPky57ofVpBk/ICUyavnkzz+Za/1j4+b
2LluYJQiNvwQLYuzESwnLDmVNdZhlq4qv221x67pDg9lmwkBKoNQTif4YT7WiKbi
4U+0X0bsVWP3yT/Fkscu83xp4rfoAmExeL5S7QCf+ICUetiXQhwWqhZQtc1MfLMO
7+f6r8pjg1A/Ts3PhmJ6myeOMjS+mhlDqgjXiwwKNrTv3HoNYCa9f1iA0yZm08nx
FPB+Cbv4PtpHdYyeYkT1O3464CtcQiQ=
-----END CERTIFICATE-----