Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/089dc660-1364-3c4a-98d1-b7a552728467.roa
File:                     089dc660-1364-3c4a-98d1-b7a552728467.roa (raw, json)
Hash identifier:          48NKnCYFu0rPUv+2StK1PLr8oSOzz6zaa87aI+W7m/I=
Subject key identifier:   E9:7C:30:E6:AA:09:B9:5B:B3:BD:D5:2A:FC:FB:FF:85:33:21:E8:02
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A10D8745D27C5C88FE229F0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/089dc660-1364-3c4a-98d1-b7a552728467.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:10:d8:74:5d:27:c5:c8:8f:e2:29:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a06ff6cf-07e1-4053-8cba-a4a2e84b3a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:f3:15:1d:67:8b:da:23:5e:65:63:d4:1b:
                    a2:75:e4:9a:cc:9b:04:95:76:c2:8d:c4:59:65:f1:
                    50:99:66:f2:e9:22:ca:a0:99:4d:54:68:49:28:24:
                    ec:e4:96:0e:fc:57:03:bf:d2:1e:ad:44:ef:bb:56:
                    34:c4:2f:0f:e0:e9:84:ca:45:5a:76:6d:0f:fe:3e:
                    3d:07:3b:d9:9a:bc:f7:16:61:1c:05:e8:94:a2:22:
                    51:85:9d:62:ec:9f:17:4d:95:37:89:5d:0f:6b:f4:
                    00:6c:ac:24:6f:2d:97:9a:79:24:32:f1:f5:24:f5:
                    70:49:0e:3c:93:12:62:f2:4c:2e:23:ad:68:26:66:
                    c9:dd:a6:a5:ad:57:2c:d9:ea:4b:0f:f9:53:c4:96:
                    4a:53:b1:53:d5:3a:e8:01:47:0f:a6:c6:0f:e9:24:
                    8f:2a:16:9c:b1:cf:4d:8f:86:03:91:bc:3a:cc:92:
                    e7:35:6c:fa:73:23:b0:66:fe:02:4c:58:7e:94:af:
                    c6:57:ae:3e:67:89:dc:78:48:3b:0f:55:2c:4b:ed:
                    2e:85:d1:2c:65:0d:d4:fd:cf:5e:f6:58:5b:b1:26:
                    ef:ee:45:24:fd:97:e2:8d:06:36:7a:8c:6f:5b:c9:
                    38:3e:15:a3:2c:2c:2b:1a:51:c6:04:e9:c4:2d:e9:
                    fd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7C:30:E6:AA:09:B9:5B:B3:BD:D5:2A:FC:FB:FF:85:33:21:E8:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/089dc660-1364-3c4a-98d1-b7a552728467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:3d:8c:f7:cb:5f:81:64:cb:70:50:7c:01:e4:99:a0:4f:f1:
         8c:b3:f1:c6:ee:06:b3:ec:e2:7a:75:ac:a7:b9:ea:e9:7f:dc:
         58:38:ab:dd:c6:4f:98:a8:b8:ae:19:be:b1:50:5f:bd:b9:56:
         f1:83:fc:65:bd:ca:2c:0e:c3:dd:1e:69:6c:61:46:10:0f:ab:
         54:67:40:02:dc:24:b5:14:aa:d8:29:1a:9e:24:9a:fa:b3:94:
         42:b8:f9:21:27:60:04:3f:2e:49:76:db:10:c2:11:ac:67:32:
         59:c6:31:23:93:1a:03:c9:50:eb:5d:0b:d7:e1:cc:8d:a2:db:
         88:d4:70:bc:14:7a:28:5f:49:cd:67:ba:90:1a:7f:a0:40:aa:
         ce:66:43:54:ac:a8:97:96:c6:18:79:01:78:34:7b:95:eb:a0:
         c0:61:88:32:f0:d4:a6:69:92:d5:c4:64:b5:25:c3:4e:24:11:
         9c:c3:2d:6e:04:4a:ca:af:ce:a0:81:c1:c4:0a:02:fe:07:11:
         45:6f:ad:d0:e3:59:6b:fc:d4:19:4d:97:17:98:55:bb:34:f8:
         fd:a0:68:bd:ad:22:bd:dd:f9:63:e4:f5:8d:54:75:c1:7e:27:
         c1:78:8b:46:a7:e4:d7:0e:22:d8:7b:af:76:63:5f:91:07:e5:
         fe:6e:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----