Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0c8fec82-0468-3c32-9f33-7b2ff7013bf6.roa
File:                     0c8fec82-0468-3c32-9f33-7b2ff7013bf6.roa (raw, json)
Hash identifier:          /2AyHMSpT9OBYGNN2pcpsvtChe8mZk0AFVsiPyfe1+8=
Subject key identifier:   A3:18:79:DB:4B:1C:08:1C:D1:50:AD:57:32:35:0D:2F:F4:2A:81:88
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FBEAA7D8A35775501F17E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0c8fec82-0468-3c32-9f33-7b2ff7013bf6.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fb:ea:a7:d8:a3:57:75:50:1f:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=59640517-ce0f-4209-9df9-291f7ad8c913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:03:d0:c6:7a:0d:0c:95:7f:67:3d:98:e0:80:
                    1d:ca:11:0c:f1:1c:11:80:8f:bb:ec:f8:a6:12:e7:
                    96:f1:89:46:23:b2:64:15:74:15:59:32:82:db:77:
                    8b:cf:46:c5:3f:da:ff:6d:73:10:6f:45:a1:d1:62:
                    ad:1f:40:84:e3:8e:cf:d2:29:d4:5d:cb:18:d7:66:
                    b6:93:d6:60:24:ce:53:8b:f9:27:6c:17:cb:26:d0:
                    a1:c2:7d:fd:6d:3a:fb:ae:15:b3:cc:3f:d7:02:e9:
                    bc:99:6b:39:51:34:40:53:65:9e:d9:a9:15:7b:5d:
                    04:2d:aa:3b:38:e2:bf:0d:a3:26:ae:af:5b:f3:48:
                    89:50:d6:14:b7:da:c1:c1:fb:5a:51:f0:10:fa:97:
                    6d:19:77:06:37:ad:e2:bf:6c:21:64:43:dd:c7:36:
                    04:18:57:c0:c8:81:c5:67:16:d1:3f:18:9e:a4:98:
                    d6:e5:6b:01:46:30:ac:91:98:bb:dc:38:0f:07:c8:
                    61:ab:25:53:b9:ee:ba:15:09:d7:8e:71:83:63:f1:
                    6d:9d:b7:17:d9:0f:68:1c:f7:ac:ce:e4:6f:ff:ad:
                    0a:80:8e:8f:d0:c5:7f:94:61:c7:93:88:e9:ae:04:
                    09:85:62:be:5e:00:6b:9a:75:98:57:c9:b8:e7:51:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:18:79:DB:4B:1C:08:1C:D1:50:AD:57:32:35:0D:2F:F4:2A:81:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0c8fec82-0468-3c32-9f33-7b2ff7013bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3c:c4:62:74:74:e4:e7:28:6a:a5:f5:36:e3:48:93:b5:77:
         08:68:47:98:48:03:a9:b5:ca:22:64:5e:a8:a3:45:0b:e7:13:
         0b:7a:aa:87:a6:6e:0a:62:1a:e1:7d:c1:97:e4:b3:c2:9c:e2:
         06:b1:cb:13:8a:7c:35:e5:01:6f:e4:ae:c9:a5:37:cf:27:b1:
         43:87:15:f7:9a:4c:14:c0:e2:ac:fc:14:5b:78:b4:66:20:42:
         3c:bb:37:8d:04:be:47:0e:91:14:80:77:dc:5d:54:41:a5:93:
         41:ca:05:17:26:2e:0a:ce:a5:44:5d:82:d9:54:ac:43:fb:e7:
         bc:7b:85:46:9b:c5:6e:fc:7f:a7:67:a2:f2:a7:75:b3:92:6d:
         e9:be:40:54:8f:18:6e:05:f8:a0:a6:51:55:e2:dd:58:98:4c:
         7e:22:50:07:c6:19:53:a7:4a:96:91:f6:28:9f:f0:ec:94:d6:
         03:e1:0d:82:36:61:3a:ff:b1:8c:83:72:a0:6a:26:f3:30:40:
         1f:1d:8a:00:fd:31:20:1d:6d:b5:5b:21:49:b7:1e:6f:7e:ff:
         6c:6e:f8:af:b3:f1:a2:3b:26:63:01:54:ae:87:b3:7a:45:d0:
         73:9a:67:7d:1e:ed:c3:d7:db:b7:3b:b6:76:76:06:41:f5:b6:
         26:49:a0:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ++qn2KNXdVAfF+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTk2NDA1MTctY2UwZi00MjA5LTlkZjktMjkxZjdhZDhjOTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwPQxnoNDJV/Zz2Y4IAdyhEM8RwRgI+77Pim
EueW8YlGI7JkFXQVWTKC23eLz0bFP9r/bXMQb0Wh0WKtH0CE447P0inUXcsY12a2
k9ZgJM5Ti/knbBfLJtChwn39bTr7rhWzzD/XAum8mWs5UTRAU2We2akVe10ELao7
OOK/DaMmrq9b80iJUNYUt9rBwftaUfAQ+pdtGXcGN63iv2whZEPdxzYEGFfAyIHF
ZxbRPxiepJjW5WsBRjCskZi73DgPB8hhqyVTue66FQnXjnGDY/FtnbcX2Q9oHPes
zuRv/60KgI6P0MV/lGHHk4jprgQJhWK+XgBrmnWYV8m451GvTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMYedtLHAgc0VCtVzI1DS/0KoGIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGM4ZmVjODItMDQ2OC0z
YzMyLTlmMzMtN2IyZmY3MDEzYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIg8xGJ0dOTnKGql9TbjSJO1dwhoR5hIA6m1yiJkXqijRQvnEwt6qoem
bgpiGuF9wZfks8Kc4gaxyxOKfDXlAW/krsmlN88nsUOHFfeaTBTA4qz8FFt4tGYg
Qjy7N40EvkcOkRSAd9xdVEGlk0HKBRcmLgrOpURdgtlUrEP757x7hUabxW78f6dn
ovKndbOSbem+QFSPGG4F+KCmUVXi3ViYTH4iUAfGGVOnSpaR9iif8OyU1gPhDYI2
YTr/sYyDcqBqJvMwQB8digD9MSAdbbVbIUm3Hm9+/2xu+K+z8aI7JmMBVK6Hs3pF
0HOaZ30e7cPX27c7tnZ2BkH1tiZJoO0=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:24 2024 by rpki-client on console-ams.rpki-client.org