Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d082f6a-dd12-3b2a-843f-f78ec1bdb6ff.roa
File:                     0d082f6a-dd12-3b2a-843f-f78ec1bdb6ff.roa (raw, json)
Hash identifier:          hdmWGY7/m6YL9LeAlYvFq67XUvAQqhuhe103Dzn+aO0=
Subject key identifier:   E1:AC:95:79:58:8F:7A:4B:67:22:07:D3:25:4D:43:CD:6A:4B:93:57
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A09E1522F912C02082F8220
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d082f6a-dd12-3b2a-843f-f78ec1bdb6ff.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:09:e1:52:2f:91:2c:02:08:2f:82:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e7cd78e2-0b39-4d03-b974-6d295297282f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:8e:84:1a:68:c0:2a:95:f7:ae:e2:00:92:
                    f5:29:70:0a:3f:e2:8c:39:2a:3c:55:57:86:cd:b9:
                    8f:63:84:1e:05:46:94:c8:35:b5:b3:87:a9:85:5b:
                    44:a5:24:e3:bb:7c:5a:e6:b2:9d:47:28:13:98:8a:
                    35:97:a0:b3:fd:aa:f2:c6:74:3d:a6:0d:db:e4:cf:
                    59:d1:6d:9c:3f:2d:f1:c2:e3:b1:db:43:6f:5a:60:
                    da:cf:0d:0a:b4:4f:02:18:7b:af:74:4b:ac:fc:fe:
                    0e:91:da:bb:aa:6f:c3:ae:f0:90:83:db:46:3b:ce:
                    37:db:01:e8:91:d0:41:18:95:29:43:bc:78:93:01:
                    9f:00:cb:85:9d:28:24:cb:ad:26:2a:55:e0:09:46:
                    fb:28:4c:c7:18:f6:b5:1a:55:61:c2:0f:7e:8a:3e:
                    71:3e:3e:db:34:ff:39:8a:8c:b1:e2:bf:52:39:ff:
                    b2:39:ca:e8:6e:e6:91:e3:83:c4:a0:84:83:ed:81:
                    0b:97:7d:01:e0:62:d5:72:93:41:7d:03:9d:22:55:
                    df:de:f5:b9:8d:c5:1e:cb:c8:0b:2c:03:de:4e:c8:
                    c7:d1:d2:e3:9c:30:ae:40:60:c8:43:33:3e:6e:6f:
                    fa:60:8b:7e:f9:8f:ea:dc:44:66:75:4d:40:f7:6c:
                    0c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AC:95:79:58:8F:7A:4B:67:22:07:D3:25:4D:43:CD:6A:4B:93:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d082f6a-dd12-3b2a-843f-f78ec1bdb6ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:2d:ac:1d:1e:ab:0b:f4:d8:30:62:ee:30:7d:cf:5c:14:b7:
         2d:4d:79:00:fe:60:92:d3:50:13:62:34:d1:6f:41:b4:3f:8f:
         3b:24:b5:a2:24:0a:fe:77:df:78:cc:a6:5b:2a:e5:2c:e2:7b:
         88:ff:c2:ad:d5:d8:73:d5:c2:cc:d6:1b:e2:0a:2e:ce:2e:b6:
         ff:9a:b8:b7:aa:8e:43:80:8b:d8:01:86:b6:22:79:2e:11:3a:
         21:a3:f6:4c:1e:3b:71:e0:f6:a7:f9:40:b6:ab:52:08:9c:9f:
         a2:2f:43:7f:5f:50:b2:49:fd:86:00:7d:c2:a6:36:aa:fd:71:
         66:d4:67:a7:8e:e3:5d:d9:c0:05:61:85:63:96:cd:0b:29:20:
         b7:c3:85:7d:54:b9:75:be:e6:f9:62:41:0c:ca:4a:10:32:e7:
         10:32:62:ac:77:6f:44:2a:8d:c2:87:15:e4:53:cf:4d:f9:47:
         0a:35:a3:6d:76:54:98:47:0c:47:24:00:eb:53:f7:04:fd:1c:
         e9:1c:0b:27:b4:18:2b:72:3e:02:3e:2d:bf:6d:90:73:f6:23:
         f0:8d:fd:8f:e6:64:06:98:5a:11:e8:d9:37:2c:ba:47:5f:d9:
         78:1c:45:df:a1:32:25:68:21:62:c7:d3:21:b0:09:9d:e7:a9:
         37:61:f4:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKCeFSL5EsAggvgiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTdjZDc4ZTItMGIzOS00ZDAzLWI5NzQtNmQyOTUyOTcyODJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJyOhBpowCqV967iAJL1KXAKP+KMOSo8VVeG
zbmPY4QeBUaUyDW1s4ephVtEpSTju3xa5rKdRygTmIo1l6Cz/aryxnQ9pg3b5M9Z
0W2cPy3xwuOx20NvWmDazw0KtE8CGHuvdEus/P4Okdq7qm/DrvCQg9tGO8432wHo
kdBBGJUpQ7x4kwGfAMuFnSgky60mKlXgCUb7KEzHGPa1GlVhwg9+ij5xPj7bNP85
ioyx4r9SOf+yOcrobuaR44PEoISD7YELl30B4GLVcpNBfQOdIlXf3vW5jcUey8gL
LAPeTsjH0dLjnDCuQGDIQzM+bm/6YIt++Y/q3ERmdU1A92wMVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGslXlYj3pLZyIH0yVNQ81qS5NXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGQwODJmNmEtZGQxMi0z
YjJhLTg0M2YtZjc4ZWMxYmRiNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIahMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFstrB0eqwv02DBi7jB9z1wUty1NeQD+YJLTUBNiNNFvQbQ/jzsktaIk
Cv5333jMplsq5Szie4j/wq3V2HPVwszWG+IKLs4utv+auLeqjkOAi9gBhrYieS4R
OiGj9kweO3Hg9qf5QLarUgicn6IvQ39fULJJ/YYAfcKmNqr9cWbUZ6eO413ZwAVh
hWOWzQspILfDhX1UuXW+5vliQQzKShAy5xAyYqx3b0QqjcKHFeRTz035Rwo1o212
VJhHDEckAOtT9wT9HOkcCye0GCtyPgI+Lb9tkHP2I/CN/Y/mZAaYWhHo2Tcsukdf
2XgcRd+hMiVoIWLH0yGwCZ3nqTdh9HM=
-----END CERTIFICATE-----