Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12ee850a-d693-31e6-a0e5-81a3598afa06.roa
File:                     12ee850a-d693-31e6-a0e5-81a3598afa06.roa (raw, json)
Hash identifier:          gES8ajoUJibMC9sRbWtB94usgb5UwUWBgrxVk1AOm9E=
Subject key identifier:   82:9E:50:79:F8:0C:E9:6E:16:94:16:8B:1A:15:27:46:94:33:8B:95
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FF45A954BFBCD4C4E46140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12ee850a-d693-31e6-a0e5-81a3598afa06.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.164.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ff:45:a9:54:bf:bc:d4:c4:e4:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=4b3d2567-4d23-4367-ae1b-97bd2475311c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:f2:d2:c6:35:62:84:c2:1b:f5:64:6d:e9:
                    7b:bc:82:96:84:60:bf:d0:20:95:75:3e:86:32:07:
                    6d:13:80:7b:1f:9f:6b:51:94:95:ce:ca:12:ce:22:
                    4c:dd:8c:43:23:1b:94:68:f9:b8:08:93:34:68:f0:
                    4d:5f:c3:b5:9a:88:ea:5c:fc:e0:28:c0:e9:44:d7:
                    de:fa:53:15:b2:d1:ca:de:b3:bb:4b:e8:d2:dc:06:
                    71:c7:6d:50:f0:7e:2a:14:3a:17:cf:f0:e6:84:48:
                    be:f4:41:04:cd:d9:85:af:63:6e:f5:9e:ca:32:03:
                    87:db:3e:2f:e9:33:73:7a:c7:5d:22:0e:f8:15:5c:
                    f1:2f:23:cc:85:1d:00:90:cd:32:b2:95:b5:45:f5:
                    91:f8:cf:b6:96:21:e7:c2:55:1a:4c:71:da:e9:82:
                    93:62:fd:3c:12:22:c6:a2:f5:1b:1e:7a:20:98:cb:
                    e8:99:3a:b4:eb:02:03:a0:2a:2c:bf:8f:d9:b3:10:
                    ed:a6:23:96:6a:46:15:e6:a9:5e:6d:32:a1:11:92:
                    d5:3f:df:1a:79:c9:15:e2:46:c1:a0:20:fb:39:1b:
                    e7:9c:5b:58:89:ad:2a:02:8a:28:bd:8f:d3:39:cb:
                    dc:9f:aa:9f:4f:8c:24:8f:0d:72:7b:a1:b6:b4:88:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9E:50:79:F8:0C:E9:6E:16:94:16:8B:1A:15:27:46:94:33:8B:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12ee850a-d693-31e6-a0e5-81a3598afa06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c3:c6:4f:1f:e6:5d:95:c4:87:84:1c:08:2b:cf:98:67:ba:
         c7:a9:65:f0:63:d5:97:3a:fb:9e:6b:a3:85:af:21:ca:24:51:
         89:76:c9:f8:80:64:0d:1c:d2:a8:b9:81:41:99:a5:e5:13:c0:
         c7:bf:21:4e:13:09:b5:2b:3c:64:0a:67:2e:f4:68:bb:45:ee:
         e9:35:e4:18:72:f8:b2:fd:46:dc:08:d1:db:4f:98:46:19:55:
         92:34:99:52:7d:c0:62:9c:93:85:c4:47:35:96:f2:29:6e:51:
         0a:0e:d4:bf:40:36:a1:df:bd:fb:f1:e2:3b:5d:15:fa:6b:cf:
         9d:f2:24:59:75:fe:c7:da:cc:43:84:f9:57:cd:28:13:95:b9:
         31:c3:df:99:10:a0:0b:12:27:8d:24:25:ed:0d:49:76:66:72:
         98:a2:4c:70:8e:a3:07:71:fb:6b:4a:a7:ed:fe:8f:bf:32:eb:
         d5:d9:2b:5c:cd:e8:00:0d:cc:cb:02:ba:f8:c5:4d:c4:70:94:
         56:90:1e:53:98:22:b6:65:44:89:1d:3e:ab:94:65:35:f7:e2:
         f0:ae:b9:64:7f:32:f2:68:8f:70:a0:ac:d1:84:c6:4a:66:a0:
         68:5d:b0:70:f7:f4:9b:62:bd:9b:e9:60:41:8e:e8:9b:0c:9e:
         36:e8:ec:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----