Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13ade7b7-6472-327e-8e0e-cbf651adbb60.roa
File:                     13ade7b7-6472-327e-8e0e-cbf651adbb60.roa (raw, json)
Hash identifier:          lzubriR/lMniFvZi45m2JDZ7KWPi98Oc8KYMYCOrx58=
Subject key identifier:   F5:09:7E:A6:C2:A3:F5:44:39:82:4F:F4:6D:E9:1D:4D:05:93:E0:44
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FD2337979A30DFF3164000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13ade7b7-6472-327e-8e0e-cbf651adbb60.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fd:23:37:97:9a:30:df:f3:16:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=144573f9-89d2-470b-abe1-d54fbfec2a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:21:91:61:14:aa:6f:46:55:76:c6:c2:e1:
                    c4:85:80:48:8b:61:d0:86:26:27:02:db:36:4c:a7:
                    bb:41:ce:f6:1d:2f:f1:22:93:d9:d1:c6:6c:f3:f6:
                    c0:31:be:87:34:8f:8c:0d:5c:bb:c5:43:90:45:f2:
                    29:c0:f2:6c:a8:5a:01:4b:bd:71:3d:7e:70:81:b2:
                    de:73:5c:74:fd:22:ea:de:3e:43:aa:cb:58:16:e1:
                    a6:31:97:7d:79:a5:fd:96:b1:62:38:f3:1c:26:a1:
                    97:9a:56:89:b4:8b:71:68:97:f9:e1:a8:62:08:67:
                    21:d1:04:34:38:15:b9:38:d4:09:c5:fc:9f:35:ba:
                    96:53:d3:48:2c:56:e8:37:bd:2c:ad:d7:6e:08:58:
                    a9:b1:72:e3:7d:34:f3:15:6d:97:cb:c1:f2:2c:1a:
                    e6:39:f5:0a:9f:f7:df:fb:ac:3c:1f:55:0f:af:42:
                    72:9e:02:a2:f1:4d:af:a5:dd:19:4c:9d:b8:6e:44:
                    bd:a0:0a:0e:52:42:e5:17:98:03:f6:29:75:c1:a6:
                    44:72:0d:f9:0f:67:0f:c5:cf:8c:44:af:71:ff:89:
                    81:d4:22:50:93:3f:86:c4:ca:f6:26:2a:87:3a:09:
                    b6:40:8f:51:f4:16:07:44:4c:b8:37:bc:4a:49:55:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:09:7E:A6:C2:A3:F5:44:39:82:4F:F4:6D:E9:1D:4D:05:93:E0:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13ade7b7-6472-327e-8e0e-cbf651adbb60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:16:e8:63:85:4c:fe:dd:c3:75:e9:e4:79:10:36:bf:62:81:
         09:d3:3d:36:86:6f:36:22:59:de:7b:4f:d0:fc:fa:a7:ad:06:
         ec:fe:e2:04:2b:cc:f5:c3:2d:b3:d3:61:67:7c:9e:3a:9f:d2:
         4f:36:0d:da:96:b6:41:8b:13:ae:4b:42:17:eb:d9:11:0b:7e:
         d9:68:47:90:0a:79:a9:fa:38:28:8e:eb:16:12:65:29:f6:20:
         bc:ed:04:f8:67:bc:dc:61:d6:29:43:19:41:17:90:f7:3e:2b:
         e9:96:51:c1:89:4a:3c:8f:f8:e0:13:dc:70:0d:c1:b6:f7:83:
         a1:8e:e7:ae:65:e3:28:e3:90:c1:69:ff:81:0d:2b:ba:13:2a:
         42:bd:b9:f1:c1:9f:3a:48:4b:c8:95:2e:ba:77:40:8e:cd:70:
         11:58:f7:98:04:11:08:52:cd:4e:6e:41:dc:9f:93:cc:55:43:
         bb:7b:31:40:24:61:3a:40:20:de:ee:7c:74:c9:c6:48:28:8a:
         eb:ce:be:d5:09:7d:9b:11:f3:ad:7e:25:67:70:28:1d:96:a1:
         ba:64:9d:e2:69:ac:21:2e:eb:00:9b:ae:15:c3:45:73:24:64:
         27:fa:24:7f:6a:6e:8b:da:95:94:60:ee:49:6e:52:73:5e:52:
         00:23:b9:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ/SM3l5ow3/MWQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTQ0NTczZjktODlkMi00NzBiLWFiZTEtZDU0ZmJmZWMyYTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl8hkWEUqm9GVXbGwuHEhYBIi2HQhiYnAts2
TKe7Qc72HS/xIpPZ0cZs8/bAMb6HNI+MDVy7xUOQRfIpwPJsqFoBS71xPX5wgbLe
c1x0/SLq3j5DqstYFuGmMZd9eaX9lrFiOPMcJqGXmlaJtItxaJf54ahiCGch0QQ0
OBW5ONQJxfyfNbqWU9NILFboN70srdduCFipsXLjfTTzFW2Xy8HyLBrmOfUKn/ff
+6w8H1UPr0JyngKi8U2vpd0ZTJ24bkS9oAoOUkLlF5gD9il1waZEcg35D2cPxc+M
RK9x/4mB1CJQkz+GxMr2JiqHOgm2QI9R9BYHREy4N7xKSVUwMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUJfqbCo/VEOYJP9G3pHU0Fk+BEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTNhZGU3YjctNjQ3Mi0z
MjdlLThlMGUtY2JmNjUxYWRiYjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkW6GOFTP7dw3Xp5HkQNr9igQnTPTaGbzYiWd57T9D8+qetBuz+4gQr
zPXDLbPTYWd8njqf0k82DdqWtkGLE65LQhfr2RELftloR5AKean6OCiO6xYSZSn2
ILztBPhnvNxh1ilDGUEXkPc+K+mWUcGJSjyP+OAT3HANwbb3g6GO565l4yjjkMFp
/4ENK7oTKkK9ufHBnzpIS8iVLrp3QI7NcBFY95gEEQhSzU5uQdyfk8xVQ7t7MUAk
YTpAIN7ufHTJxkgoiuvOvtUJfZsR861+JWdwKB2WobpkneJprCEu6wCbrhXDRXMk
ZCf6JH9qbovalZRg7kluUnNeUgAjuRw=
-----END CERTIFICATE-----