Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1af6d683-d33e-3043-9db0-c1b78d78cdd0.roa
File:                     1af6d683-d33e-3043-9db0-c1b78d78cdd0.roa (raw, json)
Hash identifier:          9e2TPRiUQQll4nM7vO3awfeCHdsF4A18F6uzBCZXlUQ=
Subject key identifier:   CC:54:3E:7A:D1:AB:D5:21:75:23:18:93:7D:9B:2D:AA:8D:AB:B5:52
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FA084C4507510C3E676D60
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1af6d683-d33e-3043-9db0-c1b78d78cdd0.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fa:08:4c:45:07:51:0c:3e:67:6d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f569d17a-625a-40b0-8b30-b42f6ebe4320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:ad:79:ad:96:29:33:ac:e7:5a:29:d3:1f:
                    47:43:e5:0b:55:bc:9f:3a:ea:19:c1:68:03:fb:88:
                    33:64:0d:b3:e4:be:75:98:65:37:45:4b:20:b2:c6:
                    f4:c7:f2:49:bf:4f:12:83:eb:fd:d7:1c:2b:36:e4:
                    b2:29:44:70:d0:2b:14:16:9e:83:0b:c6:dc:e7:60:
                    92:93:35:55:e5:da:e1:f5:9c:8a:76:3f:56:98:2f:
                    2e:92:d1:49:72:95:c7:2e:42:46:54:8c:f3:9f:fe:
                    4d:a2:83:07:b3:e9:88:e8:80:94:4b:f5:42:67:83:
                    d7:29:8b:5b:e9:2a:fc:c2:85:18:d2:6d:b8:19:a5:
                    de:31:f3:84:43:dd:c0:b5:14:23:f8:7e:a4:6f:86:
                    fe:59:bd:0a:5a:55:da:4d:67:dc:40:59:49:a5:e1:
                    9d:92:bc:d7:41:fb:70:f8:b0:82:68:b3:8b:ee:30:
                    b5:ca:78:5e:aa:de:9f:12:3d:85:1e:65:b9:c6:c5:
                    7d:da:d8:28:43:29:f6:1c:2d:50:c0:ea:bf:df:97:
                    3b:69:11:83:86:5e:f4:67:5a:7a:92:6c:dc:7a:ca:
                    9d:03:ff:27:27:96:ad:33:0f:33:07:07:c6:21:8b:
                    5a:54:9d:bb:a0:ab:58:09:59:7d:e7:3f:8a:ba:34:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:54:3E:7A:D1:AB:D5:21:75:23:18:93:7D:9B:2D:AA:8D:AB:B5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1af6d683-d33e-3043-9db0-c1b78d78cdd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:3e:ce:07:11:15:0b:a4:c7:8d:02:d3:23:13:9d:68:4b:
         7f:9c:e4:7a:b7:8b:d4:aa:b9:11:f2:19:9a:72:31:8c:8e:fb:
         d6:0b:bc:f0:0c:53:70:4e:69:65:8f:4b:76:76:01:ea:09:6c:
         44:9b:a4:9c:9c:15:f4:c0:7f:2c:54:95:cd:5f:a9:3b:68:ef:
         61:5b:a5:d9:2e:69:67:b8:8d:10:73:be:e7:8f:f7:86:4f:f8:
         5c:ac:2e:7b:48:e9:c0:0d:01:af:ca:48:bd:a5:6f:51:8a:2f:
         54:77:16:c9:84:b5:5d:79:18:4e:33:20:a4:9c:ae:1e:53:ee:
         cd:9f:3c:3c:15:d6:23:88:dc:e4:36:cd:4f:3c:e9:56:5c:ba:
         bf:62:54:61:d0:fd:b9:41:94:b2:d8:94:5d:ce:40:ec:71:f7:
         7d:c8:82:2b:0c:52:40:7d:2e:73:88:b7:3c:46:0d:f7:9f:e0:
         c9:9a:91:ac:8c:16:48:f0:45:43:e1:16:9c:36:30:6c:a6:a0:
         ff:17:40:72:40:4d:15:d1:4d:a3:fa:c1:07:f8:ef:9f:9b:6f:
         51:de:51:c1:c9:85:59:0f:5b:79:b3:05:b7:dd:9f:40:70:78:
         5d:98:77:6c:3b:75:6f:6e:e8:0f:ac:d4:a0:93:d8:e3:84:91:
         dc:5a:53:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ+ghMRQdRDD5nbWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjU2OWQxN2EtNjI1YS00MGIwLThiMzAtYjQyZjZlYmU0MzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2mtea2WKTOs51op0x9HQ+ULVbyfOuoZwWgD
+4gzZA2z5L51mGU3RUsgssb0x/JJv08Sg+v91xwrNuSyKURw0CsUFp6DC8bc52CS
kzVV5drh9ZyKdj9WmC8uktFJcpXHLkJGVIzzn/5NooMHs+mI6ICUS/VCZ4PXKYtb
6Sr8woUY0m24GaXeMfOEQ93AtRQj+H6kb4b+Wb0KWlXaTWfcQFlJpeGdkrzXQftw
+LCCaLOL7jC1ynheqt6fEj2FHmW5xsV92tgoQyn2HC1QwOq/35c7aRGDhl70Z1p6
kmzcesqdA/8nJ5atMw8zBwfGIYtaVJ27oKtYCVl95z+KujRj1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxUPnrRq9UhdSMYk32bLaqNq7VSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWFmNmQ2ODMtZDMzZS0z
MDQzLTlkYjAtYzFiNzhkNzhjZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEbPs4HERULpMeNAtMjE51oS3+c5Hq3i9SquRHyGZpyMYyO+9YLvPAM
U3BOaWWPS3Z2AeoJbESbpJycFfTAfyxUlc1fqTto72FbpdkuaWe4jRBzvueP94ZP
+FysLntI6cANAa/KSL2lb1GKL1R3FsmEtV15GE4zIKScrh5T7s2fPDwV1iOI3OQ2
zU886VZcur9iVGHQ/blBlLLYlF3OQOxx933IgisMUkB9LnOItzxGDfef4MmakayM
FkjwRUPhFpw2MGymoP8XQHJATRXRTaP6wQf475+bb1HeUcHJhVkPW3mzBbfdn0Bw
eF2Yd2w7dW9u6A+s1KCT2OOEkdxaU+A=
-----END CERTIFICATE-----