Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1e974c5b-7bd0-34e3-93a1-6b26722483f0.roa
File:                     1e974c5b-7bd0-34e3-93a1-6b26722483f0.roa (raw, json)
Hash identifier:          JystdXdy+hye8OAW4oKjPUlqixvcujq3kZnWHid+ocE=
Subject key identifier:   18:7C:58:40:96:52:0E:9C:CD:48:4A:66:8E:2C:30:A8:86:2A:89:FE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A202DC884D1BA7743251A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1e974c5b-7bd0-34e3-93a1-6b26722483f0.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:20:2d:c8:84:d1:ba:77:43:25:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f2c05f37-25ec-4e55-abc3-f25ff5aed22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:32:47:9c:7b:4a:3c:a6:10:58:a2:ba:47:
                    86:e0:9e:51:15:7a:81:70:cd:3f:41:d7:18:27:cc:
                    68:dc:78:42:5a:c9:1f:b4:c6:fe:d6:da:ad:81:53:
                    35:1c:c1:ea:5c:af:7c:d8:5a:d1:26:8c:bd:11:d1:
                    b0:19:4e:a8:25:c6:27:05:4a:2e:6d:ec:7c:20:d4:
                    cb:1f:8f:74:e2:c0:b6:2e:40:65:23:cd:99:76:be:
                    da:cc:29:7e:b2:c5:2f:9f:35:af:60:a4:0f:21:c3:
                    3c:c3:db:31:6b:b9:eb:49:3a:24:79:ca:29:2b:68:
                    bc:3f:2b:c9:b1:5a:ea:f4:a6:08:eb:3a:49:8e:38:
                    d4:87:c7:15:fc:03:07:67:40:2a:c2:4e:d3:b9:85:
                    71:23:96:4c:5c:be:71:50:ff:2b:d5:52:8b:73:b4:
                    f8:b9:3c:08:6f:e4:35:a8:5f:a6:d8:ae:e8:e9:66:
                    65:cc:ae:f0:bd:9a:d6:df:e8:78:b0:ba:d8:bb:00:
                    6d:e8:b9:04:d6:17:0e:87:3e:38:09:b9:d3:21:52:
                    44:d7:43:e4:2f:69:5f:f3:b6:22:18:e1:22:cb:46:
                    8a:1a:9e:96:3e:2c:80:d5:12:cc:d4:9b:48:8e:02:
                    43:7a:2e:b4:ee:ff:ba:62:82:72:e6:8d:4c:8e:40:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7C:58:40:96:52:0E:9C:CD:48:4A:66:8E:2C:30:A8:86:2A:89:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1e974c5b-7bd0-34e3-93a1-6b26722483f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a5:db:8b:d4:c7:10:b3:ca:db:8a:d7:39:6e:98:8d:ab:9a:
         f8:a4:29:e9:5c:60:b0:1a:02:10:ad:e8:55:bd:5d:78:e6:03:
         73:02:b6:69:b1:f8:ac:24:df:06:93:37:45:7c:8c:28:34:63:
         66:fe:3a:94:bb:71:1e:d0:03:8c:a7:86:fd:7d:c9:c6:0d:bd:
         0d:e5:66:79:1b:bc:2b:cc:b6:4d:d4:c3:9e:a7:14:a4:35:9e:
         27:3f:3b:4b:f3:75:f4:ed:18:d1:76:3b:56:a8:25:b8:c5:37:
         b4:6e:d9:f4:a8:95:c1:28:83:e7:3e:78:5e:98:5e:dd:83:2a:
         f0:63:6f:68:1c:06:7b:2b:c7:98:f4:7c:08:bd:45:1c:d5:a8:
         79:17:7d:76:30:1c:cc:ae:09:96:33:e5:5e:6c:df:7e:4a:f5:
         00:9c:0d:b6:cf:4d:7d:ed:24:1e:bb:c7:ff:bb:7e:c5:86:a3:
         e6:1a:76:27:a8:73:64:6d:27:4a:d1:ba:72:c1:88:6c:f4:31:
         1c:31:44:36:81:8d:7b:91:37:f4:56:cf:20:e9:b9:29:69:5b:
         49:b6:45:ed:cd:ce:4d:30:4a:35:b3:4c:44:89:40:13:e1:3f:
         f8:6a:f5:22:9e:2d:88:86:75:f2:45:76:b1:bd:c5:3a:79:39:
         1f:93:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----