Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21d07f04-4589-30fe-8ec4-bc2b05961052.roa
File:                     21d07f04-4589-30fe-8ec4-bc2b05961052.roa (raw, json)
Hash identifier:          2OUPBrz6Q8oWJ9t43uxccJYo8QCwSOaCjLPWRXJa5hE=
Subject key identifier:   6E:25:C0:BF:12:28:9C:70:9D:90:D1:F0:DA:14:68:12:3F:26:4E:22
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A20E0977D640B2C802537F0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21d07f04-4589-30fe-8ec4-bc2b05961052.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:20:e0:97:7d:64:0b:2c:80:25:37:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ae90d92f-8317-46d0-aa58-946520b7d563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:8c:7b:b1:f2:cb:1e:5e:13:f2:62:5f:51:
                    6c:ef:d3:03:94:e6:20:a7:ad:57:53:26:ea:c3:8e:
                    b6:be:c1:3f:a2:3b:58:00:46:d9:17:74:f3:77:0c:
                    b4:a8:04:5c:73:0a:ae:85:ef:15:06:5a:d8:6d:3e:
                    17:1c:67:8e:b6:6a:b8:55:86:38:80:03:bc:24:3f:
                    5d:02:a4:d0:35:5e:72:8c:6f:a7:5d:c2:e0:74:db:
                    7c:75:36:56:0c:5d:4d:b5:2f:88:c7:13:33:9c:96:
                    97:02:d9:82:fa:5b:8e:7f:5e:73:4f:3f:cd:cd:02:
                    31:d8:73:33:37:52:74:07:73:e6:05:e0:38:fb:aa:
                    89:a4:37:b7:5a:b4:2d:57:49:05:b5:ee:6b:d6:59:
                    71:6b:16:57:97:4d:15:b0:a8:04:93:41:17:2a:bb:
                    da:62:96:ae:4c:1a:7f:ef:4b:4d:84:ef:2b:21:46:
                    9b:38:6a:b0:b1:7b:23:f1:cd:3a:c6:e5:d9:3c:b8:
                    4f:9f:97:f2:4d:0f:d8:c4:db:56:aa:7c:d7:b5:c5:
                    5b:57:31:25:94:f9:89:cc:46:72:84:35:f7:e9:02:
                    9f:0d:4d:dd:63:f1:14:db:01:28:e9:75:11:c8:b1:
                    2b:a3:60:82:cc:69:5f:a3:85:84:2b:30:a6:2d:7d:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:25:C0:BF:12:28:9C:70:9D:90:D1:F0:DA:14:68:12:3F:26:4E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21d07f04-4589-30fe-8ec4-bc2b05961052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:04:88:f0:ee:6c:85:39:77:96:38:62:98:c0:3f:40:dc:7f:
         fd:31:f2:0e:cf:ab:18:9e:fb:61:fe:d1:6b:8a:92:14:e7:37:
         8d:8d:8c:fa:e3:93:82:43:1a:5d:e6:ae:2b:88:f0:3f:4a:49:
         f4:6a:91:f7:c9:75:fd:6a:d6:c9:9b:16:c5:a7:16:4f:d5:fb:
         fc:8d:55:12:79:ac:15:b5:b2:7b:77:2c:76:07:95:3f:00:95:
         72:80:06:1f:4a:e5:7d:86:3a:1c:cc:1f:99:97:d4:52:71:1b:
         63:8f:80:df:71:0d:23:16:6b:ea:6b:fc:5e:6d:59:f7:91:5b:
         42:ba:77:f2:60:5f:e5:d2:24:92:6b:2e:1e:82:05:93:49:54:
         70:e9:9d:8b:e2:16:d5:50:a0:0c:a5:b2:81:e4:f4:c0:e5:e9:
         c1:4d:e1:37:c8:5c:b5:84:02:e3:36:23:32:96:dc:ce:e4:6b:
         6d:06:2e:d1:93:2c:68:90:74:68:39:ec:e6:76:43:ac:6b:df:
         44:60:98:57:0d:fc:fd:76:40:6c:6a:b5:c0:14:b6:28:0c:77:
         3d:e6:85:91:fe:6f:93:9d:87:b5:47:7c:e2:cb:f1:7f:d4:80:
         df:ea:02:03:38:09:4f:d9:e1:01:42:d2:5e:0d:4c:59:4e:13:
         31:a0:a2:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKIOCXfWQLLIAlN/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YWU5MGQ5MmYtODMxNy00NmQwLWFhNTgtOTQ2NTIwYjdkNTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvOMe7Hyyx5eE/JiX1Fs79MDlOYgp61XUybq
w462vsE/ojtYAEbZF3Tzdwy0qARccwquhe8VBlrYbT4XHGeOtmq4VYY4gAO8JD9d
AqTQNV5yjG+nXcLgdNt8dTZWDF1NtS+IxxMznJaXAtmC+luOf15zTz/NzQIx2HMz
N1J0B3PmBeA4+6qJpDe3WrQtV0kFte5r1llxaxZXl00VsKgEk0EXKrvaYpauTBp/
70tNhO8rIUabOGqwsXsj8c06xuXZPLhPn5fyTQ/YxNtWqnzXtcVbVzEllPmJzEZy
hDX36QKfDU3dY/EU2wEo6XURyLEro2CCzGlfo4WEKzCmLX1hwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4lwL8SKJxwnZDR8NoUaBI/Jk4iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjFkMDdmMDQtNDU4OS0z
MGZlLThlYzQtYmMyYjA1OTYxMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQEiPDubIU5d5Y4YpjAP0Dcf/0x8g7Pqxie+2H+0WuKkhTnN42NjPrj
k4JDGl3mriuI8D9KSfRqkffJdf1q1smbFsWnFk/V+/yNVRJ5rBW1snt3LHYHlT8A
lXKABh9K5X2GOhzMH5mX1FJxG2OPgN9xDSMWa+pr/F5tWfeRW0K6d/JgX+XSJJJr
Lh6CBZNJVHDpnYviFtVQoAylsoHk9MDl6cFN4TfIXLWEAuM2IzKW3M7ka20GLtGT
LGiQdGg57OZ2Q6xr30RgmFcN/P12QGxqtcAUtigMdz3mhZH+b5Odh7VHfOLL8X/U
gN/qAgM4CU/Z4QFC0l4NTFlOEzGgor4=
-----END CERTIFICATE-----