Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21f3856b-7c58-3258-a888-65bb155a8fe3.roa
File:                     21f3856b-7c58-3258-a888-65bb155a8fe3.roa (raw, json)
Hash identifier:          cYLV7pWEKavncIVhfaij/TQKHTj9kSS9O+6KDcu7luY=
Subject key identifier:   E7:89:A0:52:5F:9C:5C:88:31:B0:52:C3:A8:0D:5D:F7:C0:32:67:40
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A168C20A2EC50598E074D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21f3856b-7c58-3258-a888-65bb155a8fe3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:16:8c:20:a2:ec:50:59:8e:07:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=17ac436b-17c0-4f84-9b54-5e67df59887d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:a9:c9:34:e1:a6:90:5e:90:8c:35:41:3b:
                    37:ff:ab:5c:ab:0f:1b:07:77:87:80:f3:7c:7e:7c:
                    15:2f:9f:9f:d0:09:4d:9c:0d:c6:32:b9:da:95:0d:
                    6b:70:08:fc:5e:5b:c0:9d:1d:b3:86:bb:62:61:74:
                    79:af:df:64:70:ed:08:fb:aa:a3:05:66:87:8c:36:
                    b6:d0:6b:61:d8:0d:4d:cb:80:d6:aa:de:03:55:10:
                    1b:07:1f:c5:70:ab:ef:1e:66:d3:c6:7e:70:09:70:
                    f5:58:b8:13:f6:d8:4a:e7:c2:b7:e3:33:fc:d7:42:
                    f0:6d:38:cb:58:a5:6f:0b:c5:f2:e9:8f:d8:15:8b:
                    12:88:d8:44:7e:dc:81:85:22:63:09:99:9f:fa:1b:
                    e7:f3:83:8a:54:92:63:04:8f:ea:c2:c3:ac:47:e4:
                    b1:81:6a:26:d6:73:62:d8:08:36:b5:c5:df:a4:4a:
                    32:4a:36:1b:4d:05:63:36:d0:12:95:ea:b3:86:64:
                    ce:36:a0:59:ae:2f:5f:53:19:50:d1:a5:82:57:99:
                    3c:78:a2:f1:99:df:29:1d:1a:e0:33:10:c5:67:bd:
                    d1:68:9d:35:1b:e2:99:c2:c8:c1:99:68:42:d3:00:
                    e2:9f:12:55:e1:00:e7:0d:37:a8:79:e3:a5:e8:75:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:89:A0:52:5F:9C:5C:88:31:B0:52:C3:A8:0D:5D:F7:C0:32:67:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21f3856b-7c58-3258-a888-65bb155a8fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:ea:4c:68:cf:c7:55:96:4c:2c:6d:fc:fa:0c:c1:be:6d:e8:
         af:76:94:da:92:7b:ce:de:34:4c:5d:d8:0e:bb:b1:0f:c2:37:
         a6:63:09:f4:40:99:7c:9c:95:59:00:c9:62:8a:a5:b3:0b:15:
         a9:17:8e:b3:e0:79:4d:3f:8a:73:24:3c:d0:e6:3c:2d:bd:85:
         5b:ce:99:2d:f6:1e:f7:d8:f4:b3:d1:c4:9f:24:1a:0e:98:06:
         e8:58:47:40:0f:bc:2b:b5:4d:a6:82:71:18:f8:db:f7:a0:d7:
         55:96:9b:8d:b7:38:8c:15:c9:b9:ae:ec:b4:61:51:9d:fd:6b:
         40:4f:7a:1a:5a:57:18:f9:f7:e8:53:8c:17:5f:04:5d:6a:77:
         e1:fb:3b:72:96:72:78:a4:30:69:f2:8a:bc:96:6f:a2:8f:9f:
         c1:bd:39:fd:94:84:22:bd:47:49:9c:f0:45:a2:1f:b1:48:96:
         ab:f6:c3:47:66:0a:cd:c2:b9:df:aa:9d:21:d5:96:ff:d5:95:
         6f:d8:8b:2d:a5:f2:6b:fa:ea:91:89:41:21:6f:90:07:6d:d4:
         8e:b6:6f:cc:10:e9:88:03:ee:7a:aa:dd:b3:cb:7f:56:50:e1:
         b7:b7:de:ed:b9:99:d6:aa:b5:ef:fd:3b:08:67:5c:af:ba:18:
         38:06:11:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFowgouxQWY4HTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTdhYzQzNmItMTdjMC00Zjg0LTliNTQtNWU2N2RmNTk4ODdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXGpyTThppBekIw1QTs3/6tcqw8bB3eHgPN8
fnwVL5+f0AlNnA3GMrnalQ1rcAj8XlvAnR2zhrtiYXR5r99kcO0I+6qjBWaHjDa2
0Gth2A1Ny4DWqt4DVRAbBx/FcKvvHmbTxn5wCXD1WLgT9thK58K34zP810LwbTjL
WKVvC8Xy6Y/YFYsSiNhEftyBhSJjCZmf+hvn84OKVJJjBI/qwsOsR+SxgWom1nNi
2Ag2tcXfpEoySjYbTQVjNtASleqzhmTONqBZri9fUxlQ0aWCV5k8eKLxmd8pHRrg
MxDFZ73RaJ01G+KZwsjBmWhC0wDinxJV4QDnDTeoeeOl6HWKXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOeJoFJfnFyIMbBSw6gNXffAMmdAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjFmMzg1NmItN2M1OC0z
MjU4LWE4ODgtNjViYjE1NWE4ZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIarMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALzqTGjPx1WWTCxt/PoMwb5t6K92lNqSe87eNExd2A67sQ/CN6ZjCfRA
mXyclVkAyWKKpbMLFakXjrPgeU0/inMkPNDmPC29hVvOmS32HvfY9LPRxJ8kGg6Y
BuhYR0APvCu1TaaCcRj42/eg11WWm423OIwVybmu7LRhUZ39a0BPehpaVxj59+hT
jBdfBF1qd+H7O3KWcnikMGnyiryWb6KPn8G9Of2UhCK9R0mc8EWiH7FIlqv2w0dm
Cs3Cud+qnSHVlv/VlW/Yiy2l8mv66pGJQSFvkAdt1I62b8wQ6YgD7nqq3bPLf1ZQ
4be33u25mdaqte/9OwhnXK+6GDgGETM=
-----END CERTIFICATE-----