Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/25c45d08-9c00-31d2-828e-98143c79baec.roa
File:                     25c45d08-9c00-31d2-828e-98143c79baec.roa (raw, json)
Hash identifier:          lGFryB0ef9pljy59wKwL/pXFxgjXdKWxcwWqLJRuw5c=
Subject key identifier:   58:D8:5C:91:2C:CB:81:80:FC:AF:80:A9:7E:AF:CF:C9:21:AC:4A:62
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F2BCC0E00409F3110C9280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/25c45d08-9c00-31d2-828e-98143c79baec.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f2:bc:c0:e0:04:09:f3:11:0c:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=489c0d35-9584-4b9b-b6a2-6bf0d950d35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:9d:5b:fd:1b:a7:a2:69:a2:ef:ce:56:a4:
                    29:07:dd:f0:2a:89:64:45:d7:38:d1:d2:20:46:b3:
                    da:69:03:b8:d0:80:0d:ee:19:38:7b:28:ff:6e:cd:
                    ae:85:1d:92:68:6e:ac:60:a9:08:73:fe:6f:71:da:
                    8f:51:25:d7:53:c7:40:db:bc:b9:30:03:29:de:42:
                    62:fd:84:0b:0d:2d:11:9a:7c:19:83:46:55:1f:45:
                    38:98:f1:00:90:7d:cd:d7:1d:51:61:80:9b:8e:4b:
                    ba:af:f8:1b:17:43:a4:4f:e6:f2:92:30:7f:4b:5d:
                    5c:6a:16:b7:98:0f:a0:a3:44:20:8d:27:72:31:1c:
                    f7:34:ff:c3:95:fb:5d:f9:7a:36:20:78:74:22:ae:
                    49:cd:fc:4d:0c:41:10:8e:08:ac:5b:65:ec:a5:ad:
                    19:ef:de:41:32:d7:0e:ff:e2:79:2e:d5:a9:97:94:
                    8a:6a:98:f0:4f:d1:86:9a:e3:a5:b4:1c:b2:c7:bc:
                    d8:b8:74:28:83:75:c5:ae:7d:9d:7e:53:2a:c8:85:
                    f2:c8:e6:99:cf:83:9e:ad:f9:18:1b:d2:1b:c2:e3:
                    69:1a:5c:1c:0b:ab:ad:5b:b6:f2:42:84:e9:6e:72:
                    23:52:0b:5c:a3:eb:cc:81:41:a1:5b:ea:e0:9a:11:
                    cb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D8:5C:91:2C:CB:81:80:FC:AF:80:A9:7E:AF:CF:C9:21:AC:4A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/25c45d08-9c00-31d2-828e-98143c79baec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ae:1b:ee:78:2f:07:e6:02:f2:d1:97:09:17:83:dd:49:e0:
         e5:2c:c0:c3:3b:f7:69:bf:6d:75:d7:6a:87:4b:ca:31:da:ba:
         f7:e4:b7:92:35:f5:fa:fa:78:fd:d1:7f:5a:dd:40:e5:1a:8e:
         53:53:10:57:6c:f5:08:36:f8:8d:24:2f:f4:68:49:22:7b:30:
         0e:c9:69:62:0a:d5:c5:9b:b1:1e:2b:be:0c:2b:7d:43:4a:ca:
         51:1e:42:e7:63:de:3f:c4:a3:39:f6:e0:53:7f:91:67:67:bb:
         84:b1:1e:16:09:3f:3d:ec:5e:de:28:8a:53:91:f5:b8:7c:a9:
         f2:94:23:8d:2c:9b:e6:67:40:0a:14:45:a7:f3:1d:c4:21:b8:
         4e:ff:bd:1f:f0:24:69:3b:08:9b:3b:d8:79:e2:65:1e:da:7a:
         18:8f:4d:70:4f:93:80:12:ac:4b:c8:10:5d:12:3f:75:77:ba:
         48:d5:16:36:25:07:2d:1b:09:1a:5e:f3:a1:5d:f7:5c:89:bd:
         fa:42:53:93:b4:ee:3b:5c:9d:b5:7d:70:f6:26:e3:ea:94:58:
         3f:da:ac:ae:1a:d2:59:8f:a7:8c:f7:9f:86:f9:8f:db:50:3c:
         95:c2:83:14:47:ba:12:9a:55:b8:39:cd:03:4d:33:cc:5c:fe:
         4b:93:f1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----