Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/29de944e-b96c-3db4-95cc-8b7f85e02996.roa
File:                     29de944e-b96c-3db4-95cc-8b7f85e02996.roa (raw, json)
Hash identifier:          NpCM0iPHeQwJ6KdPW4KUn+ol73UZvbuOi1s+AaEhUC0=
Subject key identifier:   E6:69:21:3D:79:77:58:FF:23:02:BB:7B:FF:BF:3C:AE:FA:DD:FE:EE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A131DDD4DACA2BC7E52E100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/29de944e-b96c-3db4-95cc-8b7f85e02996.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:13:1d:dd:4d:ac:a2:bc:7e:52:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=08631cc2-7a58-45e3-9300-5f9778e69f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:31:a7:54:80:e8:73:75:2f:4f:72:bf:35:
                    49:d2:51:59:aa:a3:17:b8:b0:8d:14:56:15:96:96:
                    b6:7c:15:d9:55:e8:e5:ca:95:e3:6d:09:aa:76:86:
                    d7:fd:46:6f:a2:54:64:ba:21:54:d5:fb:57:80:18:
                    97:bd:7a:7c:b6:d9:94:77:d6:d3:b3:4d:a6:9f:af:
                    4c:ba:c0:30:7b:8c:3d:ef:de:5d:98:8d:06:de:fd:
                    cc:b2:2f:58:20:7e:37:d8:0c:0e:c7:c0:a4:54:77:
                    a5:d4:04:14:6e:43:10:c3:8d:4d:79:e7:7a:a9:5b:
                    59:45:33:3d:4c:d2:5e:da:a0:93:99:10:d2:61:03:
                    e0:31:d7:0b:2a:00:55:ea:a5:a3:65:76:26:e6:b6:
                    07:c6:47:e2:22:b7:b8:e5:fc:2e:c2:fe:e6:77:fa:
                    2b:b9:3c:9c:cf:17:c5:7a:e2:81:0c:e5:a2:57:1e:
                    ff:47:de:4a:0d:47:d2:e9:7c:f6:05:38:3c:2d:a5:
                    c8:a3:0d:ad:c3:94:b3:68:a1:2c:5f:89:68:72:05:
                    0f:ce:86:29:be:5a:52:81:85:53:66:d6:1b:a2:c2:
                    3f:09:61:0d:bf:11:07:2c:be:51:52:c5:28:84:96:
                    9e:2b:3f:5f:31:76:ba:27:9b:e9:87:b1:73:19:13:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:69:21:3D:79:77:58:FF:23:02:BB:7B:FF:BF:3C:AE:FA:DD:FE:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/29de944e-b96c-3db4-95cc-8b7f85e02996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7e:08:16:8e:bc:61:c7:7f:13:56:55:2e:00:50:a2:61:21:
         23:ec:53:cb:5d:c2:2f:27:34:99:96:30:07:60:3d:eb:c8:60:
         37:34:28:66:ca:62:d2:5d:f6:44:39:93:ca:ce:42:c3:10:a2:
         2d:6d:86:ee:9c:67:96:ed:a4:75:f0:f2:75:ca:76:da:f6:0c:
         23:08:fd:1a:13:05:3e:7a:cc:e7:0a:e9:b8:51:ed:32:87:af:
         9e:f2:a4:81:6c:c0:a8:6a:90:2d:00:77:fc:33:52:6e:ff:88:
         5b:5e:86:cd:b2:b3:d8:d2:9c:17:e5:d0:1c:5e:58:63:30:c6:
         6f:89:6a:15:e4:9b:01:38:88:2e:c6:d6:93:5b:cc:c9:40:16:
         63:1f:49:37:3b:18:4b:e9:2d:60:d5:51:89:41:45:90:a9:b8:
         1b:4e:6c:54:38:81:7b:88:ec:e0:dd:67:70:0f:62:6d:c7:8b:
         cb:c8:6f:d3:3f:62:2f:54:82:81:5d:86:7d:09:13:85:06:ce:
         f1:2b:d9:9a:2f:c9:03:b3:42:ed:b3:c1:2a:e2:e4:09:1b:ab:
         ad:96:59:45:6a:63:9e:5c:83:88:22:76:65:ec:c1:53:bb:d8:
         21:51:3b:7a:38:f3:a1:82:cd:2c:a0:64:3c:2a:25:e2:38:fa:
         03:6e:35:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKEx3dTayivH5S4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDg2MzFjYzItN2E1OC00NWUzLTkzMDAtNWY5Nzc4ZTY5ZjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLoxp1SA6HN1L09yvzVJ0lFZqqMXuLCNFFYV
lpa2fBXZVejlypXjbQmqdobX/UZvolRkuiFU1ftXgBiXvXp8ttmUd9bTs02mn69M
usAwe4w9795dmI0G3v3Msi9YIH432AwOx8CkVHel1AQUbkMQw41Need6qVtZRTM9
TNJe2qCTmRDSYQPgMdcLKgBV6qWjZXYm5rYHxkfiIre45fwuwv7md/oruTyczxfF
euKBDOWiVx7/R95KDUfS6Xz2BTg8LaXIow2tw5SzaKEsX4locgUPzoYpvlpSgYVT
ZtYbosI/CWENvxEHLL5RUsUohJaeKz9fMXa6J5vph7FzGRPF3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZpIT15d1j/IwK7e/+/PK763f7uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjlkZTk0NGUtYjk2Yy0z
ZGI0LTk1Y2MtOGI3Zjg1ZTAyOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFB+CBaOvGHHfxNWVS4AUKJhISPsU8tdwi8nNJmWMAdgPevIYDc0KGbK
YtJd9kQ5k8rOQsMQoi1thu6cZ5btpHXw8nXKdtr2DCMI/RoTBT56zOcK6bhR7TKH
r57ypIFswKhqkC0Ad/wzUm7/iFtehs2ys9jSnBfl0BxeWGMwxm+JahXkmwE4iC7G
1pNbzMlAFmMfSTc7GEvpLWDVUYlBRZCpuBtObFQ4gXuI7ODdZ3APYm3Hi8vIb9M/
Yi9UgoFdhn0JE4UGzvEr2ZovyQOzQu2zwSri5Akbq62WWUVqY55cg4gidmXswVO7
2CFRO3o486GCzSygZDwqJeI4+gNuNbc=
-----END CERTIFICATE-----