Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b30b483-2824-30bb-bcb4-2c11edb51004.roa
File:                     2b30b483-2824-30bb-bcb4-2c11edb51004.roa (raw, json)
Hash identifier:          Vwlf3R63ir2bzZvbNxuX+rx6TwwkI++TpsHZwE+Jqc4=
Subject key identifier:   5F:FB:00:ED:01:A5:7F:DC:30:C1:4E:DD:60:00:60:81:F2:95:F9:15
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FEFDAB8304E05F996212A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b30b483-2824-30bb-bcb4-2c11edb51004.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fe:fd:ab:83:04:e0:5f:99:62:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=332fbb43-7b8e-4888-a88e-364194e84410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:40:ef:c9:6b:87:ca:29:37:31:22:1d:c4:
                    07:e2:1e:5b:a6:6b:e7:7e:03:3d:46:f3:79:15:43:
                    2b:62:d6:81:b9:73:fb:c3:93:67:ad:55:f3:81:c7:
                    e0:b5:dc:e5:90:d7:4f:45:c9:9a:30:ad:8f:4d:11:
                    6f:97:5d:f8:58:30:d4:26:95:95:7f:08:19:c6:b5:
                    4d:74:6b:7e:1c:ca:73:43:52:f4:70:8c:28:9e:9e:
                    4a:8e:08:3c:83:a0:7f:5e:34:5e:fa:2f:c6:27:4c:
                    94:da:e2:d6:a4:47:a6:31:ec:85:5a:bc:07:c8:86:
                    6b:89:9c:b6:2c:c6:a7:35:55:2e:c3:af:b0:cb:d4:
                    2c:2a:59:bb:01:fb:93:f3:31:c8:5a:a5:0a:f6:81:
                    64:20:34:56:8a:7d:41:d1:74:23:6c:1c:55:95:a7:
                    9e:1d:09:6f:b3:d1:82:e8:97:8c:af:07:e8:d0:ba:
                    84:44:bc:fd:2a:79:d9:29:a8:80:62:7c:af:d4:27:
                    84:8c:7d:28:47:8f:b8:87:3c:87:77:77:49:3d:7f:
                    2e:8d:cf:e2:26:f1:26:55:15:b2:a6:5f:c1:c7:ad:
                    06:e6:48:b5:f6:03:3d:43:46:97:37:98:6f:2f:0b:
                    eb:87:2d:68:44:cb:00:73:63:bf:26:98:25:02:4a:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FB:00:ED:01:A5:7F:DC:30:C1:4E:DD:60:00:60:81:F2:95:F9:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b30b483-2824-30bb-bcb4-2c11edb51004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e9:58:c2:95:8e:56:e8:b1:c7:2e:87:e3:bc:f2:60:eb:1e:
         6f:63:fb:c3:70:d2:f4:82:28:f3:a6:4d:80:0e:20:53:c3:21:
         4c:d5:40:5d:3f:33:8c:4b:a3:94:3e:25:eb:c5:24:2d:39:12:
         5e:a8:09:03:e5:85:07:64:2e:23:4e:11:07:58:c4:e7:32:a5:
         25:7d:ed:83:80:43:bd:eb:f8:ba:a0:14:e2:6a:5f:ba:a8:62:
         73:c8:11:a4:f6:b6:47:5c:a6:da:a7:34:66:dc:f3:d2:d3:5f:
         a2:a8:78:d3:bb:cd:ce:11:80:80:15:75:78:23:48:f3:ab:17:
         54:79:8a:2b:b9:a8:19:3c:eb:99:95:44:a7:be:1a:2e:0e:a8:
         22:8c:c9:1e:26:99:46:a3:6d:86:14:d3:06:8a:67:42:c9:a1:
         50:b9:65:b1:88:86:f5:41:33:03:23:fc:8c:e7:c4:69:b7:01:
         cc:54:f6:05:a6:c5:9a:1a:d5:5d:17:d2:b9:0e:f3:d2:21:fa:
         84:8e:42:f0:45:05:ef:27:c7:6f:db:d8:9d:ee:2b:8d:e9:55:
         72:e4:7b:e5:9f:fe:29:f0:3a:32:ed:60:c7:b1:4c:39:86:26:
         17:c5:ae:98:4a:0a:98:61:7c:39:d5:df:16:f4:d0:0b:d4:f2:
         1d:3c:24:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ/v2rgwTgX5liEqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MzMyZmJiNDMtN2I4ZS00ODg4LWE4OGUtMzY0MTk0ZTg0NDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh5A78lrh8opNzEiHcQH4h5bpmvnfgM9RvN5
FUMrYtaBuXP7w5NnrVXzgcfgtdzlkNdPRcmaMK2PTRFvl134WDDUJpWVfwgZxrVN
dGt+HMpzQ1L0cIwonp5Kjgg8g6B/XjRe+i/GJ0yU2uLWpEemMeyFWrwHyIZriZy2
LManNVUuw6+wy9QsKlm7AfuT8zHIWqUK9oFkIDRWin1B0XQjbBxVlaeeHQlvs9GC
6JeMrwfo0LqERLz9KnnZKaiAYnyv1CeEjH0oR4+4hzyHd3dJPX8ujc/iJvEmVRWy
pl/Bx60G5ki19gM9Q0aXN5hvLwvrhy1oRMsAc2O/JpglAkrIOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/7AO0BpX/cMMFO3WAAYIHylfkVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmIzMGI0ODMtMjgyNC0z
MGJiLWJjYjQtMmMxMWVkYjUxMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIU0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7pWMKVjlbosccuh+O88mDrHm9j+8Nw0vSCKPOmTYAOIFPDIUzVQF0/
M4xLo5Q+JevFJC05El6oCQPlhQdkLiNOEQdYxOcypSV97YOAQ73r+LqgFOJqX7qo
YnPIEaT2tkdcptqnNGbc89LTX6KoeNO7zc4RgIAVdXgjSPOrF1R5iiu5qBk865mV
RKe+Gi4OqCKMyR4mmUajbYYU0waKZ0LJoVC5ZbGIhvVBMwMj/IznxGm3AcxU9gWm
xZoa1V0X0rkO89Ih+oSOQvBFBe8nx2/b2J3uK43pVXLke+Wf/inwOjLtYMexTDmG
JhfFrphKCphhfDnV3xb00AvU8h08JNc=
-----END CERTIFICATE-----