Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3517294c-05c6-3dcb-a5b6-20885eeffd0a.roa
File:                     3517294c-05c6-3dcb-a5b6-20885eeffd0a.roa (raw, json)
Hash identifier:          sCHUFU3c5sZ/thjUWMKQfAYI5rXmWCuLdexMwRWn03U=
Subject key identifier:   BC:D9:1F:25:5F:CF:62:07:04:3C:C1:C1:C3:22:DE:4B:6D:BD:5C:DC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285844A3A1261245C64F4A691547A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3517294c-05c6-3dcb-a5b6-20885eeffd0a.roa
Signing time:             Sun 21 Jan 2024 12:00:00 +0000
ROA not before:           Sun 21 Jan 2024 12:00:00 +0000
ROA not after:            Wed 04 Jun 2025 04:00:00 +0000
asID:                     36411
IP address blocks:        104.135.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a3:a1:26:12:45:c6:4f:4a:69:15:47:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 21 12:00:00 2024 GMT
            Not After : Jun  4 04:00:00 2025 GMT
        Subject: CN=cecd4e36-c97b-4d04-a2c7-a35435667633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bd:b4:f1:77:2f:d2:13:8b:11:42:37:72:4d:
                    24:84:47:e4:69:a5:07:a4:af:55:bd:cf:60:aa:b3:
                    a0:e9:1b:3e:26:1b:7f:f1:92:85:fb:2d:dd:dd:46:
                    6f:4a:f8:67:61:1f:b2:17:44:f6:da:59:98:6d:59:
                    c3:88:76:78:10:71:97:3e:6b:c1:f9:fc:f6:55:94:
                    0c:2f:d4:65:d1:a1:26:b0:91:5c:50:0b:8e:a2:c9:
                    ed:21:2c:b3:bf:28:24:bb:94:a6:72:f0:a3:01:34:
                    31:0e:c3:07:5d:83:49:17:b6:5c:71:2f:21:13:47:
                    2d:19:28:38:f9:49:e7:28:de:bc:15:67:88:b4:f1:
                    4a:92:b3:b5:f4:5f:14:2c:0c:61:f3:00:44:8e:65:
                    4f:b2:9e:7a:2f:f5:df:02:11:0c:2c:32:55:1b:94:
                    e2:01:61:61:d8:21:55:bb:b2:89:b1:52:3b:bc:e0:
                    1e:76:e2:ab:67:6c:25:38:a7:3a:ed:fb:ca:cc:9f:
                    85:38:eb:24:c8:37:bb:a5:fe:92:56:23:b8:95:00:
                    df:c7:ae:bc:49:ba:ac:67:ea:76:3e:a4:85:6f:d9:
                    4e:22:8b:e2:37:98:71:f0:42:ed:a1:23:ec:ad:f4:
                    a9:e0:07:7a:b9:f0:c2:ff:97:e3:f4:7b:00:8b:14:
                    50:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D9:1F:25:5F:CF:62:07:04:3C:C1:C1:C3:22:DE:4B:6D:BD:5C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3517294c-05c6-3dcb-a5b6-20885eeffd0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a7:f6:f9:ea:14:50:a6:29:bd:ea:b0:6b:8f:07:ad:c4:5c:
         ad:95:4c:cc:6c:89:39:4e:f7:45:6b:d4:82:8c:63:c8:db:65:
         ca:b2:00:75:75:94:e3:46:30:cc:1c:1b:c6:68:1a:8f:69:77:
         e9:97:46:93:69:5b:8f:cc:3f:a1:d2:56:2d:dd:89:87:0e:e9:
         bd:e9:ce:15:50:6b:e0:69:9f:90:62:a8:86:d0:9e:f3:d3:3b:
         fe:fe:67:1d:88:5b:ac:4f:7a:f1:14:88:cf:e1:6f:0b:15:11:
         74:c4:eb:02:ce:d3:93:43:b2:c8:3b:d6:06:45:c0:8e:4b:6c:
         83:c6:01:e0:99:56:5b:14:8b:c8:82:8b:9b:51:96:d1:d5:e0:
         44:3f:d8:c2:eb:10:44:51:01:14:02:c1:6f:16:0f:f3:4f:f4:
         63:af:2e:67:4f:da:ac:7d:73:4d:1f:c2:5c:65:ad:26:af:1c:
         aa:50:04:a6:68:78:12:30:01:e6:0f:f3:a8:88:bc:2c:95:5f:
         4b:d1:af:89:b0:d5:ea:6e:8b:0f:c5:d3:5f:b2:b9:19:89:6c:
         d6:a4:ed:eb:50:7b:c8:a1:0a:b6:20:67:8a:43:8d:6a:f3:7a:
         80:c2:88:9b:12:65:d9:c1:be:dc:95:6c:6e:2e:22:86:b9:9a:
         97:31:a4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----