Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3695d941-3901-3c9f-926b-cbe70ee56150.roa
File:                     3695d941-3901-3c9f-926b-cbe70ee56150.roa (raw, json)
Hash identifier:          HLKMBmkgLBI8S1f2B4qivMzPMqTZV53JLSqs06XK4jY=
Subject key identifier:   9D:3E:46:CA:8A:4F:EA:BD:7E:06:67:FA:1B:E6:6A:AC:62:59:E4:36
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A261903D917E3C506852800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3695d941-3901-3c9f-926b-cbe70ee56150.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:26:19:03:d9:17:e3:c5:06:85:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f2c29a91-a3ae-48dd-bdc5-2034135a734a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:4f:25:a8:31:5e:f8:fc:c4:19:30:93:b2:
                    97:ff:63:7a:fb:8e:eb:e9:bb:09:2b:ad:f3:77:f8:
                    43:3f:38:a7:f0:b0:f9:0e:3c:7a:61:63:a1:c9:72:
                    09:72:3a:b4:d5:98:ee:6e:c9:69:6a:e9:ec:1a:28:
                    1b:b9:96:7a:35:b2:33:b6:62:8b:dc:bc:42:17:b8:
                    ba:2d:12:7b:f0:1b:9d:b3:37:d6:6e:ce:40:7c:24:
                    16:53:02:ff:7b:fe:42:17:1e:79:97:e6:32:bd:1a:
                    ae:6d:92:21:b1:47:a9:94:f5:1f:44:21:c3:4e:f2:
                    06:5f:05:f0:47:15:5f:52:8d:da:d2:1a:b7:38:05:
                    6d:45:09:db:2c:de:70:66:fb:52:c1:fb:5a:6c:07:
                    df:31:00:83:e9:38:02:f4:9b:ae:77:f8:34:eb:dd:
                    f0:5b:fa:60:cb:7f:eb:d5:48:23:64:8a:32:25:b4:
                    8e:ec:bc:ce:84:ba:84:f9:7f:a6:10:fc:71:4e:db:
                    91:d5:bd:1c:4f:ce:9b:80:95:14:1f:da:c8:e5:71:
                    53:b1:63:a2:90:14:04:d5:13:17:4b:96:e0:5b:b9:
                    69:ac:a0:05:ee:4d:c5:38:5b:c3:09:cb:b4:e3:6c:
                    fd:ef:09:41:c2:a0:9f:bb:74:c6:0f:d4:a4:06:26:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3E:46:CA:8A:4F:EA:BD:7E:06:67:FA:1B:E6:6A:AC:62:59:E4:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3695d941-3901-3c9f-926b-cbe70ee56150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:22:82:57:3b:0f:b9:03:64:65:40:d3:cb:a4:ea:c2:b4:47:
         2a:30:71:81:72:c8:a5:8e:3d:88:84:b2:6a:c6:3e:aa:3c:8c:
         53:51:e0:cf:2a:88:10:d3:35:ab:e5:85:40:9b:8e:04:7f:b2:
         e4:04:c8:05:6d:fd:6b:39:65:80:db:ec:28:ad:92:91:d9:11:
         35:8e:f6:70:01:84:9f:b6:9d:e4:e3:4e:3e:d3:0c:a9:0b:8e:
         6b:d5:ec:af:ef:f8:79:a8:ac:4d:5e:4a:88:a3:f1:3c:75:59:
         d4:88:fd:cd:b3:dd:08:46:29:e5:bb:53:39:71:43:e5:5a:21:
         a5:c3:99:24:c3:6e:24:b3:3a:2d:a7:ab:56:dc:82:88:c1:f9:
         10:a3:7e:ce:97:dd:40:fe:dc:cb:7a:c1:38:40:e7:fc:15:b0:
         84:d3:4c:c2:d4:d5:fa:fe:1d:3f:02:f1:73:c1:f5:c7:9a:4e:
         d8:d7:dc:cd:f7:57:5b:ba:b0:13:54:58:d5:6c:d3:e2:57:84:
         84:66:3a:36:33:df:59:e7:51:af:63:62:26:1f:f0:dd:9d:a5:
         29:6e:84:ea:81:db:41:4f:96:af:d5:c5:de:53:8d:cf:41:f2:
         3b:7c:3f:73:f3:2b:3a:ea:bf:49:e3:2b:fe:04:37:4a:31:4f:
         09:da:dc:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJhkD2RfjxQaFKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjJjMjlhOTEtYTNhZS00OGRkLWJkYzUtMjAzNDEzNWE3MzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPFPJagxXvj8xBkwk7KX/2N6+47r6bsJK63z
d/hDPzin8LD5Djx6YWOhyXIJcjq01ZjubslpaunsGigbuZZ6NbIztmKL3LxCF7i6
LRJ78BudszfWbs5AfCQWUwL/e/5CFx55l+YyvRqubZIhsUeplPUfRCHDTvIGXwXw
RxVfUo3a0hq3OAVtRQnbLN5wZvtSwftabAffMQCD6TgC9Juud/g0693wW/pgy3/r
1UgjZIoyJbSO7LzOhLqE+X+mEPxxTtuR1b0cT86bgJUUH9rI5XFTsWOikBQE1RMX
S5bgW7lprKAF7k3FOFvDCcu042z97wlBwqCfu3TGD9SkBiYRrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ0+RsqKT+q9fgZn+hvmaqxiWeQ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzY5NWQ5NDEtMzkwMS0z
YzlmLTkyNmItY2JlNzBlZTU2MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACAiglc7D7kDZGVA08uk6sK0RyowcYFyyKWOPYiEsmrGPqo8jFNR4M8q
iBDTNavlhUCbjgR/suQEyAVt/Ws5ZYDb7CitkpHZETWO9nABhJ+2neTjTj7TDKkL
jmvV7K/v+HmorE1eSoij8Tx1WdSI/c2z3QhGKeW7UzlxQ+VaIaXDmSTDbiSzOi2n
q1bcgojB+RCjfs6X3UD+3Mt6wThA5/wVsITTTMLU1fr+HT8C8XPB9ceaTtjX3M33
V1u6sBNUWNVs0+JXhIRmOjYz31nnUa9jYiYf8N2dpSluhOqB20FPlq/Vxd5Tjc9B
8jt8P3PzKzrqv0njK/4EN0oxTwna3A8=
-----END CERTIFICATE-----