Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/37b7302d-9700-3325-aee5-a2424cbc0a52.roa
File:                     37b7302d-9700-3325-aee5-a2424cbc0a52.roa (raw, json)
Hash identifier:          07bGX710Flmc+ttAty/MFr0oibFSxdh6FyA81n+8u4I=
Subject key identifier:   B0:57:6D:AA:7D:3E:99:91:15:3A:31:08:DD:0C:A5:84:77:B6:37:F8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A09F91D3B310D37B565A940
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/37b7302d-9700-3325-aee5-a2424cbc0a52.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:09:f9:1d:3b:31:0d:37:b5:65:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b8df42f4-f5f5-4d62-9dcc-9b4135a4c846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:99:b9:c3:d5:aa:54:ba:e0:ac:ad:ed:87:a2:
                    ec:48:1f:bc:ca:70:93:31:bf:b1:c1:c6:4d:c3:bc:
                    8b:ab:79:b9:b5:cb:d5:6d:ef:01:d9:c6:98:84:55:
                    4a:44:3a:7c:c1:cb:77:b3:a6:14:fa:4c:6f:df:85:
                    4b:32:b4:c3:f7:fe:24:30:3a:c4:2a:ae:68:e8:12:
                    3a:01:67:54:26:53:ba:20:7b:40:90:c8:ee:35:75:
                    c6:ac:86:0d:f1:67:8c:ef:88:77:13:13:75:da:fc:
                    b6:65:97:ec:f4:0b:ea:07:08:f2:72:c0:da:fd:3a:
                    c5:4c:0c:d3:e0:fc:6b:28:ed:4a:bc:3a:04:99:90:
                    9d:ed:c7:06:b6:f0:7e:85:a2:1d:d6:a6:eb:b9:72:
                    11:d0:aa:1d:09:46:ef:9d:9a:45:ac:06:11:24:91:
                    48:37:82:95:75:61:b0:1d:b2:52:ae:9c:1a:78:9c:
                    84:df:26:24:f3:d5:05:bf:8c:61:a3:83:03:6b:0f:
                    33:a8:ba:92:57:02:0e:16:84:c7:45:5d:c1:bd:26:
                    c8:cd:ec:55:d0:ac:61:c2:4d:b5:86:3e:8d:7a:ca:
                    7c:4f:4e:95:b7:8b:2e:71:b8:f2:66:db:b7:03:ea:
                    f4:6c:2a:b0:46:34:a1:3c:e2:b3:1a:67:ea:df:86:
                    5d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:57:6D:AA:7D:3E:99:91:15:3A:31:08:DD:0C:A5:84:77:B6:37:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/37b7302d-9700-3325-aee5-a2424cbc0a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a3:54:f9:62:e0:d3:8c:d1:5c:43:a4:03:78:8a:ec:61:87:
         ea:ca:d5:7b:c2:c0:93:da:39:eb:45:2b:34:d0:76:40:ca:db:
         16:60:22:67:9c:37:be:c2:61:3d:d8:7c:d2:0e:09:ad:22:37:
         4b:42:12:38:49:12:7a:8e:a7:c3:2d:7e:86:17:34:32:28:ee:
         7e:2f:5c:50:15:f7:e2:98:46:d3:aa:d0:8e:8a:37:d9:58:74:
         49:db:5e:2a:a9:ca:a3:2a:58:70:2b:fb:30:2c:70:f7:6d:e0:
         ef:55:c5:b3:58:ef:e3:ff:fc:01:a9:7e:38:19:e7:93:85:88:
         74:9b:e3:94:28:d4:8c:a5:c9:55:e8:d7:d3:96:5b:de:9d:a6:
         69:a6:54:c9:1e:b4:43:09:b3:60:0f:00:0f:3b:a5:67:ad:3c:
         1c:09:b2:3d:10:55:4b:a0:38:d7:80:74:f1:86:ed:97:d4:05:
         4e:45:5c:82:35:ab:9d:f1:e8:57:aa:9d:b1:e9:3c:3b:14:67:
         df:a9:84:a9:2b:42:cd:ac:ee:52:c8:fd:cc:33:da:17:a8:76:
         44:2f:d0:f3:e1:59:4b:f3:3b:96:89:0d:42:e0:87:8b:16:4e:
         92:43:88:9d:f3:e6:d4:bf:1a:11:d3:d7:94:32:eb:9b:2d:ea:
         ae:8f:ee:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKCfkdOzENN7VlqUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YjhkZjQyZjQtZjVmNS00ZDYyLTlkY2MtOWI0MTM1YTRjODQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpm5w9WqVLrgrK3th6LsSB+8ynCTMb+xwcZN
w7yLq3m5tcvVbe8B2caYhFVKRDp8wct3s6YU+kxv34VLMrTD9/4kMDrEKq5o6BI6
AWdUJlO6IHtAkMjuNXXGrIYN8WeM74h3ExN12vy2ZZfs9AvqBwjycsDa/TrFTAzT
4PxrKO1KvDoEmZCd7ccGtvB+haId1qbruXIR0KodCUbvnZpFrAYRJJFIN4KVdWGw
HbJSrpwaeJyE3yYk89UFv4xho4MDaw8zqLqSVwIOFoTHRV3BvSbIzexV0Kxhwk21
hj6Nesp8T06Vt4sucbjyZtu3A+r0bCqwRjShPOKzGmfq34ZdSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLBXbap9PpmRFToxCN0MpYR3tjf4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzdiNzMwMmQtOTcwMC0z
MzI1LWFlZTUtYTI0MjRjYmMwYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGjVPli4NOM0VxDpAN4iuxhh+rK1XvCwJPaOetFKzTQdkDK2xZgImec
N77CYT3YfNIOCa0iN0tCEjhJEnqOp8MtfoYXNDIo7n4vXFAV9+KYRtOq0I6KN9lY
dEnbXiqpyqMqWHAr+zAscPdt4O9VxbNY7+P//AGpfjgZ55OFiHSb45Qo1IylyVXo
19OWW96dpmmmVMketEMJs2APAA87pWetPBwJsj0QVUugONeAdPGG7ZfUBU5FXII1
q53x6FeqnbHpPDsUZ9+phKkrQs2s7lLI/cwz2heodkQv0PPhWUvzO5aJDULgh4sW
TpJDiJ3z5tS/GhHT15Qy65st6q6P7q0=
-----END CERTIFICATE-----