Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3918e378-2206-3f9f-a156-9c6afe7ec7a5.roa
File:                     3918e378-2206-3f9f-a156-9c6afe7ec7a5.roa (raw, json)
Hash identifier:          6TeuWX2sKOAt/aFB6Ms24F2BjUuAJ41CYHvnyawk9ak=
Subject key identifier:   53:BC:64:52:94:4D:3F:F0:25:38:31:F0:6A:65:BC:F9:59:5D:68:0C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A116AD03C6BC032D6F72340
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3918e378-2206-3f9f-a156-9c6afe7ec7a5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:11:6a:d0:3c:6b:c0:32:d6:f7:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=561548c5-4a86-4db0-8386-68b0a79e89ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2d:21:64:8e:70:da:7c:dc:88:37:7b:63:2a:
                    35:bc:6f:14:54:cf:47:07:13:34:2c:cf:09:7d:d2:
                    b9:af:ce:d6:ca:27:2d:2b:e2:a7:da:ed:75:81:9d:
                    ab:d6:c7:43:fb:88:50:73:88:e8:4c:65:9d:d0:bb:
                    4e:c6:25:e7:a8:05:64:f0:5f:11:21:cc:61:3c:55:
                    d0:b9:20:77:41:af:d1:dd:f3:fd:66:a8:da:ae:30:
                    b4:fe:e6:9f:e6:69:c4:7b:9a:7a:51:33:f3:6d:50:
                    a2:77:6a:14:10:38:82:c8:fe:c8:3d:7d:74:34:28:
                    d1:ac:a5:c6:62:7a:ac:56:d4:54:61:0e:b6:fb:92:
                    7e:24:c1:21:aa:39:f5:75:4f:4d:e6:d4:e3:d9:1f:
                    49:ba:36:96:bd:11:83:60:1c:eb:d0:0c:98:42:d5:
                    a1:55:c4:c7:ba:c2:95:c2:4a:5b:4c:85:aa:b4:7a:
                    ad:5d:de:d3:ee:26:b7:ce:a8:79:9f:72:6b:b7:f6:
                    3e:01:f3:d1:4b:35:26:83:f3:7f:6b:44:30:7a:43:
                    79:1a:99:cd:06:e8:ab:33:cb:df:8d:b2:f8:39:da:
                    28:65:9b:5f:42:e9:76:82:45:35:76:6c:28:7f:82:
                    0a:0f:eb:ca:f8:ba:6e:6d:ec:7e:8f:16:c7:fe:d5:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BC:64:52:94:4D:3F:F0:25:38:31:F0:6A:65:BC:F9:59:5D:68:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3918e378-2206-3f9f-a156-9c6afe7ec7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:af:4e:13:26:14:f4:3d:51:14:96:a0:0a:24:52:7d:0b:8c:
         8a:1c:f9:a0:1f:7a:f5:06:6a:45:a0:22:d5:ce:f1:68:a9:d8:
         b4:e3:5d:ee:02:a5:44:02:c3:84:90:04:ec:20:21:3d:33:2a:
         12:d6:eb:dd:72:b4:2f:8a:5f:9f:a8:b7:98:53:bc:4c:0f:02:
         c2:a3:ea:dc:f5:1b:90:67:23:38:43:ec:ba:03:2b:8d:65:52:
         6b:69:2c:34:05:27:55:d6:a3:1e:03:d6:f9:42:77:19:00:7d:
         66:f2:d6:ef:af:22:d0:16:36:0a:52:af:75:37:7c:46:03:a1:
         85:39:40:53:09:ed:04:b7:da:ed:59:71:0f:b7:f0:39:39:68:
         bc:0b:38:da:38:ae:74:57:e5:94:b7:18:a8:0d:81:e9:64:a6:
         3f:07:e3:83:55:3d:6d:3e:57:f4:e0:bc:b7:23:b6:c6:bd:9f:
         3b:c6:99:58:6a:b7:77:0c:83:52:81:f5:f5:04:43:4f:69:6e:
         4f:ec:ed:22:4b:30:58:f3:bf:1b:59:6a:af:ef:61:09:6a:25:
         e1:69:66:94:88:ca:19:db:e8:b0:4a:6b:56:25:ba:fa:f3:75:
         7e:74:7a:f5:9d:65:5f:a6:28:08:20:b5:46:92:e5:02:c3:54:
         13:d6:58:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKEWrQPGvAMtb3I0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTYxNTQ4YzUtNGE4Ni00ZGIwLTgzODYtNjhiMGE3OWU4OWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC0hZI5w2nzciDd7Yyo1vG8UVM9HBxM0LM8J
fdK5r87WyictK+Kn2u11gZ2r1sdD+4hQc4joTGWd0LtOxiXnqAVk8F8RIcxhPFXQ
uSB3Qa/R3fP9ZqjarjC0/uaf5mnEe5p6UTPzbVCid2oUEDiCyP7IPX10NCjRrKXG
YnqsVtRUYQ62+5J+JMEhqjn1dU9N5tTj2R9JujaWvRGDYBzr0AyYQtWhVcTHusKV
wkpbTIWqtHqtXd7T7ia3zqh5n3Jrt/Y+AfPRSzUmg/N/a0QwekN5GpnNBuirM8vf
jbL4OdooZZtfQul2gkU1dmwof4IKD+vK+Lpubex+jxbH/tX/DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFO8ZFKUTT/wJTgx8GplvPlZXWgMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzkxOGUzNzgtMjIwNi0z
ZjlmLWExNTYtOWM2YWZlN2VjN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKavThMmFPQ9URSWoAokUn0LjIoc+aAfevUGakWgItXO8Wip2LTjXe4C
pUQCw4SQBOwgIT0zKhLW691ytC+KX5+ot5hTvEwPAsKj6tz1G5BnIzhD7LoDK41l
UmtpLDQFJ1XWox4D1vlCdxkAfWby1u+vItAWNgpSr3U3fEYDoYU5QFMJ7QS32u1Z
cQ+38Dk5aLwLONo4rnRX5ZS3GKgNgelkpj8H44NVPW0+V/TgvLcjtsa9nzvGmVhq
t3cMg1KB9fUEQ09pbk/s7SJLMFjzvxtZaq/vYQlqJeFpZpSIyhnb6LBKa1Yluvrz
dX50evWdZV+mKAggtUaS5QLDVBPWWNs=
-----END CERTIFICATE-----