Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cb6656e-6edf-34de-81cc-8e4946ed11d8.roa
File:                     3cb6656e-6edf-34de-81cc-8e4946ed11d8.roa (raw, json)
Hash identifier:          bBjT/4vNfqses/d0+hwAaS8zjoxlRZgkEDELZEUmbL4=
Subject key identifier:   42:63:E8:F4:62:18:5D:11:31:8E:85:F3:42:03:9C:E4:D8:73:02:DB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A123CC1C3108F84F908A880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cb6656e-6edf-34de-81cc-8e4946ed11d8.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36384
IP address blocks:        104.132.0.0/14 maxlen: 14

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:12:3c:c1:c3:10:8f:84:f9:08:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b17468cd-a079-4d04-bb86-71eee2d7363b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:09:fb:89:2f:b7:df:f5:d8:f5:f8:02:6e:74:
                    20:31:c3:fe:72:8e:f7:e4:83:bb:c9:9e:67:a4:c8:
                    95:3b:9b:c3:fa:b8:4a:10:ad:95:e3:e1:cc:26:bb:
                    a5:fb:c9:10:71:56:9a:61:53:94:f4:d6:57:ef:fe:
                    75:a3:9f:75:0e:ef:11:45:f3:91:77:8e:cf:a3:9c:
                    1e:d2:b9:f2:4e:05:99:cc:cb:df:71:28:01:7b:a0:
                    7b:07:3d:a9:f8:c0:03:5e:7d:dc:ce:33:04:da:7f:
                    10:38:35:f9:2c:4d:db:1c:03:74:94:41:2b:cc:4d:
                    08:f4:e0:7e:aa:e2:61:85:ca:fa:61:9d:ae:a3:04:
                    55:ee:f4:c3:33:c2:91:67:bb:f7:1d:79:c8:d2:99:
                    db:ad:76:f4:cd:5d:f1:94:71:e2:bc:d4:5a:ff:a1:
                    d4:41:f7:16:d7:dd:e1:cd:9e:1c:a6:88:2c:cb:b3:
                    72:c8:23:5d:93:63:74:ed:86:84:d7:12:18:40:e7:
                    53:c8:ab:ae:05:d9:cb:93:5f:2b:0e:05:ef:05:85:
                    23:2f:21:bc:6a:ad:44:8c:7a:9e:b1:6e:1a:ac:4c:
                    3a:e9:3b:52:ef:5f:fa:a8:e0:ce:bf:b8:ab:3b:18:
                    a2:cb:f3:6c:33:a6:77:8c:ac:a6:2a:6c:ec:9f:2c:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:63:E8:F4:62:18:5D:11:31:8E:85:F3:42:03:9C:E4:D8:73:02:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cb6656e-6edf-34de-81cc-8e4946ed11d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ba:cc:aa:b2:03:6a:1f:56:bd:3c:cc:f1:ba:cb:64:d1:6a:
         48:58:5c:59:15:ac:8d:69:ed:90:a3:b9:3f:c1:8b:c3:07:60:
         3a:11:2d:fa:bf:c6:8f:e3:1e:fc:a5:6a:f6:44:c1:2d:5e:4b:
         22:c0:fa:c5:f7:7d:2c:39:40:e0:21:4c:29:6e:06:51:aa:d4:
         9c:f9:1d:b1:ae:23:42:37:a0:72:0b:97:aa:bc:94:06:9e:67:
         d4:8c:b6:ed:ba:2c:1d:7a:61:22:3e:8d:53:ed:46:b8:15:fa:
         4f:d8:ad:12:2a:26:21:6b:5e:da:10:cb:12:28:53:aa:c6:f6:
         d9:c0:54:46:eb:fd:b9:ee:4f:28:99:1a:d1:97:19:0c:41:30:
         de:cc:c2:85:74:03:21:b2:da:de:56:a9:9a:0e:a1:b7:50:8d:
         54:76:3f:93:67:19:09:7a:83:c0:cb:4d:44:50:25:0e:67:7b:
         d2:6f:00:44:c6:a1:8f:aa:6e:3c:16:77:03:80:fc:89:a6:62:
         9d:59:ba:99:b0:65:2e:e0:9b:18:9a:f4:c3:f5:d4:09:43:b2:
         6b:b1:78:a4:7f:60:0d:71:f5:38:a7:40:c9:21:e6:32:50:95:
         a8:22:ae:df:df:f3:dd:25:8b:70:24:5b:74:e1:16:97:63:c8:
         27:44:ce:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----