Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/441cb28c-d105-33c0-a1df-be438a3af74a.roa
File:                     441cb28c-d105-33c0-a1df-be438a3af74a.roa (raw, json)
Hash identifier:          oJ57BAgrJMEMUWJIWi9uYAxAAGpwhIiSfRSRytlp3pA=
Subject key identifier:   29:67:E0:B2:1D:2D:1A:86:16:D9:19:5F:71:8D:70:14:4E:D7:F7:B1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0FE10696D7721DF04E9300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/441cb28c-d105-33c0-a1df-be438a3af74a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0f:e1:06:96:d7:72:1d:f0:4e:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=946024bc-7beb-43e6-b970-e8d6626575b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:df:8a:84:6a:6f:90:ef:7a:9f:ef:aa:51:84:
                    b4:23:66:59:3b:42:8b:f7:fb:5f:91:c5:be:a4:6a:
                    08:dc:df:65:6b:86:78:d0:62:88:c5:0a:4e:81:29:
                    e9:aa:56:db:08:73:6e:5b:2c:fc:40:25:4e:f8:af:
                    ed:59:28:a1:7f:0e:e3:42:66:ea:97:2f:b1:b4:01:
                    ce:1f:94:60:09:46:fb:34:b3:69:26:67:37:7e:03:
                    c3:cf:e6:d3:8b:de:81:cf:05:0c:b9:6f:50:a8:0b:
                    09:c1:6f:77:9b:aa:16:b0:e5:ce:73:11:74:11:52:
                    59:61:54:b0:eb:00:dd:4d:9d:52:a2:91:2e:85:ae:
                    76:4e:5f:40:fb:23:a3:ae:0e:8f:9b:e6:1d:58:49:
                    d4:ef:ee:16:56:9e:2f:23:a4:99:64:01:41:5e:71:
                    9f:c9:6b:19:1b:c8:30:2f:71:18:95:e3:19:32:06:
                    ea:df:b5:9f:72:e7:58:14:df:55:6f:e7:d1:c0:78:
                    10:76:ca:7e:18:74:dd:d0:87:29:c7:da:c8:15:1e:
                    0c:3a:db:00:d5:ca:ab:eb:95:19:c4:5f:fc:5e:23:
                    d4:ea:90:72:53:84:49:9e:44:2c:c4:e5:fa:f0:21:
                    c5:40:be:5b:95:14:c6:03:90:71:00:75:77:5d:65:
                    3c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:67:E0:B2:1D:2D:1A:86:16:D9:19:5F:71:8D:70:14:4E:D7:F7:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/441cb28c-d105-33c0-a1df-be438a3af74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:45:4d:e6:40:da:0c:36:e3:cc:1b:48:ac:bb:b1:83:75:26:
         23:7b:fc:60:ae:05:3d:d3:73:0f:31:d4:59:3c:17:10:91:38:
         fa:6e:6a:d2:d4:64:79:1a:f7:59:2b:21:cd:05:7f:85:be:5b:
         63:eb:24:c6:67:83:e1:b1:93:1d:ec:ee:65:ae:bb:e0:a8:8e:
         84:0a:5f:f1:3d:53:2f:43:28:16:ca:f7:55:22:10:5b:61:6a:
         25:58:bf:67:bb:4c:8d:c7:ff:4a:dc:56:f8:a2:ce:95:88:4e:
         15:86:25:3b:14:55:dc:84:7a:aa:c8:00:22:06:7d:14:af:5f:
         a1:ea:78:da:84:7e:8d:de:d2:da:25:d7:2f:ad:3b:2c:11:5d:
         7b:fc:32:60:11:c6:d3:64:94:c7:c3:0a:cf:8b:3c:35:23:fa:
         c9:b0:ac:21:bf:73:f4:6d:81:f8:54:93:fb:73:ea:68:e2:c8:
         98:66:51:64:98:69:b7:32:dd:5f:10:0d:53:70:e8:a6:4c:a2:
         58:e6:1b:70:db:e2:69:38:f4:30:d1:fd:a3:93:6f:72:a3:f8:
         fa:f0:a3:3c:db:b9:2a:7b:5e:ea:87:c1:d3:f4:71:37:51:20:
         23:d4:d0:d0:c0:a3:87:ea:c9:83:c9:75:c2:32:a4:55:39:6d:
         3c:57:d2:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKD+EGltdyHfBOkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OTQ2MDI0YmMtN2JlYi00M2U2LWI5NzAtZThkNjYyNjU3NWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd+KhGpvkO96n++qUYS0I2ZZO0KL9/tfkcW+
pGoI3N9la4Z40GKIxQpOgSnpqlbbCHNuWyz8QCVO+K/tWSihfw7jQmbqly+xtAHO
H5RgCUb7NLNpJmc3fgPDz+bTi96BzwUMuW9QqAsJwW93m6oWsOXOcxF0EVJZYVSw
6wDdTZ1SopEuha52Tl9A+yOjrg6Pm+YdWEnU7+4WVp4vI6SZZAFBXnGfyWsZG8gw
L3EYleMZMgbq37WfcudYFN9Vb+fRwHgQdsp+GHTd0Icpx9rIFR4MOtsA1cqr65UZ
xF/8XiPU6pByU4RJnkQsxOX68CHFQL5blRTGA5BxAHV3XWU8nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCln4LIdLRqGFtkZX3GNcBRO1/exMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDQxY2IyOGMtZDEwNS0z
M2MwLWExZGYtYmU0MzhhM2FmNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtFTeZA2gw248wbSKy7sYN1JiN7/GCuBT3Tcw8x1Fk8FxCROPpuatLU
ZHka91krIc0Ff4W+W2PrJMZng+Gxkx3s7mWuu+CojoQKX/E9Uy9DKBbK91UiEFth
aiVYv2e7TI3H/0rcVviizpWIThWGJTsUVdyEeqrIACIGfRSvX6HqeNqEfo3e0tol
1y+tOywRXXv8MmARxtNklMfDCs+LPDUj+smwrCG/c/RtgfhUk/tz6mjiyJhmUWSY
abcy3V8QDVNw6KZMoljmG3Db4mk49DDR/aOTb3Kj+PrwozzbuSp7XuqHwdP0cTdR
ICPU0NDAo4fqyYPJdcIypFU5bTxX0jY=
-----END CERTIFICATE-----