Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47d6018b-cc2f-3e6c-921a-6ce8e4b88a1b.roa
File:                     47d6018b-cc2f-3e6c-921a-6ce8e4b88a1b.roa (raw, json)
Hash identifier:          3wExAPA43sK1DeU+tCf4LDqrQMtLt0ccJ1nAH8hDWK0=
Subject key identifier:   4C:D9:4A:4B:EE:F5:22:76:FA:B6:18:C7:CD:65:5B:D5:14:2A:1C:C9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F53D245B9A73CF54D7ABC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47d6018b-cc2f-3e6c-921a-6ce8e4b88a1b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f5:3d:24:5b:9a:73:cf:54:d7:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=31e7444b-5db7-47db-ad76-ca193a44e3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b4:ef:b8:b8:54:e9:f5:ca:62:ec:5c:11:6d:
                    28:bc:53:7d:57:6f:b5:2a:a4:c9:58:ea:78:b6:60:
                    45:2a:4d:2b:96:a5:fc:73:ca:8e:58:66:e3:32:a8:
                    fe:cf:b8:70:1b:e9:03:0c:77:98:e9:3c:71:26:2e:
                    85:02:05:e6:6b:22:fa:80:e0:9e:86:c9:f1:c8:ba:
                    3b:e5:18:d5:70:1d:66:84:70:da:1b:30:2b:6e:ee:
                    d3:6e:a3:e2:45:91:a9:a0:01:22:1a:f7:a2:6d:c0:
                    62:92:d6:5d:b9:2a:98:58:df:f1:7c:b4:d0:cd:05:
                    b6:3d:e3:7b:fd:40:de:84:c5:0d:34:a4:32:38:17:
                    9b:f1:2a:14:4c:90:da:4d:92:cc:28:3e:65:10:0d:
                    fb:d9:dc:2e:e2:3f:a3:5e:25:1e:b1:e6:97:22:a3:
                    a1:c4:e4:d3:9a:19:59:f0:d5:ac:bb:b3:f1:d6:23:
                    d4:f8:80:00:6c:cf:ad:e6:44:ee:d7:be:60:ab:11:
                    6c:c0:89:26:a2:3f:55:2c:d7:34:71:6c:69:60:b2:
                    e1:6e:56:b0:16:8e:43:ee:f0:1e:4a:87:84:2b:52:
                    65:d8:b6:42:c7:1b:05:98:76:b9:34:c8:91:c3:16:
                    d9:9b:d6:95:69:26:e9:14:79:3d:f6:70:4f:7d:4b:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D9:4A:4B:EE:F5:22:76:FA:B6:18:C7:CD:65:5B:D5:14:2A:1C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47d6018b-cc2f-3e6c-921a-6ce8e4b88a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:84:2c:86:52:60:b0:54:65:56:57:f7:02:dd:42:3c:20:50:
         19:a8:a9:83:ea:a9:e3:60:aa:94:4f:e8:2c:94:c7:00:51:58:
         09:04:63:4d:72:69:00:53:4c:cd:24:72:a5:88:f9:08:5b:48:
         f0:a9:3e:c5:db:c9:76:6f:b7:aa:4e:d8:d3:e8:70:e5:63:43:
         39:3e:b3:6a:7b:5a:fd:50:09:aa:c1:0b:6c:76:6f:9d:55:05:
         4f:06:20:3e:82:90:54:53:83:db:59:2d:15:45:bc:da:ef:e1:
         77:62:f6:37:bd:93:89:7f:6c:7f:e0:76:97:f1:e8:65:66:e1:
         ab:1b:ea:2c:60:72:2d:8a:be:19:02:20:c7:7e:f6:5e:c0:1b:
         16:92:70:58:c8:42:60:d4:9f:99:9e:6c:66:08:8b:cb:67:e4:
         17:c3:3b:dd:ed:e2:c2:45:7f:93:b4:39:18:e6:0c:51:ec:2d:
         c9:38:28:68:18:65:88:e1:66:7a:14:d4:11:c6:80:c1:ee:18:
         80:e8:0c:c2:d5:eb:97:ef:c9:3f:bb:ec:08:f0:fa:88:b9:96:
         7a:f5:7a:ba:07:f9:8a:ac:78:4a:c4:1f:53:63:99:60:25:62:
         0f:3a:90:ab:34:03:fb:7c:86:99:94:ec:13:d6:ff:dc:db:ff:
         b1:8b:20:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ9T0kW5pzz1TXq8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MzFlNzQ0NGItNWRiNy00N2RiLWFkNzYtY2ExOTNhNDRlM2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57TvuLhU6fXKYuxcEW0ovFN9V2+1KqTJWOp4
tmBFKk0rlqX8c8qOWGbjMqj+z7hwG+kDDHeY6TxxJi6FAgXmayL6gOCehsnxyLo7
5RjVcB1mhHDaGzArbu7TbqPiRZGpoAEiGveibcBiktZduSqYWN/xfLTQzQW2PeN7
/UDehMUNNKQyOBeb8SoUTJDaTZLMKD5lEA372dwu4j+jXiUeseaXIqOhxOTTmhlZ
8NWsu7Px1iPU+IAAbM+t5kTu175gqxFswIkmoj9VLNc0cWxpYLLhblawFo5D7vAe
SoeEK1Jl2LZCxxsFmHa5NMiRwxbZm9aVaSbpFHk99nBPfUvevwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEzZSkvu9SJ2+rYYx81lW9UUKhzJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDdkNjAxOGItY2MyZi0z
ZTZjLTkyMWEtNmNlOGU0Yjg4YTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACuELIZSYLBUZVZX9wLdQjwgUBmoqYPqqeNgqpRP6CyUxwBRWAkEY01y
aQBTTM0kcqWI+QhbSPCpPsXbyXZvt6pO2NPocOVjQzk+s2p7Wv1QCarBC2x2b51V
BU8GID6CkFRTg9tZLRVFvNrv4Xdi9je9k4l/bH/gdpfx6GVm4asb6ixgci2KvhkC
IMd+9l7AGxaScFjIQmDUn5mebGYIi8tn5BfDO93t4sJFf5O0ORjmDFHsLck4KGgY
ZYjhZnoU1BHGgMHuGIDoDMLV65fvyT+77Ajw+oi5lnr1eroH+YqseErEH1NjmWAl
Yg86kKs0A/t8hpmU7BPW/9zb/7GLIDQ=
-----END CERTIFICATE-----