Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/49538e1b-f73b-3f2a-829a-ae5d580f72ca.roa
File:                     49538e1b-f73b-3f2a-829a-ae5d580f72ca.roa (raw, json)
Hash identifier:          wiRW35997WmJ/DQudgrno6tfF+FgQ4yWF0vOnZr2U/c=
Subject key identifier:   2B:B6:35:A2:2C:7A:ED:C5:96:B1:9C:A0:B5:93:CC:40:83:E2:99:3D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0F0596491733222F1CC900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/49538e1b-f73b-3f2a-829a-ae5d580f72ca.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.242.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0f:05:96:49:17:33:22:2f:1c:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3f913e4b-d358-48d7-8e43-df657253e35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:19:82:bf:27:36:f3:c0:c3:b6:95:99:50:15:
                    ad:ed:29:25:be:c3:fa:60:30:cc:7f:3a:18:4d:b7:
                    36:0b:ad:f6:3a:68:6f:68:49:ac:a4:5e:14:8c:75:
                    44:f7:98:af:ae:4c:09:ea:12:a9:47:20:37:73:1f:
                    d5:8d:8b:73:3f:90:a1:f2:08:c7:ad:03:65:33:6a:
                    37:8d:46:49:8a:2e:03:99:a2:59:84:f5:f2:4f:55:
                    04:b4:95:30:93:54:f4:2b:0c:42:b2:15:5a:11:e9:
                    d9:38:36:d2:b1:85:5d:fb:67:85:7d:4e:24:ed:4f:
                    e5:16:9c:5b:18:85:78:29:b9:8e:23:82:6f:0e:26:
                    1a:61:b2:ab:c5:05:54:6e:04:ab:2c:2d:54:b8:a8:
                    0c:12:5f:3f:a2:d2:89:ac:df:d5:df:45:c2:f6:bb:
                    d7:c2:5e:59:f5:32:da:8b:f2:ed:43:49:9a:47:b3:
                    94:1f:8f:19:65:f0:ae:b7:6b:0c:41:54:e3:44:03:
                    e3:9c:34:16:1a:10:6c:87:a4:53:ec:b1:b1:20:53:
                    c1:53:cc:dc:9b:99:51:ae:bb:5a:05:85:ea:24:a8:
                    40:6d:df:d3:68:e1:0e:a9:f7:b9:3d:5d:24:07:da:
                    58:72:55:c2:22:14:e2:87:44:c9:21:12:e0:2c:0d:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B6:35:A2:2C:7A:ED:C5:96:B1:9C:A0:B5:93:CC:40:83:E2:99:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/49538e1b-f73b-3f2a-829a-ae5d580f72ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:49:e0:9c:a9:f1:83:4e:d3:a8:12:bc:d7:97:e1:d0:a9:3f:
         a3:ff:0d:40:13:84:0e:6d:d2:02:ab:2a:6e:58:86:4e:49:fb:
         d9:25:af:3f:8e:1f:54:44:40:22:f1:86:8d:19:c0:c7:6f:b6:
         29:e2:9f:67:30:f6:51:90:6c:2a:e0:4c:1d:bf:c3:1d:87:a6:
         3a:1b:08:98:73:62:06:91:b4:3a:9f:ee:e6:88:34:2b:0e:3b:
         da:e7:87:fb:15:99:62:b1:c9:11:99:96:03:8b:df:f1:37:a2:
         76:44:f4:8a:81:ce:e3:60:97:a1:fc:ec:cb:94:47:5b:91:ec:
         f3:fe:d2:15:89:6c:b6:67:65:85:79:c4:4d:69:e8:78:5c:d3:
         dd:28:90:a7:7c:00:22:cd:af:a6:12:e5:40:29:ea:e8:c7:60:
         e9:cf:dc:d6:18:f3:f9:59:61:d4:58:8f:68:ef:95:c3:80:63:
         4d:00:c6:e2:95:e2:bd:cc:59:bc:6f:c0:f1:55:68:17:c9:8c:
         95:d1:64:a9:11:f5:4e:85:fe:1e:a6:3d:b4:59:85:73:e0:56:
         b9:f6:86:6a:62:5c:10:b1:c9:86:7d:75:6d:f9:a5:71:70:5b:
         09:79:6b:c8:02:f6:ba:6b:11:b9:ee:8e:fd:e9:65:2a:20:b2:
         27:ce:5a:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKDwWWSRczIi8cyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
M2Y5MTNlNGItZDM1OC00OGQ3LThlNDMtZGY2NTcyNTNlMzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxmCvyc288DDtpWZUBWt7SklvsP6YDDMfzoY
Tbc2C632OmhvaEmspF4UjHVE95ivrkwJ6hKpRyA3cx/VjYtzP5Ch8gjHrQNlM2o3
jUZJii4DmaJZhPXyT1UEtJUwk1T0KwxCshVaEenZODbSsYVd+2eFfU4k7U/lFpxb
GIV4KbmOI4JvDiYaYbKrxQVUbgSrLC1UuKgMEl8/otKJrN/V30XC9rvXwl5Z9TLa
i/LtQ0maR7OUH48ZZfCut2sMQVTjRAPjnDQWGhBsh6RT7LGxIFPBU8zcm5lRrrta
BYXqJKhAbd/TaOEOqfe5PV0kB9pYclXCIhTih0TJIRLgLA0zGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCu2NaIseu3FlrGcoLWTzECD4pk9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDk1MzhlMWItZjczYi0z
ZjJhLTgyOWEtYWU1ZDU4MGY3MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKlJ4Jyp8YNO06gSvNeX4dCpP6P/DUAThA5t0gKrKm5Yhk5J+9klrz+O
H1REQCLxho0ZwMdvtinin2cw9lGQbCrgTB2/wx2HpjobCJhzYgaRtDqf7uaINCsO
O9rnh/sVmWKxyRGZlgOL3/E3onZE9IqBzuNgl6H87MuUR1uR7PP+0hWJbLZnZYV5
xE1p6Hhc090okKd8ACLNr6YS5UAp6ujHYOnP3NYY8/lZYdRYj2jvlcOAY00AxuKV
4r3MWbxvwPFVaBfJjJXRZKkR9U6F/h6mPbRZhXPgVrn2hmpiXBCxyYZ9dW35pXFw
Wwl5a8gC9rprEbnujv3pZSogsifOWls=
-----END CERTIFICATE-----