Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/49750c5d-2692-304a-a736-5bb8c11fda90.roa
File:                     49750c5d-2692-304a-a736-5bb8c11fda90.roa (raw, json)
Hash identifier:          fu34zHoiVdI0wa/MMZ0YXVsT1yTqbrDThfk0sPwUXAc=
Subject key identifier:   0B:0C:AA:4E:4D:8D:5C:8C:E4:EF:26:C4:A7:A4:C4:54:B1:23:9F:03
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1444C35B86474633C794C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/49750c5d-2692-304a-a736-5bb8c11fda90.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:14:44:c3:5b:86:47:46:33:c7:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=386de44b-b135-4238-8d74-a2e5be13debd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:4d:f9:c2:78:2c:d1:2d:e3:2c:b1:3f:7b:
                    d7:56:ea:e8:d0:fe:b1:42:ec:b7:d7:9c:5b:70:d2:
                    bc:65:6d:b3:94:16:b0:23:82:58:9e:2c:96:7d:d0:
                    bc:86:0c:b5:30:93:e8:d8:5e:a3:06:f4:39:3a:6d:
                    99:dd:c1:70:98:74:03:bc:93:05:56:25:31:5c:69:
                    07:12:f1:e4:c7:cd:ca:51:43:d7:3e:86:9f:79:83:
                    a4:7a:46:48:cd:37:00:04:6e:10:2c:2a:d8:6d:f0:
                    2f:41:0f:ca:ad:dd:2a:f5:15:f4:de:c1:b3:3c:16:
                    fc:0c:c8:b2:75:62:3d:75:b4:11:3b:a1:43:3f:1a:
                    54:40:5d:b9:39:90:53:82:3c:45:6a:72:73:7f:ee:
                    e0:ef:b7:0b:45:fd:98:b1:23:cf:6a:20:80:dd:3c:
                    46:1d:dc:e5:cb:c5:af:ac:3c:48:5c:57:64:ee:65:
                    45:da:6f:79:11:31:f6:2f:ea:d7:dc:26:6b:2e:41:
                    31:77:65:86:a4:e9:44:ef:53:29:86:a7:6d:31:b1:
                    75:e7:c6:31:12:6e:ae:ce:93:0a:fa:21:8d:57:15:
                    32:0d:d7:d5:24:0b:83:a0:8a:af:e8:7f:5c:b1:a8:
                    cd:e1:41:dc:54:7c:5a:d8:b1:9f:41:16:a8:2e:b7:
                    6f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0C:AA:4E:4D:8D:5C:8C:E4:EF:26:C4:A7:A4:C4:54:B1:23:9F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/49750c5d-2692-304a-a736-5bb8c11fda90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:06:e4:27:96:84:32:aa:d0:8c:90:34:c4:da:fe:fa:13:a0:
         6b:da:76:e2:d3:d4:29:ed:d3:a1:0d:23:77:85:82:e0:9f:c6:
         37:56:8b:c5:c9:9f:8b:bb:9b:66:25:af:0b:c9:57:e1:19:ab:
         9d:8a:27:87:79:a0:e2:12:b8:91:b6:fb:28:c2:2c:7c:30:04:
         72:31:cd:0e:4b:5c:97:69:04:99:dc:d5:bb:2a:7d:c1:82:da:
         1a:04:0e:dc:f6:ed:78:5e:96:23:bc:30:87:f0:95:44:dc:5c:
         d9:43:93:2f:c1:6e:de:99:51:32:1f:50:8f:53:bd:71:68:73:
         5b:4e:63:22:61:17:52:fb:30:54:22:36:00:22:b4:ad:e9:25:
         f1:47:87:07:83:69:60:1d:01:83:c3:9a:2f:49:57:24:30:5f:
         64:5c:1f:db:4d:bd:12:5e:aa:7d:df:76:23:0f:c3:60:12:de:
         cc:84:14:53:b3:84:7a:39:69:9b:98:39:e9:4a:24:ef:b9:b2:
         8f:04:61:0d:f1:6f:c3:17:71:ec:16:d5:f8:b5:bd:ce:f2:28:
         2d:ac:20:93:2c:10:02:aa:e2:65:0d:1a:43:52:e6:dd:4e:ae:
         ba:5c:1e:ec:99:8a:0d:4f:74:4d:79:6c:e2:50:23:14:21:7b:
         41:de:36:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFETDW4ZHRjPHlMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
Mzg2ZGU0NGItYjEzNS00MjM4LThkNzQtYTJlNWJlMTNkZWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL1N+cJ4LNEt4yyxP3vXVuro0P6xQuy315xb
cNK8ZW2zlBawI4JYniyWfdC8hgy1MJPo2F6jBvQ5Om2Z3cFwmHQDvJMFViUxXGkH
EvHkx83KUUPXPoafeYOkekZIzTcABG4QLCrYbfAvQQ/Krd0q9RX03sGzPBb8DMiy
dWI9dbQRO6FDPxpUQF25OZBTgjxFanJzf+7g77cLRf2YsSPPaiCA3TxGHdzly8Wv
rDxIXFdk7mVF2m95ETH2L+rX3CZrLkExd2WGpOlE71MphqdtMbF158YxEm6uzpMK
+iGNVxUyDdfVJAuDoIqv6H9csajN4UHcVHxa2LGfQRaoLrdvDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAsMqk5NjVyM5O8mxKekxFSxI58DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDk3NTBjNWQtMjY5Mi0z
MDRhLWE3MzYtNWJiOGMxMWZkYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0G5CeWhDKq0IyQNMTa/voToGvaduLT1Cnt06ENI3eFguCfxjdWi8XJ
n4u7m2YlrwvJV+EZq52KJ4d5oOISuJG2+yjCLHwwBHIxzQ5LXJdpBJnc1bsqfcGC
2hoEDtz27XheliO8MIfwlUTcXNlDky/Bbt6ZUTIfUI9TvXFoc1tOYyJhF1L7MFQi
NgAitK3pJfFHhweDaWAdAYPDmi9JVyQwX2RcH9tNvRJeqn3fdiMPw2AS3syEFFOz
hHo5aZuYOelKJO+5so8EYQ3xb8MXcewW1fi1vc7yKC2sIJMsEAKq4mUNGkNS5t1O
rrpcHuyZig1PdE15bOJQIxQhe0HeNg4=
-----END CERTIFICATE-----