Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4b7540d8-bda9-37b2-83a1-c6586dc73e36.roa
File:                     4b7540d8-bda9-37b2-83a1-c6586dc73e36.roa (raw, json)
Hash identifier:          MpH235QJcuPVBP4/AH/hN+HxrA6hHg2zeCHtbh36oBM=
Subject key identifier:   8F:F6:C3:B0:66:5D:0A:70:C9:55:17:88:87:DA:86:D2:B4:78:FB:28
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0F0BF1A2C7E86C5CF33C40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4b7540d8-bda9-37b2-83a1-c6586dc73e36.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0f:0b:f1:a2:c7:e8:6c:5c:f3:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9abc6ccf-2c64-4e5f-b5b5-59ddfd91679e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:5a:0d:2a:a7:21:5b:f6:23:30:28:73:a9:
                    8f:a5:03:ad:46:a9:27:a9:f6:06:0b:a7:1e:21:5c:
                    fe:06:8d:24:ee:e4:34:4a:93:09:1e:dc:d3:e5:42:
                    34:e6:73:b7:6a:67:b3:3d:8d:81:c9:99:d6:66:98:
                    e6:c9:64:0b:c2:be:9a:7c:c5:67:62:3d:74:69:bc:
                    f8:bd:41:70:8f:0c:37:01:12:62:bf:7c:ae:33:b3:
                    1f:1d:b4:15:6f:09:6a:ab:4e:f8:ba:ba:6a:e5:5d:
                    78:39:d0:fc:91:a4:35:f9:63:df:87:5b:62:b5:b1:
                    9c:af:43:32:4f:ae:c9:20:25:f9:d3:d7:09:12:61:
                    43:40:b4:a7:54:fe:a1:56:83:75:17:71:48:17:80:
                    4d:8e:f6:7f:7b:71:eb:5f:a5:b0:07:d7:1c:bf:e5:
                    22:ac:48:0a:0a:55:72:27:e1:bc:7d:69:c6:99:f4:
                    20:7c:9a:a9:bf:63:94:40:6c:f8:37:59:0e:b4:33:
                    d2:e3:1d:d3:db:fc:c8:6c:1c:d5:fa:cf:09:c4:e9:
                    8e:fe:a1:50:a8:70:9e:9d:bf:0f:35:f9:50:28:6d:
                    c6:b1:b3:b2:3f:33:b5:0f:72:87:20:35:ae:bd:cd:
                    3a:20:3c:1b:02:4a:48:95:cd:63:2d:cb:a1:ef:32:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F6:C3:B0:66:5D:0A:70:C9:55:17:88:87:DA:86:D2:B4:78:FB:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4b7540d8-bda9-37b2-83a1-c6586dc73e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:87:c5:01:53:ad:b1:f7:d4:34:a1:dc:6b:3d:d5:fc:ae:ed:
         74:b4:79:3f:4c:7b:51:de:ab:de:36:3e:73:65:c1:d0:e2:9c:
         f8:d9:56:ee:0c:20:e3:e5:8d:a3:d4:d2:68:6c:9d:1f:dd:95:
         63:47:e6:65:2a:b5:6e:e0:f7:87:3a:ef:27:ac:27:7a:25:31:
         f1:83:53:77:09:77:7d:55:87:ed:fa:e0:45:df:25:1a:2d:6f:
         5f:92:ce:08:45:18:9a:c7:3c:93:b2:23:b0:b0:d4:b1:07:94:
         af:f8:40:06:61:62:75:8e:fd:74:e8:0f:6e:72:a1:ee:1b:5d:
         6b:52:b4:30:29:9f:fd:4a:48:bd:41:ff:c5:29:6c:9a:f0:1e:
         10:f2:07:84:5f:a8:a7:51:0b:98:6f:e9:dc:71:b9:6c:7c:9d:
         05:c5:48:82:d6:59:b3:e2:c5:ec:ee:70:fa:fb:77:bb:d4:9c:
         f6:b1:32:5c:23:23:c6:af:09:0c:d4:cf:8b:c5:72:83:6c:6d:
         65:61:6a:43:69:cc:51:22:8d:fc:0d:99:8b:1f:f2:32:28:0c:
         5d:4a:15:c3:73:6b:0d:fc:5d:1f:31:f5:9a:48:5e:a6:c2:5d:
         ac:35:f1:5a:f8:0c:49:26:f3:3e:c6:5b:c0:1f:d8:3a:34:e1:
         62:0d:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----