Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4e405192-ef8b-3aad-9e68-cf6f39e5b448.roa
File:                     4e405192-ef8b-3aad-9e68-cf6f39e5b448.roa (raw, json)
Hash identifier:          smtMo6a7ubyNbb+trzjxFX3YvvSgrgaHwduN5IWlQiw=
Subject key identifier:   71:77:68:01:B5:E4:20:FC:27:C2:57:71:5B:29:1B:FF:D3:5B:9A:26
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F3BFB10141ABE2DFCC7A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4e405192-ef8b-3aad-9e68-cf6f39e5b448.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f3:bf:b1:01:41:ab:e2:df:cc:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=75819362-19b3-4af9-9443-faabe9c122c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:23:8b:28:c5:59:29:15:a0:3b:ce:0b:5f:a1:
                    df:e9:23:9f:7c:25:c6:14:8f:c4:14:7f:59:14:70:
                    6d:ec:d7:94:99:50:1f:2b:32:0a:b9:6c:aa:25:7a:
                    0c:ae:3b:88:0c:7b:26:f1:8f:36:51:31:ae:52:3c:
                    51:6d:e2:f2:7b:89:c5:49:55:ed:18:f5:9e:bc:03:
                    f6:63:bf:45:47:09:f9:29:aa:ec:ff:0f:d9:e4:61:
                    50:29:08:e8:7e:83:cf:a9:65:a9:53:d7:24:21:28:
                    d8:1d:5c:63:66:bf:27:27:97:78:4f:b9:3c:ea:92:
                    d8:22:b1:57:86:e9:9e:52:15:ee:14:3a:67:fc:c2:
                    5f:56:3f:5f:74:24:70:0e:db:06:68:a3:b4:84:18:
                    31:63:f2:d0:bb:ba:dd:0c:13:97:cf:75:ce:63:42:
                    d7:ea:7e:bb:2f:97:3b:e9:d1:e7:35:a2:05:30:38:
                    c0:ba:5e:60:e4:1b:36:ea:92:b5:9a:1d:a5:37:fe:
                    ee:b9:b4:97:ff:8e:44:f5:dc:43:3c:03:36:46:1c:
                    29:d3:70:00:f6:1c:2d:85:5f:0d:b1:60:70:c2:46:
                    8f:d1:49:b9:b1:67:5a:48:3d:63:6d:fe:8e:66:2e:
                    f8:da:fd:15:f5:77:1e:fe:0b:c5:a7:3c:82:53:f0:
                    fa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:77:68:01:B5:E4:20:FC:27:C2:57:71:5B:29:1B:FF:D3:5B:9A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4e405192-ef8b-3aad-9e68-cf6f39e5b448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:0e:6d:71:b2:c8:4f:79:c6:2d:b8:1a:6c:fc:50:b6:bb:cb:
         bc:09:de:39:b6:cf:53:b6:2c:d9:5a:c7:6d:f0:11:af:2d:2f:
         85:af:4d:17:b5:8d:24:ef:37:7a:2a:6f:9c:72:1b:94:06:f9:
         3f:ed:6a:a9:dc:a1:f3:7b:69:d8:c6:14:0c:82:17:9a:6d:6a:
         56:30:8c:7c:c6:f0:e9:a7:c2:d4:a9:97:48:50:5c:0d:aa:98:
         01:42:d6:2b:e2:71:94:8d:eb:c2:c8:d2:e0:b7:97:e3:03:b1:
         81:ab:0e:ca:16:1c:f2:04:10:b4:5e:5b:41:fb:8c:0b:ba:fc:
         0c:94:68:0e:fd:27:9e:45:a9:1f:d0:8f:9b:08:61:77:70:6a:
         9a:bf:c9:cb:37:03:3a:64:10:8c:ff:33:61:f9:fa:e0:0b:9b:
         52:cb:ff:5c:5a:ea:e7:cf:1e:47:5d:7f:c2:fd:e7:2d:fc:b8:
         24:68:3d:d7:8b:f0:04:43:ac:dd:89:11:17:11:54:2a:49:3d:
         a5:3e:55:44:cb:75:74:13:46:b3:36:ab:0c:6b:e0:91:63:97:
         c0:ec:a3:9f:bd:b2:76:8c:c0:46:54:ed:0f:c9:86:b1:47:22:
         e5:4b:47:b0:0b:bf:e3:e8:04:85:af:6e:f6:cb:56:87:22:a5:
         45:54:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----