Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5146f21d-c135-39df-b436-c141513f50aa.roa
File:                     5146f21d-c135-39df-b436-c141513f50aa.roa (raw, json)
Hash identifier:          d57dTRwv9JyIRBCNDZNXITz/sw7rGJXCPbPCMSc8ibc=
Subject key identifier:   FC:F0:98:24:69:E1:02:9D:F6:85:B1:45:54:2B:34:EF:CC:4D:F2:7D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A14B0F09C61982F1849C200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5146f21d-c135-39df-b436-c141513f50aa.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:14:b0:f0:9c:61:98:2f:18:49:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a27656a1-f10a-4af4-a0ff-4d54671d2f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:64:dd:08:9c:2b:58:a5:c3:19:5c:d2:a8:f3:
                    c1:b9:df:38:cb:8d:ae:e2:56:ed:ea:92:cd:54:70:
                    50:cf:94:ed:63:0e:9f:6f:e0:67:6e:0f:a4:7b:68:
                    5d:e8:7b:1e:f8:6b:05:6a:a1:31:a3:80:ce:05:9f:
                    17:cd:89:1d:29:58:0a:01:ef:b7:15:59:93:b9:b3:
                    8b:01:60:e0:f4:b1:43:bc:03:0d:1a:e1:b1:ec:38:
                    ef:88:dd:32:b6:ba:0b:d8:94:a0:cc:86:26:4d:9b:
                    fb:0a:03:b6:98:96:3a:66:2f:58:dd:a0:e7:9d:f8:
                    98:07:24:77:1d:5a:4e:2a:dd:ad:2b:6b:30:42:7d:
                    da:34:f9:12:66:18:b2:16:56:50:cd:14:3b:3e:7d:
                    14:7e:99:8d:34:81:44:2a:49:bc:83:99:fd:0d:03:
                    86:17:b7:70:a9:4c:c8:50:dc:05:55:97:03:3e:c5:
                    77:27:30:7c:01:dc:2c:fa:dc:54:0c:46:24:4a:d3:
                    f3:35:94:9e:67:d7:2d:db:a2:93:0f:34:9f:e2:90:
                    a3:8f:38:67:63:43:8f:44:78:14:2b:cc:7c:d8:27:
                    a1:e9:4a:a8:90:21:ce:ec:21:65:66:03:df:83:71:
                    46:b0:94:62:71:c8:03:23:2d:23:d7:da:ae:cc:15:
                    77:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F0:98:24:69:E1:02:9D:F6:85:B1:45:54:2B:34:EF:CC:4D:F2:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5146f21d-c135-39df-b436-c141513f50aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:67:a5:f1:08:be:ce:99:de:0c:df:bb:13:0b:3f:14:3a:9b:
         04:39:b6:e7:2b:f9:f2:d5:c7:c3:08:d5:51:68:9f:4a:ef:ad:
         6b:3e:3e:58:a8:2d:54:34:53:60:f3:30:78:41:6f:0f:79:66:
         3f:da:13:ab:ed:98:80:4b:5d:76:a7:ea:3c:bf:44:5a:ea:4c:
         45:7e:30:66:11:4c:de:b2:d5:49:21:db:40:8c:df:41:72:a6:
         2e:9f:24:9a:b2:df:f1:c0:c6:ea:6d:eb:54:e9:ce:f1:3b:ab:
         64:d9:34:b7:19:97:02:4a:3a:a7:48:71:a6:67:ed:44:54:46:
         78:5c:2a:45:02:06:b2:b3:76:a2:31:a4:ec:e3:1e:55:d7:76:
         24:0c:3e:91:77:26:60:f2:65:60:83:07:67:19:e9:3e:51:0d:
         e7:b8:69:14:0b:c4:28:6f:a4:98:5f:cc:57:19:ed:5e:66:fa:
         05:1d:a6:ba:d5:01:a6:2a:7c:e8:3c:78:ed:c9:27:df:b0:72:
         57:7a:78:ff:de:72:60:6c:8a:f1:df:8e:96:f3:19:da:6c:d7:
         25:f4:0f:f6:96:2b:01:75:54:2f:b5:a6:38:34:e1:66:98:e6:
         10:1d:71:d2:51:56:5f:c9:bf:2d:cf:95:c4:d3:30:79:04:e4:
         40:86:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----