Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53b56e2c-ef85-3b20-91b1-6db09c43d41c.roa
File:                     53b56e2c-ef85-3b20-91b1-6db09c43d41c.roa (raw, json)
Hash identifier:          uYdupkMCjy+buk3X8AkEYSYP2q2XyRGh4Slq2hxcRFA=
Subject key identifier:   BE:C7:A6:01:A7:24:EB:E6:56:82:E7:7B:B9:5D:9E:BA:D9:47:54:85
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A2818ABE8D5F92CE64397F8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53b56e2c-ef85-3b20-91b1-6db09c43d41c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:28:18:ab:e8:d5:f9:2c:e6:43:97:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e37e198b-9795-4279-b304-32da43f7ff76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:2a:49:b7:63:ef:c5:1b:a7:a1:74:70:22:
                    af:34:70:e4:5d:e8:8f:5a:7d:b6:ad:e1:ab:2d:4c:
                    fe:be:01:3c:34:cb:9c:c5:87:ab:ed:1a:8b:12:e8:
                    dd:f9:5f:4f:3b:c4:e2:a5:3f:06:59:17:7b:a8:dc:
                    53:f7:c6:10:33:30:9c:74:77:52:24:f3:30:b8:70:
                    aa:50:96:ae:bf:ae:58:c6:d4:6f:9b:02:9b:cc:3f:
                    86:8e:92:4b:0d:ac:dd:80:2e:37:ea:77:15:f5:d1:
                    be:fd:81:a1:d3:3f:d6:9f:30:d7:88:d9:74:36:49:
                    9e:01:ba:91:b4:67:db:b1:b7:48:5a:4c:c1:3c:8d:
                    58:ac:e9:10:4c:ca:49:e8:36:bd:93:b7:07:f7:56:
                    1c:2a:8c:e3:ec:55:1e:26:06:6b:f2:83:56:fe:0a:
                    ae:af:39:4f:b5:bf:1e:81:58:5e:7e:16:03:da:dd:
                    ac:ad:f6:6e:f5:80:99:ec:46:7f:c7:c4:2e:af:d8:
                    03:e1:c0:5b:fe:b2:f1:6a:17:79:3d:5c:56:74:d2:
                    ac:54:d8:93:90:a2:09:24:76:65:1f:db:34:1f:ee:
                    1b:bd:8a:49:af:99:fc:8f:78:fc:8e:93:19:a3:79:
                    75:5b:31:a3:c8:42:59:dc:a4:16:6b:bf:67:ef:b3:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C7:A6:01:A7:24:EB:E6:56:82:E7:7B:B9:5D:9E:BA:D9:47:54:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53b56e2c-ef85-3b20-91b1-6db09c43d41c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:6a:0a:1c:8d:7b:24:01:6c:20:1d:a2:4b:e7:49:0e:1c:3e:
         e1:0c:da:2f:71:82:2b:7e:45:26:84:cc:95:ae:8c:c2:65:fa:
         2e:72:f1:22:87:91:8c:1a:f7:ac:32:e0:52:c4:ec:0b:4b:1b:
         c7:d7:77:f9:dd:00:01:ca:17:83:33:85:a8:17:1a:f9:44:8e:
         4c:6b:c5:ec:25:66:fb:9b:d4:b2:17:25:17:1d:9b:45:f3:65:
         dd:87:47:50:aa:a3:32:8f:dd:7c:a7:71:cf:03:42:05:c7:09:
         95:7d:75:ad:65:bd:2b:1e:e2:a0:81:31:8c:46:19:a3:0c:c1:
         bd:3b:c7:18:60:ca:84:cf:2e:fb:76:1c:7d:74:6b:81:7e:32:
         2a:83:7d:97:9c:b8:85:b0:a3:e6:16:91:7e:5d:55:bd:c1:01:
         fd:31:b2:f5:6e:06:7d:77:d3:5f:1b:21:54:77:be:50:90:5e:
         a8:88:df:51:5d:fe:a8:ad:07:b8:bf:c1:3d:80:88:c2:41:6e:
         51:ed:24:c9:96:3e:8e:a7:37:97:ca:3f:51:d0:c7:e2:56:4d:
         d6:4b:59:68:8a:92:dd:3f:c5:37:eb:75:10:c5:a8:91:36:5c:
         c9:4e:b3:13:e0:be:71:3f:b4:38:59:26:7b:c8:1e:04:28:86:
         9a:51:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----