Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/55c1d685-09ea-3ec7-97b5-dce32b3479d4.roa
File:                     55c1d685-09ea-3ec7-97b5-dce32b3479d4.roa (raw, json)
Hash identifier:          jXLulc9icOjXnJjMGbh2AkE4ciGWP4MgZOeaBNDBSOE=
Subject key identifier:   89:8B:E1:3A:7C:68:5A:57:35:FA:29:E7:45:54:BB:65:C2:83:65:B4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0D3D5C31C5F53A83C7760A
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/55c1d685-09ea-3ec7-97b5-dce32b3479d4.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0d:3d:5c:31:c5:f5:3a:83:c7:76:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=81c6b176-ddd1-4f77-b3db-c11b443854f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:63:df:46:79:14:b6:ca:f7:c7:20:80:be:6c:
                    2a:3f:44:f6:af:95:7c:ac:65:f3:46:2e:5a:e2:38:
                    fc:19:d4:a6:93:5f:a3:fe:50:4a:2e:78:21:b1:66:
                    77:18:67:bd:2b:8e:51:b6:60:df:73:08:7d:7a:28:
                    11:c8:9e:33:c4:bc:94:f7:22:3d:ff:b5:1d:27:b5:
                    f6:35:fc:70:55:90:30:db:23:66:fd:9a:39:37:fa:
                    a4:a5:c9:0b:e8:ed:8c:58:97:16:ec:da:0f:b7:59:
                    c2:78:80:20:8f:b7:d8:2e:12:6f:5a:fc:0c:e0:06:
                    6f:93:b7:dc:d1:6f:a1:de:77:89:7b:53:29:5f:5f:
                    0a:f0:83:16:25:e6:13:5e:76:42:7c:57:59:f5:2f:
                    1c:bf:ce:02:33:1c:62:f2:4a:ca:a6:59:60:c8:4b:
                    6b:15:b6:e0:b1:80:26:bb:c1:3a:ec:6a:14:9a:1e:
                    86:4f:97:45:53:28:6d:81:45:23:56:c3:8a:d4:a7:
                    37:5e:d5:9c:8d:71:e2:36:b3:cd:15:97:fa:3b:fb:
                    22:31:a5:3c:e0:66:88:33:e3:af:70:39:d5:63:c3:
                    c8:f0:b9:00:95:b5:29:0f:45:3e:af:f5:dc:70:80:
                    8f:53:d0:f8:26:9c:82:f5:f2:0e:ba:16:9d:c8:09:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8B:E1:3A:7C:68:5A:57:35:FA:29:E7:45:54:BB:65:C2:83:65:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/55c1d685-09ea-3ec7-97b5-dce32b3479d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:52:ea:2e:1a:b5:37:bb:be:7d:8f:6a:83:38:f5:d3:60:33:
         22:5a:7a:9e:74:01:56:88:11:a0:eb:2a:ee:3b:fd:a8:66:90:
         25:ff:10:f7:55:6e:38:f2:68:86:93:29:6b:91:86:c4:35:d8:
         f7:d3:18:c9:98:43:f6:88:f5:14:7d:6a:a8:d7:ea:f2:31:a0:
         e7:cf:ee:e2:88:b4:ef:ed:e3:60:e2:c0:c1:e3:dd:43:62:9f:
         85:31:53:3b:53:e6:db:b6:26:e5:ce:7c:14:0e:97:59:6e:0b:
         bc:1f:77:d2:40:9e:01:3e:33:08:9d:6f:95:f2:86:06:c8:35:
         52:31:d7:ee:af:41:96:78:0e:ca:3a:bf:50:18:45:f5:9a:74:
         42:6f:b4:ce:8f:96:66:91:53:09:a9:63:0a:ea:42:46:79:eb:
         37:35:63:c9:d0:a4:23:a0:3d:e7:07:57:eb:2f:f0:c9:d5:ee:
         41:4d:40:ae:67:7b:86:0a:ae:04:47:b6:56:cf:e6:ca:3c:48:
         05:ca:1d:7e:b1:a4:c8:bd:a5:f4:20:96:53:17:2c:6f:f8:4e:
         f3:18:9d:d0:2c:a8:db:54:0f:e1:b1:11:99:8f:57:85:5e:40:
         42:4c:bc:62:d3:e3:62:82:fe:0b:47:6b:00:66:fb:56:66:ce:
         9e:5b:d0:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKDT1cMcX1OoPHdgowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODFjNmIxNzYtZGRkMS00Zjc3LWIzZGItYzExYjQ0Mzg1NGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WPfRnkUtsr3xyCAvmwqP0T2r5V8rGXzRi5a
4jj8GdSmk1+j/lBKLnghsWZ3GGe9K45RtmDfcwh9eigRyJ4zxLyU9yI9/7UdJ7X2
NfxwVZAw2yNm/Zo5N/qkpckL6O2MWJcW7NoPt1nCeIAgj7fYLhJvWvwM4AZvk7fc
0W+h3neJe1MpX18K8IMWJeYTXnZCfFdZ9S8cv84CMxxi8krKpllgyEtrFbbgsYAm
u8E67GoUmh6GT5dFUyhtgUUjVsOK1Kc3XtWcjXHiNrPNFZf6O/siMaU84GaIM+Ov
cDnVY8PI8LkAlbUpD0U+r/XccICPU9D4JpyC9fIOuhadyAk+6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImL4Tp8aFpXNfop50VUu2XCg2W0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTVjMWQ2ODUtMDllYS0z
ZWM3LTk3YjUtZGNlMzJiMzQ3OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJS6i4atTe7vn2PaoM49dNgMyJaep50AVaIEaDrKu47/ahmkCX/EPdV
bjjyaIaTKWuRhsQ12PfTGMmYQ/aI9RR9aqjX6vIxoOfP7uKItO/t42DiwMHj3UNi
n4UxUztT5tu2JuXOfBQOl1luC7wfd9JAngE+Mwidb5XyhgbINVIx1+6vQZZ4Dso6
v1AYRfWadEJvtM6PlmaRUwmpYwrqQkZ56zc1Y8nQpCOgPecHV+sv8MnV7kFNQK5n
e4YKrgRHtlbP5so8SAXKHX6xpMi9pfQgllMXLG/4TvMYndAsqNtUD+GxEZmPV4Ve
QEJMvGLT42KC/gtHawBm+1Zmzp5b0AM=
-----END CERTIFICATE-----