Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59f752af-4d79-371f-bc4d-5248e7d5403e.roa
File:                     59f752af-4d79-371f-bc4d-5248e7d5403e.roa (raw, json)
Hash identifier:          av++Qe/tvSscfOCDeu9QeT33M/nbFowWKLEaLlUJta4=
Subject key identifier:   B8:D7:C3:68:CD:4E:42:0F:82:CE:39:9A:CD:F2:8D:18:40:E5:AE:7C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1ED66191DEB17FC1B933C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59f752af-4d79-371f-bc4d-5248e7d5403e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1e:d6:61:91:de:b1:7f:c1:b9:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d9599359-0fb9-4ebc-8f69-a4967a6dcad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:d9:0f:73:e4:6d:68:4c:af:14:2f:2b:23:
                    6b:ee:18:67:3d:7f:44:67:0e:12:80:81:78:1d:9f:
                    a0:6f:c2:53:eb:0a:1f:5e:cb:09:fd:1d:d3:ae:54:
                    e7:08:77:e0:e5:1b:ee:61:24:84:69:57:0b:98:59:
                    18:48:01:2f:f2:ba:a3:42:e9:71:48:88:f6:fa:87:
                    53:41:b3:0e:0f:29:07:3c:cb:73:f9:79:c3:aa:f2:
                    de:f7:fe:fc:f6:b2:c0:e1:43:7b:53:09:60:90:2d:
                    cc:72:cc:e9:ea:91:10:47:fa:76:b5:25:93:3c:fc:
                    67:e1:5d:ae:41:b0:ac:52:a0:b4:38:a1:91:d4:5f:
                    ab:e9:22:c6:8c:0b:b6:a0:19:b1:4b:3c:9e:1f:96:
                    3d:ca:2b:1f:c7:1b:60:cf:25:5f:c1:44:79:c9:d9:
                    a8:0f:09:a4:d5:83:58:8f:c5:74:4f:78:04:83:80:
                    d3:35:05:7a:7e:5f:2c:4c:f9:85:37:a9:f0:0d:f7:
                    c2:ad:a6:44:1c:51:7f:0e:7b:3d:83:4c:06:90:81:
                    3a:cf:22:bf:ef:cb:04:10:b5:07:c8:82:68:ee:1e:
                    b4:5f:a5:a3:a8:52:a2:2f:bb:36:4a:b6:ba:e7:87:
                    87:00:aa:76:17:dc:44:65:77:a7:c2:14:be:e9:35:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D7:C3:68:CD:4E:42:0F:82:CE:39:9A:CD:F2:8D:18:40:E5:AE:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59f752af-4d79-371f-bc4d-5248e7d5403e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e7:3d:f7:9e:4b:c0:86:78:7c:07:8e:88:44:7f:43:80:7d:
         d6:b3:1d:32:e3:b2:0c:95:ca:1f:bb:b3:d0:50:fa:bf:d4:91:
         b5:2c:77:0f:39:81:e2:13:a4:fb:bf:8b:09:52:ae:c6:5f:df:
         28:08:5c:d1:96:a3:a4:47:fd:d0:9e:f7:ed:aa:c9:bb:3d:b2:
         f5:b7:41:06:6f:6e:2e:fc:e9:64:66:a5:18:ce:63:a5:2a:03:
         d1:4d:c5:77:64:e3:d2:19:a8:90:6f:ca:8a:b8:f9:0b:c9:6b:
         1b:9d:ed:1d:af:b6:a0:76:64:0b:85:17:89:6e:b6:7d:8d:be:
         ce:a8:eb:88:47:8e:b3:f8:2c:42:b0:ba:31:40:c0:f8:6f:e9:
         55:d7:4a:42:8b:cb:ff:d0:1f:3e:7c:51:e6:f6:35:20:6e:a9:
         4b:af:1b:ec:bc:26:92:57:05:00:77:1b:c6:07:cf:16:72:9c:
         a2:93:6c:a2:f3:0a:52:e1:ac:df:77:90:fe:e6:9b:f2:de:7b:
         6b:fc:53:60:e2:6a:71:c8:fb:d6:d4:69:d1:47:ea:8f:85:7c:
         83:42:4c:fe:45:4e:f9:fd:1b:f7:58:7b:9d:4c:6a:17:29:6a:
         ba:aa:7e:ed:8c:20:4b:dd:65:b3:d5:7e:4b:c9:ff:a1:76:26:
         c4:1f:57:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKHtZhkd6xf8G5M8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDk1OTkzNTktMGZiOS00ZWJjLThmNjktYTQ5NjdhNmRjYWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmbZD3PkbWhMrxQvKyNr7hhnPX9EZw4SgIF4
HZ+gb8JT6wofXssJ/R3TrlTnCHfg5RvuYSSEaVcLmFkYSAEv8rqjQulxSIj2+odT
QbMODykHPMtz+XnDqvLe9/789rLA4UN7UwlgkC3Mcszp6pEQR/p2tSWTPPxn4V2u
QbCsUqC0OKGR1F+r6SLGjAu2oBmxSzyeH5Y9yisfxxtgzyVfwUR5ydmoDwmk1YNY
j8V0T3gEg4DTNQV6fl8sTPmFN6nwDffCraZEHFF/Dns9g0wGkIE6zyK/78sEELUH
yIJo7h60X6WjqFKiL7s2Sra654eHAKp2F9xEZXenwhS+6TU8ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLjXw2jNTkIPgs45ms3yjRhA5a58MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTlmNzUyYWYtNGQ3OS0z
NzFmLWJjNGQtNTI0OGU3ZDU0MDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnnPfeeS8CGeHwHjohEf0OAfdazHTLjsgyVyh+7s9BQ+r/UkbUsdw85
geITpPu/iwlSrsZf3ygIXNGWo6RH/dCe9+2qybs9svW3QQZvbi786WRmpRjOY6Uq
A9FNxXdk49IZqJBvyoq4+QvJaxud7R2vtqB2ZAuFF4lutn2Nvs6o64hHjrP4LEKw
ujFAwPhv6VXXSkKLy//QHz58Ueb2NSBuqUuvG+y8JpJXBQB3G8YHzxZynKKTbKLz
ClLhrN93kP7mm/Lee2v8U2DianHI+9bUadFH6o+FfINCTP5FTvn9G/dYe51Mahcp
arqqfu2MIEvdZbPVfkvJ/6F2JsQfV4Y=
-----END CERTIFICATE-----