Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a676fd6-58a2-386c-a1ca-90a3ecf002c7.roa
File:                     5a676fd6-58a2-386c-a1ca-90a3ecf002c7.roa (raw, json)
Hash identifier:          6dw9spfi2lJnKvSOqgRmyaIam8KmbBgoEM+3gv5ary4=
Subject key identifier:   25:95:97:C5:C8:11:38:FB:CF:6E:CF:68:28:B8:0A:EF:D5:A2:2C:DE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A062D61058C0FEE759D2540
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a676fd6-58a2-386c-a1ca-90a3ecf002c7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:06:2d:61:05:8c:0f:ee:75:9d:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5ed6d2d5-2aab-49b6-b9d8-dacc9a1c5883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:17:49:d0:ef:9b:2e:81:27:ef:80:53:7e:
                    e9:6b:f3:ca:fd:46:f4:d9:5d:0d:00:f4:82:64:a7:
                    6b:95:f6:9f:22:e7:e5:fc:af:a4:ff:a8:11:c5:45:
                    f7:4b:4c:05:f9:aa:65:9a:8c:0a:11:1d:44:2f:0e:
                    82:fd:51:b8:9a:f8:36:5c:eb:54:8e:cb:c1:3c:3b:
                    b3:e7:d2:5f:00:4f:24:c5:fd:2f:ae:87:b8:d4:3c:
                    98:3c:9d:d6:47:b8:ae:fa:fa:c2:a8:b6:1a:7e:b6:
                    54:3c:75:30:a4:51:71:37:78:f9:85:9a:98:db:23:
                    96:5c:8a:5d:c9:6d:51:75:b6:0a:77:b9:60:5b:12:
                    7b:45:35:32:b9:a9:55:5c:a2:4d:01:c2:53:c1:5f:
                    e8:78:b3:79:98:dd:1e:ad:cd:20:f1:50:e5:6b:d2:
                    0d:a8:31:50:2b:1c:d7:6a:57:79:50:01:c1:6b:a4:
                    8c:05:42:fe:67:bc:e3:fc:5a:38:b7:c9:4f:c3:80:
                    14:7e:29:20:c2:83:26:00:21:ba:24:92:31:0b:92:
                    b4:44:30:a4:2d:83:7a:4d:ea:2c:c3:24:b9:22:49:
                    64:70:11:6a:cc:e8:17:81:f4:a2:23:66:d8:5f:d3:
                    67:87:dd:cb:f1:b1:6b:4b:aa:de:27:42:fa:1d:99:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:95:97:C5:C8:11:38:FB:CF:6E:CF:68:28:B8:0A:EF:D5:A2:2C:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a676fd6-58a2-386c-a1ca-90a3ecf002c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e8:1d:af:e5:4e:f6:f0:99:57:4d:de:53:1d:ff:9b:71:e1:
         5e:fd:32:2e:cb:97:84:27:4c:7d:5c:d6:ef:66:ff:a8:ce:8b:
         de:cb:be:2a:04:67:64:32:56:e7:3c:72:5c:54:a9:99:2d:bf:
         88:57:57:31:ef:61:0a:fb:23:d1:6f:6a:c2:37:f2:6d:58:d1:
         3a:6e:a6:f0:c3:6d:b3:c6:62:85:c9:66:87:1e:0d:df:1d:ec:
         a1:fc:88:a6:c3:8b:be:73:fa:f1:4f:67:d3:49:7f:7a:2c:09:
         ea:4a:fe:a5:ee:3b:0f:32:96:db:0b:19:73:47:5c:31:b8:5d:
         e3:a6:85:2f:91:de:69:be:cf:80:57:7d:c2:49:c5:64:43:7b:
         3a:46:24:a3:7e:b5:15:bf:7d:a9:73:47:5a:f1:64:c8:7e:44:
         dd:01:bc:c7:5d:33:5b:27:4c:c8:37:e1:8b:17:15:59:28:98:
         55:93:b4:26:1f:ee:f9:e4:25:bf:7e:32:5c:d3:aa:ed:e9:85:
         88:0e:36:8f:20:bc:80:41:4b:2d:d7:66:38:77:9b:8a:ea:c6:
         3f:1c:72:b5:6c:33:ce:06:41:2f:91:3f:46:a3:cb:9d:b0:fe:
         92:e0:87:48:07:fb:02:a4:12:e7:d6:69:5f:06:3e:75:1e:66:
         7e:a6:e6:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKBi1hBYwP7nWdJUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NWVkNmQyZDUtMmFhYi00OWI2LWI5ZDgtZGFjYzlhMWM1ODgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/sXSdDvmy6BJ++AU37pa/PK/Ub02V0NAPSC
ZKdrlfafIufl/K+k/6gRxUX3S0wF+aplmowKER1ELw6C/VG4mvg2XOtUjsvBPDuz
59JfAE8kxf0vroe41DyYPJ3WR7iu+vrCqLYafrZUPHUwpFFxN3j5hZqY2yOWXIpd
yW1RdbYKd7lgWxJ7RTUyualVXKJNAcJTwV/oeLN5mN0erc0g8VDla9INqDFQKxzX
ald5UAHBa6SMBUL+Z7zj/Fo4t8lPw4AUfikgwoMmACG6JJIxC5K0RDCkLYN6Teos
wyS5IklkcBFqzOgXgfSiI2bYX9Nnh93L8bFrS6reJ0L6HZnv0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWVl8XIETj7z27PaCi4Cu/VoizeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWE2NzZmZDYtNThhMi0z
ODZjLWExY2EtOTBhM2VjZjAwMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIanMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzoHa/lTvbwmVdN3lMd/5tx4V79Mi7Ll4QnTH1c1u9m/6jOi97LvioE
Z2QyVuc8clxUqZktv4hXVzHvYQr7I9FvasI38m1Y0TpupvDDbbPGYoXJZoceDd8d
7KH8iKbDi75z+vFPZ9NJf3osCepK/qXuOw8yltsLGXNHXDG4XeOmhS+R3mm+z4BX
fcJJxWRDezpGJKN+tRW/falzR1rxZMh+RN0BvMddM1snTMg34YsXFVkomFWTtCYf
7vnkJb9+MlzTqu3phYgONo8gvIBBSy3XZjh3m4rqxj8ccrVsM84GQS+RP0ajy52w
/pLgh0gH+wKkEufWaV8GPnUeZn6m5q8=
-----END CERTIFICATE-----