Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60b60b84-7c10-338e-be38-0ce4a55134c8.roa
File:                     60b60b84-7c10-338e-be38-0ce4a55134c8.roa (raw, json)
Hash identifier:          ZsKTWcAVQL7ADH+5yDJ1+c2yC/dabWwyKfu/E3S9llI=
Subject key identifier:   8A:19:43:39:06:71:97:95:C8:A1:68:D2:19:91:11:64:D6:4E:1A:D1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F4FB86D88F1F589CB08F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60b60b84-7c10-338e-be38-0ce4a55134c8.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f4:fb:86:d8:8f:1f:58:9c:b0:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3257f716-894c-48da-b06c-6de68be9fcf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:79:ed:b7:f4:d3:c4:c1:5c:b6:6a:27:03:
                    24:e5:27:26:ea:97:62:04:1e:1b:3e:51:83:5e:13:
                    a8:7d:99:e6:84:c7:44:98:4c:da:a6:f9:85:ce:a5:
                    34:6d:e4:ef:a3:bd:0b:f3:4e:06:9f:28:ab:a3:c7:
                    a0:9a:87:56:94:2e:fa:8b:0b:93:11:cf:bc:32:45:
                    03:88:a0:a1:7f:c2:db:4a:41:26:15:16:ba:57:7f:
                    da:e6:40:ee:ed:14:e4:68:97:17:38:0a:55:2c:fa:
                    75:0b:86:e8:91:d7:84:d4:db:6d:37:74:dc:49:25:
                    93:41:cc:9c:8f:91:68:80:c9:3b:f9:47:b2:a9:ae:
                    7b:52:e9:fe:aa:c7:0c:b3:ab:e8:e9:51:b1:72:45:
                    2b:3e:f7:78:a0:aa:27:12:9d:ce:89:8b:3b:90:a0:
                    43:db:ba:d6:c2:e9:61:96:c8:26:0d:46:c7:a2:55:
                    ab:3f:33:cd:1d:e5:01:99:45:51:5b:7f:ae:54:30:
                    4c:68:43:d1:e5:b6:35:22:37:e2:9e:00:ae:a9:11:
                    ac:c5:ba:b9:a4:3c:b2:ae:d5:e3:e0:2e:a6:5c:06:
                    d7:9a:47:c9:de:01:1e:91:22:8a:79:0f:c7:31:8c:
                    93:c6:d8:76:f3:85:6e:35:48:dc:5f:8c:9d:ce:d8:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:19:43:39:06:71:97:95:C8:A1:68:D2:19:91:11:64:D6:4E:1A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60b60b84-7c10-338e-be38-0ce4a55134c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:78:3c:c1:81:d6:1d:03:71:d1:47:c8:ae:0c:e6:7d:ac:df:
         3f:6d:f3:e9:8b:f4:87:b0:51:1a:a3:41:08:08:00:f8:19:a6:
         e8:b1:28:2a:c0:57:d2:ce:c6:e3:90:8b:49:fe:c4:e7:63:e3:
         4f:ba:73:5a:41:d0:48:67:ef:12:80:0e:f3:60:fb:9d:52:15:
         5f:57:71:fd:e3:f4:1c:8b:e6:0c:1d:51:d7:cd:51:eb:7f:ea:
         3c:11:70:58:84:21:1e:39:9e:b2:c0:68:0c:46:94:ab:e9:e4:
         85:84:1e:13:52:a7:87:19:f5:38:9c:79:e9:5d:ea:ab:45:36:
         51:3f:6c:a5:9b:66:f8:56:47:11:37:bc:b4:33:6a:99:f1:17:
         28:e7:84:7c:eb:9f:4f:e3:de:0b:e7:b3:c3:73:b3:dc:e8:69:
         59:c0:00:02:95:d3:ec:83:9c:27:50:38:d1:67:7c:7a:2a:eb:
         02:53:32:5d:d7:96:d4:60:13:db:14:e4:7c:f6:ac:e7:a3:cf:
         87:ae:e2:d4:93:2e:6a:d2:39:7f:c2:ab:d6:72:21:da:86:69:
         d1:aa:1f:37:f1:5c:6d:dd:a3:b8:c6:6c:99:16:21:71:c3:20:
         7b:10:2a:fd:3b:ec:91:3d:d7:ea:ee:69:19:3f:eb:c1:c5:56:
         9e:b0:6f:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ9PuG2I8fWJywj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MzI1N2Y3MTYtODk0Yy00OGRhLWIwNmMtNmRlNjhiZTlmY2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmR57bf008TBXLZqJwMk5Scm6pdiBB4bPlGD
XhOofZnmhMdEmEzapvmFzqU0beTvo70L804Gnyiro8egmodWlC76iwuTEc+8MkUD
iKChf8LbSkEmFRa6V3/a5kDu7RTkaJcXOApVLPp1C4bokdeE1NttN3TcSSWTQcyc
j5FogMk7+Ueyqa57Uun+qscMs6vo6VGxckUrPvd4oKonEp3OiYs7kKBD27rWwulh
lsgmDUbHolWrPzPNHeUBmUVRW3+uVDBMaEPR5bY1IjfingCuqRGsxbq5pDyyrtXj
4C6mXAbXmkfJ3gEekSKKeQ/HMYyTxth284VuNUjcX4ydztg1IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIoZQzkGcZeVyKFo0hmREWTWThrRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjBiNjBiODQtN2MxMC0z
MzhlLWJlMzgtMGNlNGE1NTEzNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIb7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAh4PMGB1h0DcdFHyK4M5n2s3z9t8+mL9IewURqjQQgIAPgZpuixKCrA
V9LOxuOQi0n+xOdj40+6c1pB0Ehn7xKADvNg+51SFV9Xcf3j9ByL5gwdUdfNUet/
6jwRcFiEIR45nrLAaAxGlKvp5IWEHhNSp4cZ9Ticeeld6qtFNlE/bKWbZvhWRxE3
vLQzapnxFyjnhHzrn0/j3gvns8Nzs9zoaVnAAAKV0+yDnCdQONFnfHoq6wJTMl3X
ltRgE9sU5Hz2rOejz4eu4tSTLmrSOX/Cq9ZyIdqGadGqHzfxXG3do7jGbJkWIXHD
IHsQKv077JE91+ruaRk/68HFVp6wb8g=
-----END CERTIFICATE-----