Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/618039c5-caea-39bd-b90c-0c16ebbd7d44.roa
File:                     618039c5-caea-39bd-b90c-0c16ebbd7d44.roa (raw, json)
Hash identifier:          tLhT4R1RAP3vBF9x4Cxi56PS6zjLX6JUlFxeDj4Hz78=
Subject key identifier:   05:FE:4A:F7:C0:8B:62:84:E2:3F:9D:C0:5F:4B:C2:C3:00:3C:8E:80
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A01AD32310CE8A77852A440
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/618039c5-caea-39bd-b90c-0c16ebbd7d44.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:01:ad:32:31:0c:e8:a7:78:52:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=4eb060ae-ec6d-4cd9-bee3-a0d1db3f8034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:70:71:a1:72:e1:7a:74:4e:f5:31:95:f1:
                    e5:9f:e6:73:86:a6:79:d8:97:d3:42:98:1d:e7:5a:
                    47:de:70:63:4b:68:f6:72:d8:ba:d4:45:6d:3d:ec:
                    2f:d8:e8:3c:6e:56:6f:ed:00:ae:01:44:d3:6e:28:
                    67:64:69:7f:05:07:d8:76:a8:ca:23:d0:60:1d:7b:
                    e2:3e:e2:bf:3f:ec:58:ed:28:54:fd:95:a2:77:6d:
                    0d:57:95:ef:e9:3f:b9:c0:f9:4e:49:7a:75:70:7d:
                    e8:23:23:1a:f5:a9:f6:a9:cd:35:63:d6:dc:20:bb:
                    e5:85:49:c3:f8:d1:6d:5a:d2:a5:3a:d0:1c:cc:88:
                    b3:d0:30:b3:17:ee:bf:17:9d:96:7a:e4:c6:5a:a0:
                    96:bd:c4:33:3e:3e:fc:1b:b4:fe:09:92:d5:92:6c:
                    ba:21:52:41:4e:c7:b1:1a:14:a0:79:f8:6d:47:0a:
                    30:c5:34:60:41:19:a5:40:58:e5:8c:a5:d6:f0:22:
                    2c:3e:22:95:4c:5a:54:5d:b4:79:b6:f6:37:54:68:
                    e5:67:85:d8:98:90:6b:32:72:49:70:88:04:1b:19:
                    fb:5f:87:2f:68:73:12:58:32:1b:5a:61:f3:05:b4:
                    1c:d7:a6:39:88:a6:ef:7d:9b:26:3b:39:4a:e7:04:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FE:4A:F7:C0:8B:62:84:E2:3F:9D:C0:5F:4B:C2:C3:00:3C:8E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/618039c5-caea-39bd-b90c-0c16ebbd7d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:30:5c:ca:f4:ed:a2:9d:c2:3e:d7:1b:9f:d2:20:ac:cf:5a:
         4a:12:a9:7c:36:2a:a8:50:dd:fc:50:ac:26:3e:ff:8c:fe:13:
         dc:35:2c:4d:09:9e:d3:c2:10:e0:a6:f2:e4:58:f6:5d:61:dc:
         09:97:61:d2:b2:79:ac:68:1b:d0:17:6f:0a:23:34:ca:d4:e0:
         c8:8a:e5:02:e7:72:4d:1f:8d:cd:20:a1:eb:5a:cb:fe:ef:f4:
         f9:e3:f9:09:67:c9:cd:7a:f8:a4:57:14:0c:3e:38:63:85:22:
         c0:df:6a:f4:88:76:88:bb:57:0f:19:32:08:48:21:fa:c4:44:
         c6:5f:4b:e6:bc:21:d1:e4:06:d8:07:d2:a4:4f:0c:15:20:29:
         5d:5a:e7:53:9e:65:e9:db:29:b2:41:61:7d:09:f8:53:e5:49:
         f3:43:24:c2:12:b4:2c:0e:b9:0e:c7:24:76:56:5c:59:34:65:
         7a:1e:a4:7a:84:21:c2:2c:45:c9:85:b8:c3:f6:58:b1:a3:22:
         38:c7:44:b4:d6:34:0a:3b:4c:76:85:3d:c9:5a:20:ac:b8:0b:
         14:e0:13:e0:50:04:2d:af:a7:fa:96:0d:f2:4e:8d:1a:6a:c2:
         ed:82:21:e4:15:42:52:9a:71:df:af:e8:02:a2:e3:81:44:01:
         60:3f:59:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----