Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/62d369a4-d59e-3e17-a8b4-fd50564df886.roa
File:                     62d369a4-d59e-3e17-a8b4-fd50564df886.roa (raw, json)
Hash identifier:          c7lAzgFuxKI++duqX6srLcPh3BM9HnJQFJtW1dzil3k=
Subject key identifier:   42:0A:1D:00:CA:DF:65:51:0C:A6:39:19:70:CD:32:6E:1E:A9:F0:71
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F0B03B7C0C67706C719B06
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/62d369a4-d59e-3e17-a8b4-fd50564df886.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f0:b0:3b:7c:0c:67:70:6c:71:9b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6b4f8dab-dec8-4500-a0a1-6c510f44560a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7d:f6:1a:d8:05:3e:19:36:5d:8e:41:d3:ce:
                    c9:f1:00:c6:a2:58:0f:e1:f5:62:05:7b:1c:31:5e:
                    dd:a0:e4:32:fe:e3:0c:da:4a:36:46:17:5f:84:fe:
                    8e:f2:6b:cb:96:31:29:4f:cb:53:2a:44:14:04:1b:
                    e4:3e:9c:41:c0:40:cc:e4:91:2b:9a:73:30:04:2e:
                    cd:74:40:57:5b:dd:3f:a1:e5:26:45:2a:58:4e:bc:
                    d1:33:fd:f6:ce:ce:1e:02:e4:db:b8:db:96:38:e4:
                    3c:06:0e:47:d2:6a:d7:92:56:82:9f:12:ab:19:d4:
                    c0:59:da:b4:d6:9d:09:d2:58:bc:ff:c0:6b:31:bf:
                    16:72:0e:68:ff:e4:a8:fc:5a:d0:40:db:70:50:0d:
                    5a:c8:d7:f6:42:c8:9a:3b:e6:6a:e0:77:28:fe:82:
                    4e:f4:1d:ce:ad:18:2f:f2:4c:b9:46:80:0c:87:20:
                    c1:94:5e:50:e3:c0:8f:8f:27:f8:a2:15:3d:4d:12:
                    41:32:33:7e:cf:81:23:50:5d:3e:db:87:9e:ac:3f:
                    54:36:ce:66:17:d0:99:b9:9d:b9:97:e1:7e:8e:8e:
                    e3:a0:11:2a:0f:c1:6d:0f:1a:88:fd:92:aa:f2:d6:
                    06:27:72:cc:75:88:66:42:e5:68:3c:be:74:d0:9b:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0A:1D:00:CA:DF:65:51:0C:A6:39:19:70:CD:32:6E:1E:A9:F0:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/62d369a4-d59e-3e17-a8b4-fd50564df886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:80:53:56:7d:62:39:36:f9:00:99:9a:47:63:f8:5b:42:a0:
         05:10:cc:a6:3d:4e:09:34:dc:d5:ff:96:6c:fb:a5:0e:f7:3b:
         f6:75:b9:aa:95:72:40:0f:62:07:2d:e8:ea:0e:bb:53:8f:2a:
         1d:23:82:e3:a1:03:50:4b:8c:a8:89:57:3a:10:61:f0:99:c3:
         c3:04:e4:ca:ef:4f:1f:e6:71:a3:44:c4:77:7b:d3:35:cd:52:
         4b:74:ad:bb:c0:87:08:64:cb:25:7e:53:6f:6b:a4:da:07:db:
         05:bc:a0:b9:df:ab:2e:fa:85:49:17:1a:b5:5c:87:61:d6:9a:
         fd:e7:6d:13:bf:58:4e:a6:77:20:78:84:2d:b2:9e:aa:84:f7:
         ee:66:2b:7b:01:ca:a5:05:36:59:32:a9:8d:42:29:fe:2e:79:
         81:9f:f9:56:8a:cd:94:7f:02:b7:f4:06:71:24:11:3f:24:ed:
         d0:70:1d:ab:28:0e:02:b2:4d:31:b0:90:60:29:c0:77:6f:00:
         e4:e4:9b:3d:0d:a3:24:f1:a7:4b:be:74:fe:bc:23:b1:be:bb:
         4f:d2:63:10:68:ad:5a:f5:ee:24:04:b5:13:66:3a:6c:2d:82:
         58:24:f3:6d:8b:5e:40:7e:e2:8c:66:99:79:a6:87:c9:04:42:
         61:70:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----