Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66aca485-0b29-378e-9f5e-9bef2d1825c0.roa
File:                     66aca485-0b29-378e-9f5e-9bef2d1825c0.roa (raw, json)
Hash identifier:          1TlVLUDVCaR1IZ8C1Sr9O73mA0lkbQxCuk7mk9bnk5c=
Subject key identifier:   47:BE:0E:D6:C3:C4:50:05:08:9A:CF:42:89:90:BE:12:04:C1:72:E5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A218547CCA419A740164000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66aca485-0b29-378e-9f5e-9bef2d1825c0.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.148.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:21:85:47:cc:a4:19:a7:40:16:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5e8a174d-f456-4455-bfde-318cda97632a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:56:e2:fa:20:d1:0d:55:dc:e2:b8:08:a7:
                    75:be:8e:bc:84:bf:67:7c:35:b5:35:e5:78:93:fc:
                    2f:81:29:81:cf:48:9a:88:4c:7d:c4:7e:a3:d4:81:
                    02:fe:cd:9b:e7:cf:63:15:ab:35:15:d4:bd:55:7f:
                    eb:67:61:1e:2d:34:fc:0a:34:99:a8:3b:28:f1:71:
                    d7:40:cd:08:38:b6:51:b8:89:0b:d8:20:16:4a:34:
                    79:63:9f:65:3c:ec:cc:ea:3f:75:12:95:0a:27:42:
                    e6:ff:c1:0b:3f:2d:7f:ea:c9:b1:e2:80:9d:ff:41:
                    e2:ca:83:33:0f:da:15:4e:88:ac:4a:1f:44:01:99:
                    e2:ce:c1:50:cf:b8:81:3b:02:b8:65:6a:68:5a:70:
                    a7:c6:db:b2:df:37:a9:5a:ea:bf:e6:4a:6c:c7:08:
                    74:1b:d3:9e:ef:70:c0:af:4e:f5:0a:2a:df:20:9d:
                    2f:e0:6e:e5:b1:34:b5:7e:88:b6:86:9a:1e:38:1f:
                    e2:5e:11:d0:9c:77:c2:cc:1b:eb:fe:b4:1d:a8:70:
                    12:46:16:27:8b:27:79:2c:d2:1e:fe:67:44:e9:38:
                    30:fa:79:9b:f6:ee:73:0b:68:33:7e:ef:e0:a9:78:
                    3c:be:20:d0:ad:d5:28:c0:e4:fd:66:56:03:f6:51:
                    1f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BE:0E:D6:C3:C4:50:05:08:9A:CF:42:89:90:BE:12:04:C1:72:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66aca485-0b29-378e-9f5e-9bef2d1825c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e4:3e:a3:70:3d:fc:6f:a6:d4:7a:33:18:36:fe:06:44:e2:
         5d:15:31:a4:d1:9b:c6:2c:7e:30:f0:dd:23:7f:69:be:41:61:
         e5:48:4a:03:8c:2a:31:46:47:af:21:a8:c0:0f:c4:6f:3e:82:
         1f:ec:02:4e:91:96:39:06:17:f7:8d:7b:7c:bc:c7:a2:dd:dd:
         6e:03:6b:2c:52:a7:27:f6:db:0a:9f:57:d7:a5:dd:c1:1c:6d:
         e5:79:8f:f6:ce:d8:ae:6e:74:a1:29:38:a6:a1:b4:aa:e2:11:
         8c:f9:9f:cd:06:09:17:00:24:be:a2:f2:ef:b7:c1:97:db:d6:
         e0:d9:18:56:a4:66:63:4c:9b:83:af:9f:e6:47:df:0f:6b:50:
         19:8b:3c:21:94:93:f5:66:99:8d:58:45:0c:2d:ee:cd:6f:1c:
         9a:3a:4e:20:14:d5:ac:f9:cc:3b:cb:dc:e7:e0:29:7f:9f:46:
         98:d0:4e:88:f7:11:82:8c:14:ce:80:3e:8b:a5:55:b7:bd:bb:
         bf:1b:6b:c3:49:29:11:9a:e9:f9:c6:24:28:e0:52:ed:66:2a:
         ad:d2:06:53:d5:ee:78:12:a6:45:d4:2b:67:86:0b:d6:7e:22:
         20:30:c5:b2:43:7a:6e:17:f0:5c:ab:85:ac:a9:95:fc:7f:a7:
         1d:3a:80:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKIYVHzKQZp0AWQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NWU4YTE3NGQtZjQ1Ni00NDU1LWJmZGUtMzE4Y2RhOTc2MzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrJW4vog0Q1V3OK4CKd1vo68hL9nfDW1NeV4
k/wvgSmBz0iaiEx9xH6j1IEC/s2b589jFas1FdS9VX/rZ2EeLTT8CjSZqDso8XHX
QM0IOLZRuIkL2CAWSjR5Y59lPOzM6j91EpUKJ0Lm/8ELPy1/6smx4oCd/0HiyoMz
D9oVToisSh9EAZnizsFQz7iBOwK4ZWpoWnCnxtuy3zepWuq/5kpsxwh0G9Oe73DA
r071CirfIJ0v4G7lsTS1foi2hpoeOB/iXhHQnHfCzBvr/rQdqHASRhYniyd5LNIe
/mdE6Tgw+nmb9u5zC2gzfu/gqXg8viDQrdUowOT9ZlYD9lEfxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEe+DtbDxFAFCJrPQomQvhIEwXLlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjZhY2E0ODUtMGIyOS0z
NzhlLTlmNWUtOWJlZjJkMTgyNWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIaUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHkPqNwPfxvptR6Mxg2/gZE4l0VMaTRm8YsfjDw3SN/ab5BYeVISgOM
KjFGR68hqMAPxG8+gh/sAk6RljkGF/eNe3y8x6Ld3W4DayxSpyf22wqfV9el3cEc
beV5j/bO2K5udKEpOKahtKriEYz5n80GCRcAJL6i8u+3wZfb1uDZGFakZmNMm4Ov
n+ZH3w9rUBmLPCGUk/VmmY1YRQwt7s1vHJo6TiAU1az5zDvL3OfgKX+fRpjQToj3
EYKMFM6APoulVbe9u78ba8NJKRGa6fnGJCjgUu1mKq3SBlPV7ngSpkXUK2eGC9Z+
IiAwxbJDem4X8Fyrhayplfx/px06gNk=
-----END CERTIFICATE-----