Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b1c3b5-ac4a-39ca-b4e6-9cfac3048056.roa
File:                     66b1c3b5-ac4a-39ca-b4e6-9cfac3048056.roa (raw, json)
Hash identifier:          nGOGqd5h6WPpb3B9rINn3yxIyhaE8s5GGIjcFJ7nzMQ=
Subject key identifier:   E1:70:C1:4A:B9:EA:BD:73:E8:6F:FE:0B:40:9A:5B:EF:71:3C:67:F2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F36D125BCDD6FE462D61C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b1c3b5-ac4a-39ca-b4e6-9cfac3048056.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f3:6d:12:5b:cd:d6:fe:46:2d:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6186a175-fe99-4787-bc2e-3e907a20dd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ae:69:76:e0:16:87:80:d6:4f:d3:87:af:9e:
                    ed:2b:4a:bd:43:2f:ce:c2:f0:c4:d4:4e:34:63:b1:
                    3f:be:b1:c0:c1:18:4d:9b:5d:44:d2:7c:e3:68:9c:
                    da:7d:b5:48:4b:59:62:98:f3:7b:c1:ae:62:a3:e9:
                    8d:42:9b:d2:89:f5:c6:fc:63:4a:e9:a2:c0:14:5a:
                    5e:25:b1:f5:c7:3c:48:6b:37:22:af:9c:f2:87:38:
                    cb:5b:16:f3:b0:72:b4:47:22:0a:1b:b4:17:f9:a0:
                    f4:81:91:63:c8:fe:3d:a4:de:eb:5e:6e:fd:00:9a:
                    3d:93:11:ac:65:4f:03:b0:ba:28:b6:3c:bf:3f:e5:
                    3a:ac:3b:f2:0f:8c:ec:45:79:e6:1d:ed:7b:93:d0:
                    eb:31:d8:ee:fc:02:c2:59:8d:c8:1b:3b:b2:0b:3e:
                    ad:9b:e3:7f:f5:c6:b9:7e:01:2b:70:6a:36:15:12:
                    51:8e:e2:86:bd:ef:21:3d:dd:ee:4b:55:cf:68:62:
                    47:13:bf:1b:19:5c:1c:87:e7:16:77:86:3d:e6:e0:
                    39:20:a6:f9:0d:b8:97:2d:7f:d8:86:ce:4a:b6:d8:
                    ef:92:b1:67:89:58:61:61:06:85:1d:58:58:cd:e4:
                    ed:cd:13:41:9f:ca:34:7b:df:8a:f0:46:1c:8c:b2:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:70:C1:4A:B9:EA:BD:73:E8:6F:FE:0B:40:9A:5B:EF:71:3C:67:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b1c3b5-ac4a-39ca-b4e6-9cfac3048056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d8:80:a2:57:4c:36:8a:ce:0d:1d:a6:91:16:53:cd:39:94:
         0c:9d:1a:ce:6a:8a:b5:93:a8:4c:0c:c1:f4:7f:f8:8b:eb:66:
         8a:15:17:3a:e1:b3:db:80:45:6b:d3:4e:25:8d:2e:5e:1d:8f:
         6c:49:f0:51:6c:56:75:34:e7:ba:8c:93:e8:e0:93:30:88:40:
         ce:e0:55:62:01:52:28:57:db:5a:20:b5:95:ac:81:a2:39:83:
         d4:e7:03:4d:96:e9:48:19:db:57:90:1c:c7:c1:73:e6:82:b0:
         96:66:85:87:43:d4:32:69:cf:e3:0b:1d:e8:f7:e1:61:4a:ce:
         da:62:a6:8b:36:7e:73:4f:0b:9d:c2:b2:ff:25:c8:96:1c:d0:
         57:ce:6d:10:51:1c:b0:4a:b3:3b:71:d6:28:c2:2f:41:45:a2:
         63:71:30:c1:49:af:c3:75:fe:00:f3:35:48:9c:40:9d:0e:86:
         48:25:0d:35:4e:7d:e6:0b:04:98:a8:5b:44:e1:7a:b3:9d:32:
         1d:ac:64:4d:2b:da:61:b9:45:70:ca:36:09:41:eb:89:17:c6:
         18:46:a6:54:7a:d5:6a:c4:2e:02:b0:a8:56:87:39:7c:9f:13:
         e6:d6:0f:cd:b4:95:4e:35:a8:2c:4b:28:55:54:88:56:aa:d1:
         b1:5a:35:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----