Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/70f66f7f-10c0-3469-842b-70377a571bb7.roa
File:                     70f66f7f-10c0-3469-842b-70377a571bb7.roa (raw, json)
Hash identifier:          mi/j6LilcHj9Zw+yTWcLRGQIgHCI815GRI1iHXWmNQc=
Subject key identifier:   7C:FA:25:3C:D6:8B:5B:04:83:1B:54:09:EC:F3:9A:63:BB:9C:8A:B8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1824FC6C6DFC0227805700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/70f66f7f-10c0-3469-842b-70377a571bb7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:18:24:fc:6c:6d:fc:02:27:80:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a75db1b6-c83f-404a-9d2f-885c99a6db2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:29:b5:7d:ab:42:89:92:73:88:e8:10:21:
                    ad:6c:70:15:93:23:fc:a4:0d:c3:5b:37:01:c7:e5:
                    b9:45:75:a6:48:49:50:06:4c:80:c3:74:15:86:2d:
                    62:88:2c:90:a3:6b:29:8f:1c:84:0b:81:08:d7:a9:
                    1f:32:d1:f0:b8:d0:51:00:0e:d5:cc:43:74:7c:81:
                    23:2b:ff:e0:8e:37:90:ff:bd:94:d3:8f:84:07:ba:
                    48:b9:97:ea:70:de:d1:5b:02:b2:5c:18:82:4f:a4:
                    de:1e:ee:45:95:fd:8a:a0:70:17:54:8e:1f:24:67:
                    68:ae:39:41:86:c6:29:dd:99:d2:48:f8:88:7f:7e:
                    c4:b5:84:ea:cb:01:95:12:0f:45:d4:06:4a:49:9a:
                    47:00:52:40:31:2d:7f:64:4f:e3:65:27:cc:0a:fc:
                    7a:65:9d:1d:d3:8a:c8:e7:43:b1:57:b3:43:72:c2:
                    8a:19:a4:c1:d1:e3:67:ad:72:79:de:64:11:1c:6a:
                    21:2d:ad:b7:26:4f:b4:fd:d8:de:0f:7c:e9:5d:c9:
                    e2:7e:09:c4:9c:35:ad:34:1b:82:d7:94:57:9b:af:
                    3b:e4:0a:89:29:ca:c5:27:48:b3:c7:ff:a7:86:73:
                    18:72:af:4a:6c:84:fe:a7:41:2e:86:7c:21:34:4a:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FA:25:3C:D6:8B:5B:04:83:1B:54:09:EC:F3:9A:63:BB:9C:8A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/70f66f7f-10c0-3469-842b-70377a571bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:25:6b:8f:e6:8f:63:3d:37:49:8a:e4:36:dd:b4:9f:98:5d:
         25:a4:66:90:27:2a:35:d2:c0:b6:9d:79:66:e2:f6:60:25:40:
         aa:a1:8b:c6:a6:02:11:d6:b4:a6:9c:9d:10:b0:d6:fb:e0:d1:
         81:a7:4c:42:d9:c2:51:ad:92:5f:a2:f5:14:e8:5a:95:56:b0:
         aa:1f:99:68:73:da:12:5a:ba:b9:ca:4e:3e:4c:88:90:71:62:
         28:b4:cc:c6:4d:48:c0:16:45:63:e1:7d:52:92:90:9b:0c:86:
         a3:fc:b4:10:26:35:ca:18:dc:a0:9b:ff:b4:c6:ec:d6:71:c9:
         4b:0c:f2:d4:71:e4:33:ec:38:57:de:ce:b9:d0:4e:dc:1e:b4:
         ff:c1:9b:94:6f:6b:46:13:27:06:5b:6b:1f:c8:f4:e0:4a:2f:
         72:73:31:0f:25:9a:fb:3b:7d:78:6c:a9:17:35:ea:eb:4e:0c:
         a7:95:54:e7:4e:83:a6:df:b2:17:b5:cc:e3:6c:5c:28:c6:0d:
         5c:7f:8d:ca:a6:02:66:9f:74:7e:0f:9c:ee:fb:1a:5f:ef:4b:
         49:5f:26:74:08:02:d8:d4:56:82:12:67:72:24:17:23:61:dd:
         7d:24:6c:39:4f:8a:be:25:2e:45:87:1c:19:16:36:23:36:61:
         0d:5b:d9:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGCT8bG38AieAVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YTc1ZGIxYjYtYzgzZi00MDRhLTlkMmYtODg1Yzk5YTZkYjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqUptX2rQomSc4joECGtbHAVkyP8pA3DWzcB
x+W5RXWmSElQBkyAw3QVhi1iiCyQo2spjxyEC4EI16kfMtHwuNBRAA7VzEN0fIEj
K//gjjeQ/72U04+EB7pIuZfqcN7RWwKyXBiCT6TeHu5Flf2KoHAXVI4fJGdorjlB
hsYp3ZnSSPiIf37EtYTqywGVEg9F1AZKSZpHAFJAMS1/ZE/jZSfMCvx6ZZ0d04rI
50OxV7NDcsKKGaTB0eNnrXJ53mQRHGohLa23Jk+0/djeD3zpXcnifgnEnDWtNBuC
15RXm6875AqJKcrFJ0izx/+nhnMYcq9KbIT+p0EuhnwhNEqNawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHz6JTzWi1sEgxtUCezzmmO7nIq4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzBmNjZmN2YtMTBjMC0z
NDY5LTg0MmItNzAzNzdhNTcxYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALkla4/mj2M9N0mK5DbdtJ+YXSWkZpAnKjXSwLadeWbi9mAlQKqhi8am
AhHWtKacnRCw1vvg0YGnTELZwlGtkl+i9RToWpVWsKofmWhz2hJaurnKTj5MiJBx
Yii0zMZNSMAWRWPhfVKSkJsMhqP8tBAmNcoY3KCb/7TG7NZxyUsM8tRx5DPsOFfe
zrnQTtwetP/Bm5Rva0YTJwZbax/I9OBKL3JzMQ8lmvs7fXhsqRc16utODKeVVOdO
g6bfshe1zONsXCjGDVx/jcqmAmafdH4PnO77Gl/vS0lfJnQIAtjUVoISZ3IkFyNh
3X0kbDlPir4lLkWHHBkWNiM2YQ1b2U4=
-----END CERTIFICATE-----