Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/75adfece-784a-30cc-b376-b799260dadd8.roa
File:                     75adfece-784a-30cc-b376-b799260dadd8.roa (raw, json)
Hash identifier:          Egtvc0wE2ai5JPQpcYEY8s1Hlij01yzAhsDbryveJcs=
Subject key identifier:   17:21:48:64:4D:E1:4A:62:09:83:13:B0:DD:CA:97:30:AB:E8:CC:D0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1CE3F48FC289EA61D3A080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/75adfece-784a-30cc-b376-b799260dadd8.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1c:e3:f4:8f:c2:89:ea:61:d3:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=045611c3-929e-4185-9467-155aad2981ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:9b:0d:42:7d:37:a2:a3:e2:b6:4d:51:b6:
                    19:c6:ce:91:95:85:76:63:41:b0:e3:dc:34:dc:0b:
                    31:86:67:79:e2:ba:1a:9d:05:af:5a:d8:8c:6e:cb:
                    ea:51:e3:c6:1a:5b:5d:c1:2a:69:cb:ec:f3:28:ba:
                    4d:e7:78:a9:62:bd:ee:26:66:96:08:fd:ab:74:7e:
                    1d:a3:5f:97:4a:7e:f9:95:8a:ca:2c:f6:9d:80:46:
                    65:da:57:b0:56:77:44:ea:08:04:67:79:4e:f5:9b:
                    c4:3a:54:dd:08:cd:c0:10:96:c5:b4:b1:ee:9b:06:
                    8d:9d:ee:fe:28:9f:c2:39:95:db:5a:d4:31:3c:93:
                    cf:e3:d9:9c:a4:28:76:6f:3f:94:fb:50:aa:e3:28:
                    b8:ee:59:49:54:fc:7d:a7:66:71:82:d1:82:40:57:
                    67:9f:02:7a:53:6b:1a:0b:52:50:74:35:0c:46:9f:
                    48:fe:5b:d0:72:d5:5e:4c:8e:91:73:de:04:68:7c:
                    c9:46:3c:fa:2b:57:d5:18:9b:91:0f:6c:fe:0d:a4:
                    7f:61:85:c6:51:be:56:e6:ba:dc:5d:33:29:94:76:
                    4b:09:5f:c9:fe:e8:9c:6e:4b:c1:2c:d2:fe:bb:a5:
                    23:72:27:14:83:78:14:7d:88:3f:8c:02:45:39:fa:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:21:48:64:4D:E1:4A:62:09:83:13:B0:DD:CA:97:30:AB:E8:CC:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/75adfece-784a-30cc-b376-b799260dadd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:01:71:de:ad:f7:c5:34:69:f2:b4:9f:b2:19:40:cc:91:5a:
         20:89:ba:b7:b4:48:5a:0c:4c:8f:7d:ff:fc:0b:4e:06:e6:23:
         60:ac:e6:20:55:bf:d1:d6:ce:ad:92:a4:0f:ed:af:38:94:eb:
         aa:ef:90:d0:ad:99:c6:ea:10:e1:29:dc:fa:e7:f3:c0:68:57:
         14:ad:b6:58:c0:e9:a5:24:71:de:8a:63:c8:2b:9c:2b:3c:d9:
         57:35:1f:00:04:48:d4:6f:03:7f:bc:0d:24:85:03:91:f7:84:
         c6:fd:d3:0d:c5:99:b5:df:fc:bf:3c:ef:9e:7b:39:23:d4:e9:
         7f:7f:f6:3d:5a:fd:44:02:58:be:61:05:69:80:a1:b9:5a:1b:
         fe:c9:b8:35:45:44:24:b2:00:13:b7:a4:92:72:bc:e0:0d:29:
         49:1c:a5:2c:9d:e0:45:b5:67:89:f1:b5:92:95:18:9d:31:a5:
         c1:37:70:97:1c:8a:40:3f:7d:b6:e6:53:d1:0b:2b:fa:77:b1:
         aa:56:af:55:cc:e0:03:54:1d:4b:68:02:fa:53:20:29:01:17:
         cd:22:61:e5:70:77:2a:99:2e:5c:e8:7e:9a:2d:b7:9e:26:f6:
         cb:43:97:9c:5f:f6:72:7b:69:32:5e:e5:70:29:87:24:03:c4:
         06:f6:62:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----