Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/791a12f8-cc37-3fec-9a7f-1f8fb0ad0b4e.roa
File:                     791a12f8-cc37-3fec-9a7f-1f8fb0ad0b4e.roa (raw, json)
Hash identifier:          L5eP+XfkhTxt02ATvOnva31z0K1XmkJtXsWYXCV8Bw4=
Subject key identifier:   7C:4D:C4:C4:36:EA:11:A8:1D:D9:87:58:E1:F8:AE:0D:89:50:5F:EE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A07D34FC43D37BE3BD6C600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/791a12f8-cc37-3fec-9a7f-1f8fb0ad0b4e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.128.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:07:d3:4f:c4:3d:37:be:3b:d6:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=66dbbde1-fb50-4396-b3c8-ae68fa48e2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:8a:0d:3f:9d:2f:be:53:99:5f:d9:3f:ca:
                    3c:b0:4d:05:11:47:33:e7:b8:a4:ef:7e:87:37:8b:
                    30:b2:cf:52:79:df:bc:10:93:a5:f6:f0:2e:af:82:
                    c2:1a:78:9c:14:a5:61:91:c4:ab:be:94:9d:9b:f7:
                    ae:7b:0f:f8:db:cb:56:96:fb:98:1d:10:af:c9:2c:
                    ac:10:8c:7f:07:47:16:19:6d:37:f8:19:9e:ec:42:
                    f5:8c:c8:a6:1a:4e:c8:bc:1e:c7:be:5b:29:94:18:
                    9b:20:1b:45:0c:e5:ab:b1:ff:2d:55:cc:d3:55:cd:
                    2d:8e:e3:be:a6:a7:93:af:60:51:c0:bf:49:cc:01:
                    f6:13:9b:a3:b7:ff:c0:67:c3:5b:99:82:af:a2:0b:
                    11:8a:08:c1:d5:41:e3:04:dc:08:de:1a:97:15:7d:
                    fd:ca:6d:80:97:6c:1b:ba:06:a9:77:88:49:23:41:
                    d4:bf:88:55:f5:ac:4e:7d:1a:af:b3:4d:37:2c:14:
                    fd:e0:76:66:7a:57:97:e0:7f:0f:75:24:db:dd:16:
                    42:b7:40:73:32:09:bd:e5:ea:45:60:e2:7b:87:e7:
                    b4:cf:04:61:fd:25:f0:ef:ba:37:94:1a:28:4f:e3:
                    f2:9c:81:98:3b:1d:fe:fa:1e:ba:cb:a9:04:4d:0f:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4D:C4:C4:36:EA:11:A8:1D:D9:87:58:E1:F8:AE:0D:89:50:5F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/791a12f8-cc37-3fec-9a7f-1f8fb0ad0b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4c:12:77:65:49:9f:d5:bf:8d:61:d9:53:8c:ea:e3:01:db:
         d6:2f:8b:cc:4b:98:62:4f:c4:24:d7:11:a6:de:75:e0:bd:7d:
         c6:73:ad:92:ea:65:9a:d1:ad:5b:ef:2e:49:92:c0:30:0a:b0:
         03:48:8c:a4:29:1c:97:5c:b4:45:f0:52:01:44:9d:ce:48:fa:
         44:25:2a:8d:8c:74:81:42:f4:54:de:d1:5a:10:cc:94:fe:8e:
         22:cf:8f:26:65:09:bc:d5:6c:96:ad:25:98:47:e1:5c:ae:28:
         14:67:17:16:58:a3:0a:58:3a:51:ea:20:88:f9:0e:d5:e4:f3:
         1f:33:e4:f3:b6:53:02:bd:39:75:94:4f:99:f1:1d:02:55:c7:
         aa:8c:d5:66:9c:f3:e6:51:18:27:ff:ff:54:ca:12:3b:45:38:
         16:de:09:88:aa:fe:6d:2a:97:b4:8d:b8:c3:a5:56:66:79:49:
         fd:7c:a5:b9:09:1f:fd:95:b3:76:52:b4:bb:3e:65:52:c7:db:
         12:b6:9c:cf:fe:77:fe:80:25:3b:62:98:01:8f:d2:e9:3d:53:
         0a:43:60:84:1a:8e:31:03:bb:a5:7a:ea:d6:ef:eb:5f:6d:9a:
         f3:29:42:86:c3:fa:7b:a0:81:57:c7:fa:f8:82:78:2c:4e:9a:
         e3:c2:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:29 2024 by rpki-client on console-ams.rpki-client.org