Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79b82996-c04e-3be6-b966-8d1175591b85.roa
File:                     79b82996-c04e-3be6-b966-8d1175591b85.roa (raw, json)
Hash identifier:          oBxNH0jMWIBYhHkMPJLJMTHmrtctTjQwlB8Rx2qZnnE=
Subject key identifier:   A8:18:57:E3:A4:16:D3:6C:D3:46:57:17:19:D3:A7:7B:BB:1D:48:DE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285844A3A12F81E50BD6854A6A3680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79b82996-c04e-3be6-b966-8d1175591b85.roa
Signing time:             Sun 21 Jan 2024 12:00:00 +0000
ROA not before:           Sun 21 Jan 2024 12:00:00 +0000
ROA not after:            Wed 04 Jun 2025 04:00:00 +0000
asID:                     36411
IP address blocks:        104.135.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a3:a1:2f:81:e5:0b:d6:85:4a:6a:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 21 12:00:00 2024 GMT
            Not After : Jun  4 04:00:00 2025 GMT
        Subject: CN=2b56f329-88ab-4583-b5f6-06bf6eee14d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:08:ae:b7:5e:ee:2a:88:b5:43:ef:db:76:
                    85:28:5e:6d:fd:50:c6:ed:6c:bb:da:00:71:97:21:
                    60:94:9e:c4:78:b2:bf:2c:0f:54:42:5d:33:1f:4d:
                    b4:cf:c5:6a:e6:dc:d9:19:28:69:6e:99:93:1d:db:
                    cf:67:d9:e5:da:f5:69:2d:39:24:aa:d5:be:77:42:
                    9a:d1:de:13:66:89:99:49:db:c6:a9:1b:56:af:53:
                    41:77:63:83:78:f1:dc:52:58:cb:85:da:c1:9c:28:
                    1f:2d:da:63:51:de:39:54:37:fd:a6:c1:d0:2c:f8:
                    3d:57:c3:bb:69:c0:c8:e4:1e:7e:6b:fb:53:27:83:
                    8d:e6:88:db:21:f3:d4:9a:28:ee:fe:a6:10:3f:15:
                    c4:2e:d8:9e:13:c6:ec:22:26:f4:a9:38:c0:c5:f1:
                    b7:93:85:1a:50:66:2f:f1:09:5e:fd:58:66:fa:19:
                    3e:bd:35:55:0c:c2:95:16:dd:9d:67:f8:fa:a7:6f:
                    fa:9a:12:de:df:b5:76:21:23:fe:92:72:a3:c6:d4:
                    d1:fb:ca:9e:d8:8e:7a:6a:d9:f7:c8:b4:f8:10:d2:
                    33:ac:bf:37:46:b8:d8:82:f4:0b:7c:ba:17:27:46:
                    ea:6a:22:6d:ca:c7:aa:79:34:dd:bc:e1:d2:d3:7b:
                    f5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:18:57:E3:A4:16:D3:6C:D3:46:57:17:19:D3:A7:7B:BB:1D:48:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79b82996-c04e-3be6-b966-8d1175591b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:fa:d2:a8:1f:42:d0:0c:70:53:f9:e0:8a:64:2a:97:c7:cb:
         ad:4e:d3:09:ae:7d:ff:e3:da:2a:b0:4a:6f:35:3c:da:c3:c8:
         00:ab:10:ff:24:04:8d:f9:f0:a1:59:fe:8b:c1:ca:ab:75:8a:
         dc:fb:a5:47:ed:ba:3b:b8:55:17:64:05:7e:5d:8a:0b:91:9e:
         cd:5e:12:74:7c:bb:72:21:85:68:7a:33:51:7c:77:ff:8f:3a:
         fa:13:dc:2d:97:7c:18:1a:95:18:f7:8b:fb:89:84:b3:fb:cc:
         97:60:c7:c8:ba:7f:e1:eb:50:98:0d:40:3e:0d:ae:5d:3d:ba:
         37:3a:c3:a8:d2:6f:bd:fc:ec:a3:76:44:f4:3f:af:36:07:61:
         25:8a:ed:7c:7c:94:28:0b:83:64:23:43:f2:e1:5b:dd:3a:c9:
         c4:1f:d5:b5:72:ce:5a:20:49:a9:f1:f7:83:7d:92:fb:d4:64:
         21:b4:5e:17:42:36:ae:a7:71:bb:57:88:6b:46:4d:d3:1e:3a:
         da:d6:b2:63:c9:59:fa:fd:6b:0b:a0:94:5c:32:03:12:2c:e9:
         b9:af:7c:c9:b3:b2:a2:bd:15:63:b9:2e:43:b8:51:50:31:e2:
         6e:09:f3:59:05:99:00:11:79:94:9f:46:b8:b1:ef:a1:2b:e8:
         f3:71:24:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESjoS+B5QvWhUpqNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDEyMTEyMDAwMFoXDTI1MDYwNDA0MDAwMFowLzEtMCsGA1UEAxMk
MmI1NmYzMjktODhhYi00NTgzLWI1ZjYtMDZiZjZlZWUxNGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo8Irrde7iqItUPv23aFKF5t/VDG7Wy72gBx
lyFglJ7EeLK/LA9UQl0zH020z8Vq5tzZGShpbpmTHdvPZ9nl2vVpLTkkqtW+d0Ka
0d4TZomZSdvGqRtWr1NBd2ODePHcUljLhdrBnCgfLdpjUd45VDf9psHQLPg9V8O7
acDI5B5+a/tTJ4ON5ojbIfPUmiju/qYQPxXELtieE8bsIib0qTjAxfG3k4UaUGYv
8Qle/Vhm+hk+vTVVDMKVFt2dZ/j6p2/6mhLe37V2ISP+knKjxtTR+8qe2I56atn3
yLT4ENIzrL83RrjYgvQLfLoXJ0bqaiJtyseqeTTdvOHS03v18QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKgYV+OkFtNs00ZXFxnTp3u7HUjeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzliODI5OTYtYzA0ZS0z
YmU2LWI5NjYtOGQxMTc1NTkxYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIf0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACv60qgfQtAMcFP54IpkKpfHy61O0wmuff/j2iqwSm81PNrDyACrEP8k
BI358KFZ/ovByqt1itz7pUftuju4VRdkBX5diguRns1eEnR8u3IhhWh6M1F8d/+P
OvoT3C2XfBgalRj3i/uJhLP7zJdgx8i6f+HrUJgNQD4Nrl09ujc6w6jSb7387KN2
RPQ/rzYHYSWK7Xx8lCgLg2QjQ/LhW906ycQf1bVyzlogSanx94N9kvvUZCG0XhdC
Nq6ncbtXiGtGTdMeOtrWsmPJWfr9awuglFwyAxIs6bmvfMmzsqK9FWO5LkO4UVAx
4m4J81kFmQAReZSfRrix76Er6PNxJHQ=
-----END CERTIFICATE-----