Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7fe898f5-4e96-3663-874d-64f98b78291f.roa
File:                     7fe898f5-4e96-3663-874d-64f98b78291f.roa (raw, json)
Hash identifier:          U7PLRfgjRLTgdgWBDrK1QQw9UFI9MfuCku8d7dt4AmA=
Subject key identifier:   7E:95:DB:44:74:92:70:32:A2:A6:2C:19:5A:0F:28:77:62:2B:33:E5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F804AF87A4368A6FFE91E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7fe898f5-4e96-3663-874d-64f98b78291f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f8:04:af:87:a4:36:8a:6f:fe:91:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=cbfb8c3d-0a8d-4820-aba1-cc3be31a8007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3d:a9:96:a8:9c:de:b9:e5:3b:6d:54:f1:12:
                    b6:08:cf:7a:d7:71:d1:ab:f2:57:6f:e1:ab:20:0f:
                    f9:5e:e8:36:0c:3b:77:41:c2:91:d8:8a:1e:7f:e8:
                    c6:7d:75:90:f8:6b:44:18:f1:19:03:e7:63:60:08:
                    48:2d:bd:fe:77:58:58:75:da:e1:60:36:18:d2:c8:
                    7e:ca:c2:ec:15:28:cb:5f:e9:ee:b8:84:04:45:76:
                    cb:21:de:64:78:09:be:b0:4b:1e:2e:e4:af:85:cb:
                    c4:fa:cb:cd:5f:0e:58:cd:3c:83:b0:40:08:bf:53:
                    b4:0c:13:6e:5c:df:c8:fa:de:36:71:62:d7:4f:dd:
                    c1:80:0c:fc:41:37:c4:32:24:e3:9c:93:17:e0:11:
                    4c:38:b7:f8:75:b0:1e:92:a2:9e:06:be:be:3f:ea:
                    d6:80:3d:57:04:7f:f0:f3:d8:92:20:1e:36:8a:8e:
                    03:71:c9:14:c1:74:34:c2:ae:17:22:07:0b:f6:07:
                    30:43:6b:f6:4c:ac:e7:a3:7d:f9:04:66:9e:ac:76:
                    93:f3:4a:1b:63:f4:ed:20:5c:e0:dd:06:79:59:87:
                    fe:44:72:b1:5d:54:c0:65:ca:45:7e:7f:de:0e:d2:
                    78:9f:b4:a8:54:c7:99:a6:ae:86:24:0d:fc:7a:8d:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:95:DB:44:74:92:70:32:A2:A6:2C:19:5A:0F:28:77:62:2B:33:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7fe898f5-4e96-3663-874d-64f98b78291f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ec:30:c8:3f:fa:fd:56:27:a0:00:df:e6:d2:c1:75:0f:ca:
         b5:fe:a5:d6:dd:96:20:72:73:1a:db:fd:24:84:43:fc:0d:1f:
         18:e6:bb:b9:01:8e:2c:7e:95:b1:74:36:87:43:1d:8c:20:de:
         8c:2b:7f:0e:78:9b:ca:2d:56:15:8d:44:e2:4e:68:8c:b5:9d:
         15:cc:42:d7:60:31:a8:da:29:d4:96:7e:95:82:af:01:25:aa:
         16:5c:ae:f0:b4:f6:9d:8d:2e:98:1c:85:72:b7:1b:5f:92:f6:
         4e:63:1b:1e:c9:71:a7:ee:f9:3d:98:33:99:30:5c:8a:61:5f:
         07:cd:9d:65:40:de:69:96:0e:04:dd:22:85:94:f0:16:91:25:
         eb:f9:61:96:93:cc:6f:25:fc:dc:8c:33:d6:d4:bd:c0:27:ed:
         ad:52:ca:64:0b:21:04:1b:05:c4:0e:8a:11:9a:a3:6a:eb:f1:
         0b:d8:84:64:c5:18:4d:4c:8f:67:70:4c:d3:df:bb:4e:ee:37:
         29:92:39:f1:6e:94:19:59:d4:16:b7:3d:23:9f:72:55:51:51:
         5d:20:39:2e:ab:31:88:c6:7c:3a:a3:99:dd:e2:fa:6c:8f:42:
         1e:33:dd:93:04:ee:ae:8e:b8:6b:23:6a:7b:2f:70:8c:fb:8e:
         d6:be:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----