Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/864504ee-05c7-3401-b24b-70abdf19310f.roa
File:                     864504ee-05c7-3401-b24b-70abdf19310f.roa (raw, json)
Hash identifier:          eh3KYhtkRIIPEKFhNanZujEFj3o8pWta7H+wpSoSU3s=
Subject key identifier:   44:53:4E:8A:C8:CF:BA:BC:12:E5:35:4E:65:15:BB:09:47:F1:7E:8D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A22AB1485E36C82B2A60CC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/864504ee-05c7-3401-b24b-70abdf19310f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:22:ab:14:85:e3:6c:82:b2:a6:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=df0345c3-698c-43b4-9227-0f0ce92a9603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:26:6b:4e:10:26:42:6d:b1:d2:59:b5:79:
                    f4:d3:43:a8:46:37:4d:e4:48:69:79:74:40:a7:aa:
                    86:62:a2:1d:50:a7:25:e5:ca:06:b1:be:58:cb:16:
                    c5:9c:fb:01:d8:d7:4f:8c:95:8e:c9:41:25:7f:26:
                    7b:68:c5:ed:31:f7:78:55:14:fd:7e:2f:a5:57:6b:
                    2c:f6:01:7c:0a:6b:5a:95:a0:34:cc:bd:68:a3:e5:
                    9f:dc:c0:63:ef:48:73:cb:c0:0f:27:3f:dd:0a:73:
                    b7:b3:bd:43:5f:01:d0:96:7b:e5:e6:ec:5c:41:4c:
                    31:3f:73:52:0d:d6:a3:bc:69:47:8a:62:03:21:24:
                    61:39:4e:b2:3e:56:00:d0:57:4e:fb:99:dd:52:20:
                    78:6f:3b:1d:d3:a0:d3:cb:7d:59:78:2b:a3:55:98:
                    6d:00:2f:13:85:04:a4:ba:fe:84:b0:cb:fd:a4:29:
                    79:67:ec:ee:9d:e4:f3:bf:6a:b8:44:44:5a:27:a8:
                    ad:6a:42:1c:df:64:98:4d:d5:5e:72:e9:2b:cc:45:
                    9f:85:6b:9f:d6:cc:fc:5f:40:a6:7c:fe:e6:d5:f8:
                    49:71:2c:22:cd:b7:99:97:9a:2e:f2:ff:bc:23:6f:
                    fd:c6:e9:82:58:02:2b:87:c9:9e:05:80:00:0b:f8:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:53:4E:8A:C8:CF:BA:BC:12:E5:35:4E:65:15:BB:09:47:F1:7E:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/864504ee-05c7-3401-b24b-70abdf19310f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:3e:54:84:fa:81:ca:0a:a4:92:6a:14:0f:bd:8d:91:2e:8c:
         45:9f:3f:01:ec:1d:5e:c8:54:73:01:59:70:1a:11:53:39:3c:
         d4:5a:2d:ea:fd:45:d3:cb:74:40:d5:43:4e:20:65:ad:05:88:
         91:ac:56:cc:53:d6:45:ab:d5:52:f3:02:e4:14:b5:52:00:ae:
         bd:22:47:a6:be:6c:3b:1f:90:3b:a3:53:e5:5d:ee:72:21:4b:
         1e:18:d0:b2:62:fc:80:7c:0c:5c:62:71:89:66:ee:23:f1:25:
         bc:1c:85:96:0e:ab:f8:2b:bc:8e:65:10:fd:a3:10:76:57:b3:
         d9:2d:cb:b0:7a:6a:fd:b9:ef:b5:17:2d:6e:9d:7d:c1:72:98:
         06:d7:22:13:b0:e1:64:02:bc:98:e1:79:93:fd:38:8d:4c:13:
         ba:4f:d3:13:48:a6:65:7f:cd:31:04:5a:dc:07:dd:c0:52:a4:
         f5:09:5f:69:0d:c0:79:90:16:a9:7f:d2:aa:65:01:f6:4d:d0:
         f3:6d:4c:94:a5:10:23:12:fd:ec:05:11:d4:88:53:53:6d:64:
         54:51:da:e3:1c:5b:0f:61:c5:4a:71:d9:65:74:97:1d:55:40:
         a4:8f:14:02:ef:a9:4d:81:bf:12:b7:47:b6:c1:79:51:49:f0:
         05:e3:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----