Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88683a9e-dfe8-3543-9b5a-3bcca172bab6.roa
File:                     88683a9e-dfe8-3543-9b5a-3bcca172bab6.roa (raw, json)
Hash identifier:          r/pMrMzv4xEUUXrtY8Nv5hfVBm1OilQw+uF+GSUoEqU=
Subject key identifier:   C5:2A:54:48:48:64:9C:8F:C7:67:93:89:4B:0C:F0:DB:BF:14:E3:15
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F2C322C4CAE8EB0CCF8B00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88683a9e-dfe8-3543-9b5a-3bcca172bab6.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f2:c3:22:c4:ca:e8:eb:0c:cf:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=53ee6c90-982a-43bc-927a-dd39b6d0620c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2b:61:49:ad:f1:ae:77:3d:2b:ff:f6:3c:23:
                    86:de:35:a7:67:cb:06:95:e4:26:49:1e:4f:6d:da:
                    fa:2e:50:c1:64:b3:61:5b:0c:35:d6:98:13:50:76:
                    54:2d:84:d2:99:bf:7b:2c:ae:54:cd:a7:35:6e:36:
                    62:73:47:61:35:53:99:ec:b4:97:d5:20:d1:55:b4:
                    69:34:f9:6c:68:87:15:54:7b:99:cb:bc:06:5e:9d:
                    18:0b:e0:b8:7b:b0:ee:b1:98:1a:40:67:2f:8d:f9:
                    86:a2:4d:05:c6:2d:65:37:ff:d2:a3:94:ca:43:f3:
                    f0:f3:db:f0:d1:07:16:02:71:7a:52:7e:6a:2a:62:
                    23:cb:35:fd:fc:44:3a:00:6a:42:44:19:7d:2f:66:
                    7a:4e:40:95:dc:53:03:78:eb:35:57:fd:3d:3c:c7:
                    22:1d:02:06:25:59:be:01:0a:66:7b:14:1a:24:6d:
                    75:73:8d:f7:59:e6:f1:a5:9f:a4:d6:a9:4a:74:37:
                    2e:e4:9e:98:55:79:da:7c:94:a8:10:fd:96:4d:db:
                    bd:3e:82:ef:83:bc:23:13:b7:ca:1f:58:f8:0a:ec:
                    f7:1e:01:ea:cc:b1:cd:b7:d2:b0:3e:fa:6f:28:2e:
                    2e:e0:57:03:e5:5a:b5:ed:94:58:ab:cd:0b:50:c0:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2A:54:48:48:64:9C:8F:C7:67:93:89:4B:0C:F0:DB:BF:14:E3:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88683a9e-dfe8-3543-9b5a-3bcca172bab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:af:9e:92:9d:23:08:cf:34:5d:45:00:48:74:4c:c1:e0:cc:
         11:55:1f:30:c6:69:c4:a9:d8:d8:b7:e7:73:8f:a6:98:97:ed:
         e5:ae:26:94:fd:37:8c:ca:51:5f:99:ce:1f:cf:d4:e6:88:df:
         6a:21:41:af:63:f0:38:77:c9:ab:49:8b:9d:95:16:a3:e7:44:
         52:33:71:1e:ee:41:da:a0:d3:c6:71:54:7a:ea:7e:e0:bb:55:
         13:37:74:6b:03:fe:2b:5c:94:a2:01:58:8e:11:fd:78:1a:3d:
         3a:3a:93:1e:96:96:9d:9a:c2:87:55:09:cc:a2:41:81:2f:2e:
         9e:ec:55:44:fe:4b:79:1a:24:4c:bf:de:cd:2b:37:dc:80:19:
         c3:f5:bd:fa:70:e9:b8:c3:44:c6:37:a3:b4:1e:a9:11:5f:db:
         a9:ca:15:2b:cc:0a:26:e0:9c:ad:74:e8:68:fe:3e:9a:69:bb:
         5b:04:ed:da:80:30:6e:86:25:d5:7b:0f:2f:66:ce:17:72:b1:
         93:b2:84:b1:d9:c5:1c:03:fc:37:55:ae:d8:d5:13:ae:8a:23:
         c4:88:75:34:ea:f9:1e:65:49:98:bb:c5:6c:a3:6a:27:1d:7e:
         d9:29:58:b2:4d:34:2d:b7:95:ac:c2:ef:eb:b0:ab:c5:76:84:
         85:85:2d:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ8sMixMro6wzPiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTNlZTZjOTAtOTgyYS00M2JjLTkyN2EtZGQzOWI2ZDA2MjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCthSa3xrnc9K//2PCOG3jWnZ8sGleQmSR5P
bdr6LlDBZLNhWww11pgTUHZULYTSmb97LK5Uzac1bjZic0dhNVOZ7LSX1SDRVbRp
NPlsaIcVVHuZy7wGXp0YC+C4e7DusZgaQGcvjfmGok0Fxi1lN//So5TKQ/Pw89vw
0QcWAnF6Un5qKmIjyzX9/EQ6AGpCRBl9L2Z6TkCV3FMDeOs1V/09PMciHQIGJVm+
AQpmexQaJG11c433WebxpZ+k1qlKdDcu5J6YVXnafJSoEP2WTdu9PoLvg7wjE7fK
H1j4Cuz3HgHqzLHNt9KwPvpvKC4u4FcD5Vq17ZRYq80LUMBnmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMUqVEhIZJyPx2eTiUsM8Nu/FOMVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODg2ODNhOWUtZGZlOC0z
NTQzLTliNWEtM2JjY2ExNzJiYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqvnpKdIwjPNF1FAEh0TMHgzBFVHzDGacSp2Ni353OPppiX7eWuJpT9
N4zKUV+Zzh/P1OaI32ohQa9j8Dh3yatJi52VFqPnRFIzcR7uQdqg08ZxVHrqfuC7
VRM3dGsD/itclKIBWI4R/XgaPTo6kx6Wlp2awodVCcyiQYEvLp7sVUT+S3kaJEy/
3s0rN9yAGcP1vfpw6bjDRMY3o7QeqRFf26nKFSvMCibgnK106Gj+Ppppu1sE7dqA
MG6GJdV7Dy9mzhdysZOyhLHZxRwD/DdVrtjVE66KI8SIdTTq+R5lSZi7xWyjaicd
ftkpWLJNNC23lazC7+uwq8V2hIWFLcA=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:29 2024 by rpki-client on console-fra.rpki-client.org