Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89f6c65c-e938-31b1-9973-a0c570eb42d9.roa
File:                     89f6c65c-e938-31b1-9973-a0c570eb42d9.roa (raw, json)
Hash identifier:          gc6lqfuN783AWX7ZYfjOLyQrQ+2CR6nVN97f9nkKSJg=
Subject key identifier:   F3:0B:D8:E6:C1:67:BF:6A:81:FD:5D:42:EB:2C:22:ED:D6:78:59:03
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F57ED008118445C3C40580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89f6c65c-e938-31b1-9973-a0c570eb42d9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f5:7e:d0:08:11:84:45:c3:c4:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=88578c6c-a49c-4df8-9118-bbf533f536e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:62:cf:bf:f2:ac:09:3b:3a:4d:0b:ea:60:94:
                    03:4b:94:1a:d8:df:0a:b2:8a:49:7f:10:52:ff:d0:
                    13:34:45:11:66:20:69:bf:73:1f:2c:27:5d:98:91:
                    b6:54:3f:e3:a8:7b:a1:0f:92:f4:5c:39:ac:12:36:
                    75:74:81:ab:ad:aa:f6:87:63:c5:d9:10:bf:8d:c8:
                    9c:82:48:fe:16:65:5b:e6:84:27:c0:78:25:bb:8e:
                    ec:3a:31:2b:9e:d1:75:f7:87:54:aa:f4:93:13:60:
                    53:ae:50:13:54:ce:6c:71:90:1b:ec:fa:9d:b2:52:
                    72:bf:5e:35:71:7b:1f:cc:5a:41:4e:be:fb:43:e9:
                    67:d8:a7:89:44:a1:ba:0a:d5:06:25:4b:c7:e6:1a:
                    4c:8f:2d:33:de:a9:17:b7:ec:60:a1:a4:6e:4f:23:
                    65:cc:7c:98:cd:46:67:27:b5:22:72:84:8b:77:22:
                    66:64:72:c2:27:3c:ea:61:c9:d5:f7:e6:6f:72:aa:
                    4d:d2:8a:d8:97:bc:c3:a4:2a:89:c6:9a:74:20:fc:
                    a5:e2:a8:26:a2:bd:20:54:96:f5:18:6a:6b:8c:02:
                    a8:1a:b8:55:d3:b1:20:2b:55:9d:81:af:2a:29:16:
                    e3:23:55:fa:5b:e3:2e:82:0c:68:bb:53:9d:bf:0c:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0B:D8:E6:C1:67:BF:6A:81:FD:5D:42:EB:2C:22:ED:D6:78:59:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89f6c65c-e938-31b1-9973-a0c570eb42d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ab:df:09:a0:25:31:ff:4c:23:81:e4:98:59:b7:29:80:c0:
         46:73:fb:bd:55:fc:5e:65:68:ca:c7:78:48:24:b3:6a:45:9d:
         0d:32:74:7a:fe:58:fa:8d:09:64:80:a9:5a:59:97:24:ac:0b:
         e8:20:92:3f:71:9f:0c:09:d1:bb:af:61:26:a4:6a:bd:1b:fb:
         17:ac:3c:9f:dc:e3:2d:b4:cf:35:48:37:a7:55:62:11:f3:79:
         68:38:2d:53:40:38:27:4f:95:a8:bf:6d:ac:c8:f7:9b:65:d4:
         8f:d0:f7:c6:6a:31:19:c9:28:60:50:7e:c8:eb:cf:f1:73:c0:
         e6:00:94:31:32:ab:92:e9:a8:d5:7c:30:87:41:cf:0e:34:fc:
         7b:9c:ce:01:af:41:4c:ba:2c:e9:c7:d4:30:d6:d9:ed:ab:1e:
         27:99:45:c7:44:f4:e4:de:28:82:71:7b:00:12:27:49:e7:ee:
         8a:5e:82:5f:5c:b7:5d:64:76:63:64:fd:00:38:81:c0:4c:f5:
         f7:6d:74:b1:f3:09:8e:b8:fe:e8:ca:c0:5b:f4:c8:c6:0f:e0:
         28:a1:5e:1c:04:de:85:43:f7:74:7b:cf:3d:a9:a1:9c:ba:19:
         05:4c:30:f9:4c:a8:10:36:29:3d:30:7d:d6:ab:6f:4d:3e:59:
         35:50:99:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----