Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8e2c52d3-75d6-3d37-b635-85456c223776.roa
File:                     8e2c52d3-75d6-3d37-b635-85456c223776.roa (raw, json)
Hash identifier:          n95QEzUaR5rSuGiU2woUBW7oKO8PhTHoKUeFChafjJE=
Subject key identifier:   A9:BD:8B:32:CD:48:E6:8F:D1:74:2A:5F:3D:93:B2:D1:C3:8F:6C:DA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1D4B7922B1E3B93AB1AAE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8e2c52d3-75d6-3d37-b635-85456c223776.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1d:4b:79:22:b1:e3:b9:3a:b1:aa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=62c8cd4b-9855-405d-b138-62b68c77506f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2d:26:4f:40:77:98:82:81:cd:0a:76:04:59:
                    7d:1f:c6:34:e1:e7:f8:97:88:f2:30:48:98:c5:85:
                    b3:72:37:5f:cd:8a:b0:1a:73:d2:0c:90:17:a7:69:
                    b3:0b:19:ae:a9:ca:8b:d4:eb:b9:ba:0f:82:6f:2c:
                    72:38:54:da:7b:75:e0:13:c3:8f:d0:23:19:87:28:
                    a5:4e:4c:be:9e:b5:d4:e9:0c:aa:84:5e:51:f1:58:
                    95:4b:a0:a1:3f:b0:9b:65:f6:3a:82:e1:bf:ff:a8:
                    aa:3c:23:e1:fb:c4:2b:31:5d:25:87:2b:fb:08:b0:
                    bb:ad:4d:c9:17:24:85:1a:f2:10:d7:60:49:f5:f4:
                    a2:5c:65:51:b7:ea:36:ad:59:d0:04:6b:75:80:a4:
                    1f:3a:81:7e:9a:82:01:98:24:06:b0:3e:b0:b1:f1:
                    68:e8:3c:2b:ca:ed:90:1c:ff:79:4b:76:79:94:c0:
                    7a:53:cd:46:be:a4:66:24:37:52:59:38:de:e3:72:
                    b0:2f:3e:e2:1a:06:96:04:3e:40:de:a1:16:c2:0e:
                    b9:b4:d4:dd:00:03:62:32:f5:b9:0c:38:7d:36:f1:
                    b6:54:4e:74:af:9f:09:f1:e8:4a:05:8f:20:0e:3a:
                    e4:25:2e:16:ad:b0:63:2f:5a:f7:3e:4b:a9:71:d0:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BD:8B:32:CD:48:E6:8F:D1:74:2A:5F:3D:93:B2:D1:C3:8F:6C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8e2c52d3-75d6-3d37-b635-85456c223776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:af:38:50:0d:d8:6f:09:9d:67:6a:98:35:74:f2:94:af:09:
         d3:af:fa:ee:27:a2:9c:a4:44:7d:1c:de:56:2f:20:0a:44:6f:
         bb:77:49:4a:9f:38:31:56:50:4d:e9:8e:9c:69:11:09:9f:c9:
         76:06:f4:49:f8:19:58:56:48:10:31:fb:d1:99:67:e7:07:13:
         68:a6:61:08:32:50:10:75:63:60:54:e3:34:f1:3a:51:2f:91:
         ac:da:a8:37:7a:28:43:c6:8a:b5:6e:b3:af:22:99:d6:cf:cd:
         48:7c:8a:65:c5:2c:7b:71:ab:39:9c:dc:90:98:ba:22:ff:41:
         42:86:2f:28:0d:df:0b:6a:fd:7a:f7:0a:41:53:3a:a8:b6:27:
         14:4f:c1:13:43:6e:15:53:41:c2:db:cf:54:ab:20:42:ec:a4:
         04:67:9f:61:a6:64:11:92:8b:26:f9:d3:11:ba:08:56:de:53:
         ce:a3:a9:1d:76:cc:47:88:3c:a9:bf:33:1b:50:13:1d:6a:14:
         75:1e:7b:db:9a:78:1c:f1:8a:7b:6d:58:7e:2d:b1:00:e3:79:
         a6:1f:52:0e:74:35:87:0c:ce:a5:a2:ad:fd:8e:90:4d:0d:aa:
         d1:b7:ca:5c:02:41:e7:77:64:fb:ec:01:74:6f:3a:31:c0:88:
         a0:c6:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----