Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94a6f624-cd85-3cf8-828f-6725d4fe523a.roa
File:                     94a6f624-cd85-3cf8-828f-6725d4fe523a.roa (raw, json)
Hash identifier:          VVMhOd0VGbajSP+BgIKNi1A3A+5iE0DWEJ/NBSMbVjM=
Subject key identifier:   39:6E:F2:05:94:EA:8A:4B:76:EE:8E:5E:49:FE:94:66:22:10:80:E9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A03F90B9CF8EF8C486947E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94a6f624-cd85-3cf8-828f-6725d4fe523a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:03:f9:0b:9c:f8:ef:8c:48:69:47:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=1fb2d7d7-aa57-4f5d-8045-5bc0e86e641b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4b:3f:71:c4:5a:ae:87:c0:db:bd:7d:3c:2e:
                    cf:58:0b:c9:57:a1:45:39:90:c3:a4:30:6d:8c:7c:
                    59:37:d4:7d:0e:6e:27:78:ab:b9:30:ee:8d:c6:de:
                    86:a8:7f:f3:c0:10:b0:a3:b1:f8:48:92:dd:a5:fe:
                    94:0a:d7:68:37:08:08:dd:5b:58:66:2f:6f:d5:9e:
                    3a:00:9e:d8:e9:72:64:72:bb:ca:58:32:68:c9:6a:
                    d4:d0:37:45:d0:00:13:e7:30:46:44:7a:20:c9:15:
                    bd:41:2b:25:79:e7:f1:8f:c4:13:78:9c:d2:cf:95:
                    f5:17:0a:e3:cc:be:4b:54:ea:00:21:30:48:c1:34:
                    5a:35:f0:d1:5d:fa:33:e9:c5:00:91:88:45:4c:11:
                    de:f1:a2:6a:20:4e:04:b7:df:66:37:5c:2e:ca:02:
                    ce:6a:d7:d9:3c:7e:74:4a:2f:cf:16:c7:03:b3:6b:
                    49:61:b1:b0:92:a6:3e:59:f1:c4:42:7a:00:61:bf:
                    1a:7d:a6:52:ae:a4:0a:0b:64:92:0b:53:14:5e:6d:
                    c9:ad:6e:a3:1c:5d:73:40:1b:e4:20:c4:ea:85:9f:
                    2f:e3:b7:30:20:3c:a1:c6:09:ef:af:74:d3:79:af:
                    bc:f1:13:c1:82:82:3f:11:19:2b:de:18:1f:0f:c0:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6E:F2:05:94:EA:8A:4B:76:EE:8E:5E:49:FE:94:66:22:10:80:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94a6f624-cd85-3cf8-828f-6725d4fe523a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:97:12:17:0d:a0:1e:25:80:ab:4e:f0:be:03:bf:5d:e0:3a:
         22:8f:13:22:ba:65:14:06:aa:cc:23:1e:81:a5:83:a8:5e:f6:
         db:fc:72:47:1b:71:d6:79:16:13:3a:70:17:70:5d:12:7d:8b:
         c2:db:ad:3c:81:84:3d:d7:a2:c7:f4:d7:89:6f:a4:e3:a7:d0:
         59:75:27:52:68:0f:c4:f5:e7:b8:ad:12:53:47:cf:18:db:14:
         fe:ee:13:ed:27:cc:71:99:f1:f3:95:61:06:a3:44:44:63:a2:
         42:3f:60:51:89:28:4d:d5:26:d7:21:fc:81:03:c7:12:04:54:
         36:0b:6b:66:a2:2f:ca:01:fc:2e:74:76:ff:a6:c2:50:fe:f9:
         c7:b9:14:b1:0a:b5:64:ff:00:f6:f1:cc:4a:69:8e:eb:91:8f:
         a6:9c:22:ad:7f:bf:88:11:b5:e1:0f:2f:0b:7b:f0:a9:c7:3b:
         86:04:ee:74:b2:f8:72:9f:58:62:51:bf:16:c4:03:27:97:94:
         00:7b:56:93:dd:a1:a2:34:04:ad:c8:b7:69:1c:3a:53:70:42:
         cb:a5:55:04:de:7e:aa:e6:78:45:b2:ea:22:8f:c2:9e:17:6c:
         96:ca:01:60:6b:4e:45:bb:32:e7:32:5a:fe:c4:ad:a2:c7:7c:
         91:5a:f5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----