Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/978e5eca-1059-3aa6-b927-d613a8f39335.roa
File:                     978e5eca-1059-3aa6-b927-d613a8f39335.roa (raw, json)
Hash identifier:          HguFTjIwS7XzXuQvmRJO40EqwOvWEOqTj90GWnwGEvQ=
Subject key identifier:   4D:7E:E1:18:12:7F:21:AE:58:8F:76:65:1B:14:B2:54:76:83:AC:0F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0F8F1BF5D8ED4EE3E1B380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/978e5eca-1059-3aa6-b927-d613a8f39335.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.134.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:55:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0f:8f:1b:f5:d8:ed:4e:e3:e1:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=57ec684a-87ab-430d-9604-b10350a9e32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:23:4b:42:4f:03:db:c9:88:f6:1a:a9:d8:
                    25:30:5b:92:15:cc:85:76:1d:8f:69:5f:39:3c:e8:
                    58:81:e0:57:c9:b6:7d:44:62:6b:d6:4f:0e:b1:93:
                    56:62:a1:8e:59:30:b6:f4:95:1b:2e:ee:ca:4d:14:
                    27:94:68:53:6e:a0:9c:58:79:52:05:59:81:10:6d:
                    4b:ed:8e:f2:f7:23:7b:2c:43:d4:a6:26:a1:4f:e4:
                    2c:01:42:ee:66:c1:c4:b8:c2:a1:89:c3:6e:b8:56:
                    08:20:a6:52:6b:6b:d5:83:01:66:c2:45:40:f0:2b:
                    cb:55:60:06:4f:a0:58:53:47:51:f9:8c:38:48:86:
                    1f:a5:fc:91:10:26:1d:65:ed:5e:bf:7c:bf:e6:57:
                    e3:4b:7e:15:d1:e0:b5:30:91:c6:ab:32:1c:96:23:
                    81:37:4f:ea:73:85:c5:3d:eb:f5:51:3a:63:ce:8b:
                    75:d2:10:72:b1:a8:2c:8e:80:ca:2f:d8:83:5c:a7:
                    4c:89:9a:3f:b9:1d:a4:6e:3e:2e:29:ad:a1:01:b0:
                    69:82:65:0e:4f:b4:3d:bd:13:7e:43:89:fd:a1:78:
                    74:d2:76:b2:d3:c2:13:ef:10:39:a5:61:f0:53:5d:
                    eb:95:3a:97:a5:9d:00:f4:84:7c:63:f9:87:a9:5a:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7E:E1:18:12:7F:21:AE:58:8F:76:65:1B:14:B2:54:76:83:AC:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/978e5eca-1059-3aa6-b927-d613a8f39335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:0f:70:29:cf:c2:70:f5:bc:64:2b:86:cb:12:84:5a:6b:f9:
         84:0d:13:5f:02:ba:c2:46:71:b8:f7:2c:42:91:aa:0f:f6:8b:
         24:08:d1:fa:ef:f1:e0:44:c6:61:33:7b:bb:e1:b0:6f:ab:9a:
         0c:53:fd:d7:8a:5b:da:42:2c:2d:65:96:b1:06:70:03:f5:df:
         8f:4c:ca:b8:a5:40:cb:05:14:8b:ee:37:92:95:59:bc:71:e8:
         0e:5d:13:a5:5b:0b:60:ed:64:68:51:47:4b:6a:65:f6:0f:48:
         44:f5:c7:66:94:48:82:48:95:ac:f6:c1:0d:05:c0:8f:f9:0d:
         c2:8d:58:9d:18:e7:b2:29:47:bf:ba:fd:13:df:ef:9c:a9:6c:
         89:41:94:ae:dd:3c:50:da:e0:20:46:45:f1:a6:a6:ed:a7:a4:
         af:a0:23:99:61:3d:e2:3c:9f:3a:af:94:91:18:1e:ca:13:e5:
         ee:64:19:4d:e9:72:dc:61:71:23:d0:9a:66:82:a8:4c:17:f2:
         a7:ab:15:97:e0:b6:62:2f:5f:77:c2:82:75:c2:ee:d8:da:79:
         d5:e2:e3:68:69:64:a7:ba:60:a0:1a:74:24:94:eb:19:33:45:
         eb:52:d6:2f:e3:f1:ef:2c:b1:20:8e:8f:08:02:95:6b:7d:6f:
         c2:a5:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----