Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f0507b6-8f34-3405-8660-cf8b2c4a37a6.roa
File:                     9f0507b6-8f34-3405-8660-cf8b2c4a37a6.roa (raw, json)
Hash identifier:          h5bm/el1FyCJTdkisoBWJRNkjhp0Qo1c/jfegmNEpnk=
Subject key identifier:   67:C4:67:BC:4B:E6:58:E3:4B:3C:ED:58:7B:56:03:BE:4C:91:DF:84
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A2772C24AE6E70A093E65D0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f0507b6-8f34-3405-8660-cf8b2c4a37a6.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:27:72:c2:4a:e6:e7:0a:09:3e:65:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=24069e24-6a5e-480a-8169-5b830e594304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:69:e1:d9:eb:69:58:0b:25:93:21:07:a0:
                    6f:33:18:fc:4c:c5:3c:ed:97:67:30:81:41:e3:c7:
                    3f:9e:12:84:c7:c9:82:b1:7d:11:9d:41:e4:9e:94:
                    45:3a:a8:14:3d:02:04:de:c9:fd:be:49:ad:b3:1a:
                    46:fb:75:da:70:cc:a5:88:60:1f:99:16:b5:b9:d5:
                    2a:49:c5:cc:eb:a3:c7:c7:d6:f6:9a:33:33:8e:79:
                    81:8f:46:78:e9:c8:ce:3c:9f:be:8e:57:1e:a5:c3:
                    8e:56:c5:7e:03:1f:93:dc:d1:13:a5:de:b0:94:a1:
                    de:fa:93:6a:74:ab:2d:96:85:fd:e7:cd:01:8b:44:
                    f2:40:9a:41:3e:68:44:dd:f3:24:fc:41:75:1f:9e:
                    e6:09:7c:7a:d9:13:fc:3f:55:3a:c7:e1:46:65:19:
                    d1:e1:48:55:cd:1a:36:3e:dc:24:74:96:c7:0e:9f:
                    7e:26:b6:05:df:4c:55:93:d7:59:6c:72:88:63:52:
                    e6:38:88:e2:12:8f:b9:64:5a:66:1a:7d:a6:87:0f:
                    6b:f8:d3:ad:12:64:60:85:b0:e5:52:9a:a5:e0:36:
                    04:8b:07:64:0b:96:27:53:cb:08:60:07:71:af:cf:
                    f5:31:51:d6:13:cf:12:7c:28:3d:78:59:06:34:90:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C4:67:BC:4B:E6:58:E3:4B:3C:ED:58:7B:56:03:BE:4C:91:DF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f0507b6-8f34-3405-8660-cf8b2c4a37a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:40:9b:3d:dd:9b:db:40:4e:38:c4:19:c1:6e:7b:1d:0d:c8:
         0b:58:f3:18:6c:b2:d2:2d:41:3c:9e:d7:4c:49:2f:e1:e6:3d:
         b3:6e:a7:a2:83:f4:e6:46:bb:e7:0e:4b:7c:2b:14:36:ab:f7:
         52:6a:d5:31:98:d5:b6:0c:c6:21:b9:f8:a3:87:17:26:5a:26:
         db:42:89:02:b0:84:a1:73:25:7c:e6:96:0f:c3:01:8a:41:87:
         7b:e7:a4:30:5d:8c:58:8f:4c:a0:f3:22:6c:be:bf:14:27:66:
         cf:0e:b4:79:0a:7f:f7:85:1d:b8:6e:fb:8b:73:2a:45:fb:5f:
         27:93:38:f3:f8:7c:64:4f:b9:82:d9:75:43:42:4a:d5:42:2e:
         4d:16:ef:7a:65:34:6d:89:f6:31:32:d4:ff:fc:7d:cb:4c:06:
         dd:5a:a7:40:66:1b:85:d7:52:ac:72:93:bf:12:05:92:b1:02:
         c3:c8:a6:90:39:1d:98:97:40:ce:77:5d:9f:8a:e4:52:cf:09:
         9e:27:5e:22:93:b3:25:b0:37:49:f5:96:62:02:3b:bb:e0:69:
         62:d2:a9:a9:d9:5a:1a:ec:94:ed:2b:41:63:6a:ac:0f:9b:a8:
         eb:b5:8f:83:c7:80:d3:5f:1c:69:9a:c9:e8:98:c2:9d:2a:74:
         50:aa:cf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----