Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f6f0488-90f2-38f8-b809-f0f86aeabc1d.roa
File:                     9f6f0488-90f2-38f8-b809-f0f86aeabc1d.roa (raw, json)
Hash identifier:          u5Tm82tI7aaQXza+QCbVsnpoXH8Ilvqbl4BaKCYRaYM=
Subject key identifier:   89:97:F5:D5:1F:68:8D:2C:0E:2B:4E:A1:8D:D1:4E:E3:AE:F9:33:51
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A18DE60D54DC7AA61C3AD80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f6f0488-90f2-38f8-b809-f0f86aeabc1d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:18:de:60:d5:4d:c7:aa:61:c3:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=90a37ba7-5414-4642-8a05-380d466c4a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3a:17:33:27:02:e7:13:03:c9:31:d3:35:9a:
                    59:e5:97:6f:82:5e:89:83:42:a0:94:e8:a6:79:52:
                    bd:17:d5:ad:17:8d:00:e4:13:69:2d:54:7c:5c:bd:
                    f7:ed:86:94:c1:7d:5f:3f:f8:92:db:e1:ea:11:df:
                    1d:a7:75:de:41:ab:84:83:5d:fd:f5:d9:04:1d:37:
                    b4:a5:2c:a4:25:1f:4d:0d:0d:1c:60:e3:28:6e:22:
                    72:bc:da:c8:d8:f2:98:02:33:a0:52:0e:3d:39:20:
                    35:f1:86:f5:f5:58:d8:34:8d:74:37:00:ee:7e:ac:
                    9a:83:b4:f8:ce:59:5a:c3:84:09:00:d9:71:06:c2:
                    eb:2f:b2:17:24:b0:3d:2d:de:db:5d:1c:50:b3:70:
                    76:18:e4:3d:7c:9a:fa:a7:05:83:8c:be:75:8d:c4:
                    e8:38:90:8e:67:55:45:30:9e:35:45:56:69:c9:52:
                    00:d9:d9:e3:60:57:16:8e:92:f6:72:bf:81:ea:f5:
                    af:18:ad:b9:46:48:ce:11:68:cb:8f:aa:10:7d:5b:
                    29:a3:19:9e:cf:d2:6a:59:f7:0e:39:06:dd:c6:aa:
                    f7:bb:e8:7f:0e:52:e4:03:52:4a:53:d1:ee:05:31:
                    03:ad:4a:12:06:d5:4b:9f:59:11:96:50:23:23:c1:
                    44:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:97:F5:D5:1F:68:8D:2C:0E:2B:4E:A1:8D:D1:4E:E3:AE:F9:33:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f6f0488-90f2-38f8-b809-f0f86aeabc1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6c:89:23:b4:5b:88:fc:4b:d9:9c:26:fa:b8:dd:d8:b6:c3:
         ae:1b:fe:f7:ac:57:87:e7:c6:4a:52:88:ef:9b:0d:c3:71:9e:
         33:f8:65:74:cf:aa:7c:ca:1f:af:fc:37:49:11:56:0e:b5:8a:
         aa:07:4e:30:a5:d4:6c:d4:fa:ef:c4:dd:41:df:a8:e3:ec:6e:
         bf:ca:36:03:99:4f:4e:69:96:f2:dc:bf:fb:58:f7:83:44:0f:
         1d:c3:0a:dd:07:b6:c4:f6:87:2b:87:70:09:cb:d0:f6:52:20:
         de:ce:4f:01:bc:ab:83:fe:89:4c:33:9e:99:ad:20:80:19:55:
         1d:ea:3e:3d:4a:2c:f6:0b:7a:8a:db:c0:ec:44:87:7e:70:5a:
         11:98:68:13:0c:c3:8e:c7:d2:fa:0e:11:40:a1:bc:a6:22:4f:
         d3:cb:69:98:69:16:e6:18:90:bb:d4:d2:c3:c8:3c:c8:79:d8:
         1f:d4:5e:51:c9:e1:20:52:1f:19:ff:52:82:7c:58:b8:0c:97:
         98:77:14:a8:f1:8b:9b:a3:70:ff:b8:4a:f6:b8:fc:ca:0e:bd:
         c9:21:18:0c:3a:de:66:a6:28:a1:59:fc:a9:bb:d0:9b:3c:84:
         a1:2e:58:8a:44:8f:43:8f:c3:67:a2:39:5c:79:b4:33:1a:fc:
         72:34:16:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----