Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a09c718b-f3a2-322e-b6a7-414a8d8ef0a7.roa
File:                     a09c718b-f3a2-322e-b6a7-414a8d8ef0a7.roa (raw, json)
Hash identifier:          a7DqaobjxnhsoaazscklEd5GwNkMFDtNbXUmvrufDYA=
Subject key identifier:   78:14:E6:05:E5:A6:B2:74:A5:B3:ED:BF:B9:1A:35:2E:BD:5B:BF:9A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FD42FE62063E9590D39280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a09c718b-f3a2-322e-b6a7-414a8d8ef0a7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fd:42:fe:62:06:3e:95:90:d3:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9e99169d-8e29-49d5-b6e2-f43d66fde586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:42:9d:12:d0:ac:8a:f8:b8:6a:fd:04:4d:9f:
                    30:c9:44:85:d0:c1:69:72:e0:9e:c2:7e:48:17:d1:
                    6d:32:9e:3c:b2:49:89:04:ab:87:28:fd:d8:d5:a8:
                    f2:c4:24:78:e4:07:22:f9:f8:17:35:04:58:dd:d6:
                    32:8a:ec:e6:90:26:3b:a8:6e:b5:88:3a:49:6b:80:
                    87:bc:d7:b1:a6:00:70:ae:90:fc:37:c4:e2:56:9f:
                    b3:32:5c:6d:53:c2:99:19:02:60:37:95:77:5e:f0:
                    c3:67:f7:37:3b:cc:be:cb:3c:58:96:bb:aa:3b:39:
                    4e:9f:04:18:d0:27:3b:08:bc:82:4c:f3:b1:c9:18:
                    0a:54:0d:48:a6:2a:10:34:3a:16:f3:15:3f:e1:4e:
                    a7:6a:1a:df:83:bd:10:82:49:c3:66:45:d5:9a:8c:
                    dd:a5:67:63:13:a0:14:fa:ff:ed:c7:31:d3:03:ec:
                    22:0c:fe:4f:29:91:8a:86:d4:32:ae:ef:cc:ef:d8:
                    38:36:13:a5:07:59:89:52:f6:63:aa:16:0d:19:0e:
                    12:25:48:e2:ad:3b:e3:08:01:d2:2d:e4:ab:b4:4f:
                    cb:b1:50:0a:46:4a:2d:5a:89:35:72:ac:bf:38:9f:
                    17:ec:4a:f5:13:ab:79:4e:0a:59:a9:5a:14:91:8f:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:14:E6:05:E5:A6:B2:74:A5:B3:ED:BF:B9:1A:35:2E:BD:5B:BF:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a09c718b-f3a2-322e-b6a7-414a8d8ef0a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:2d:9c:67:ad:2b:d3:79:1b:e1:e0:9f:b6:2b:63:d6:76:1e:
         4f:df:bd:23:ff:e1:df:33:70:1f:5b:61:14:41:81:50:fb:b0:
         44:03:85:f6:87:64:49:51:ae:71:2f:d4:23:eb:f2:00:3b:e2:
         ee:79:ca:47:bf:18:8a:9d:ff:bf:cc:44:b9:a4:79:c8:6a:ad:
         5b:92:66:c5:2f:27:42:7f:53:db:e4:61:19:dc:5a:98:63:7d:
         b8:0c:54:6f:37:bc:67:fa:2e:96:e3:9d:1f:1a:75:b6:33:d3:
         4d:87:bc:67:e7:b0:92:d2:ea:be:98:a4:cc:97:10:c4:5c:2c:
         08:a9:cf:fc:2d:82:e3:83:43:7d:7f:e4:eb:ca:0b:91:cf:e7:
         ce:05:4b:f9:79:a9:4d:97:96:74:06:83:fc:b0:ba:3f:38:39:
         7e:ce:80:4d:a3:12:6c:4f:15:b8:bf:4b:01:64:cf:dc:d4:94:
         8a:1c:06:cf:1a:b2:17:d5:9e:5e:8b:e2:21:e0:8b:53:53:1b:
         a7:e2:b5:42:61:9e:65:0d:56:34:27:2a:b1:0a:da:eb:a2:e6:
         da:bc:8b:e8:4b:8e:03:1c:8d:91:d7:a2:b9:78:a3:e1:38:c0:
         cb:5b:de:de:02:fc:0f:f3:b1:a2:66:39:cb:3b:33:e8:81:9f:
         97:1e:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:30 2024 by rpki-client on console-fra.rpki-client.org