Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a2ef8a62-65fa-3d85-ad04-b5109cd9b0dc.roa
File:                     a2ef8a62-65fa-3d85-ad04-b5109cd9b0dc.roa (raw, json)
Hash identifier:          XCj3ktZJ+N/gnV1jbc52XtTE8tkSW6B5lKnWmo7gLxM=
Subject key identifier:   69:5C:61:FA:19:74:DA:51:4F:C4:80:44:FC:D0:4F:E2:F8:33:04:C6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A125419E05FDAF97A5B3AE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a2ef8a62-65fa-3d85-ad04-b5109cd9b0dc.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:12:54:19:e0:5f:da:f9:7a:5b:3a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2f354ee4-1a94-42d4-aca0-5db32e2a4082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:04:ff:73:80:ab:2c:c3:4a:0d:f6:73:4d:
                    b4:23:51:9a:53:2c:c1:d4:99:df:46:52:c5:c0:d8:
                    c1:ae:a0:c5:0d:fa:49:5c:fb:55:18:fe:b5:48:50:
                    06:2a:60:5f:27:af:b1:34:e7:15:29:11:a3:ac:31:
                    01:08:54:e0:ed:0f:74:de:ac:4e:12:e9:b9:a9:84:
                    37:3a:9e:d3:5f:b9:d6:0e:4a:1a:fc:f5:2a:01:18:
                    3d:25:ca:ab:04:a4:f9:44:77:41:fe:39:83:10:2d:
                    6e:6b:fa:2d:5a:a5:82:28:8f:ed:b7:f0:36:e9:09:
                    bc:f4:f6:fa:76:42:71:8e:58:a2:e0:89:e4:ff:76:
                    0f:dc:04:2f:46:03:24:ed:91:ec:bf:77:8c:ba:8b:
                    91:b8:56:9b:a2:96:74:6e:1e:e1:8e:f3:a7:3b:8e:
                    40:7a:2e:a2:e1:86:56:5b:d7:42:21:c0:c2:eb:8f:
                    8a:c3:c6:3f:27:d4:5d:0e:f6:1e:8b:56:cf:67:f1:
                    86:9f:0f:5c:c1:f5:30:0f:1a:8b:6b:f5:70:8b:57:
                    a1:7d:2b:49:2c:62:af:09:36:53:6e:f3:b6:48:21:
                    2b:1d:01:cb:1e:ac:ee:4f:3e:25:13:05:8d:fb:58:
                    ff:b2:aa:66:d8:f4:57:b3:cb:9d:d8:83:7a:a4:ae:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5C:61:FA:19:74:DA:51:4F:C4:80:44:FC:D0:4F:E2:F8:33:04:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a2ef8a62-65fa-3d85-ad04-b5109cd9b0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:67:59:68:07:11:5f:99:f9:d1:d9:35:34:09:3e:f4:1f:
         56:b6:9d:60:d2:58:04:bf:e1:6d:76:b1:d6:5c:b4:5b:77:fe:
         ab:5b:3b:2b:a0:dc:1c:8c:98:9d:4d:4f:d1:ac:99:89:1f:ff:
         af:9c:8e:1e:c4:52:fd:6d:b3:8c:fd:a5:35:22:7f:2d:79:ad:
         6f:a9:f0:97:76:cf:6f:e1:ab:a9:8b:56:99:46:59:2f:eb:65:
         38:d5:02:a6:92:ea:0e:43:95:13:df:ee:b2:08:45:5d:7d:de:
         0e:60:36:a6:f2:46:f9:27:f1:27:10:ab:81:36:52:a1:fc:6d:
         02:31:c0:ca:77:37:e9:c7:f5:2e:0c:73:a9:66:f7:f2:b4:da:
         9b:69:17:58:37:d8:74:c1:21:b2:e4:f7:ae:64:83:37:42:f2:
         c8:20:71:f5:65:4f:d3:e1:86:69:b9:f3:14:92:a6:62:25:08:
         6f:26:29:00:25:6e:db:d7:f8:d5:56:77:a6:4a:fe:9a:d3:10:
         de:71:3b:34:78:fa:b6:45:61:0b:b5:e7:a8:1c:77:51:bf:e8:
         cf:d6:1d:cf:59:0c:e4:8e:89:d7:c6:76:61:93:2a:da:6d:db:
         1d:7f:a5:04:fd:17:06:3e:66:4a:45:3a:a5:6d:bb:d2:b4:fc:
         a0:7e:d5:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKElQZ4F/a+XpbOuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MmYzNTRlZTQtMWE5NC00MmQ0LWFjYTAtNWRiMzJlMmE0MDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17cE/3OAqyzDSg32c020I1GaUyzB1JnfRlLF
wNjBrqDFDfpJXPtVGP61SFAGKmBfJ6+xNOcVKRGjrDEBCFTg7Q903qxOEum5qYQ3
Op7TX7nWDkoa/PUqARg9JcqrBKT5RHdB/jmDEC1ua/otWqWCKI/tt/A26Qm89Pb6
dkJxjlii4Ink/3YP3AQvRgMk7ZHsv3eMuouRuFabopZ0bh7hjvOnO45Aei6i4YZW
W9dCIcDC64+Kw8Y/J9RdDvYei1bPZ/GGnw9cwfUwDxqLa/Vwi1ehfStJLGKvCTZT
bvO2SCErHQHLHqzuTz4lEwWN+1j/sqpm2PRXs8ud2IN6pK6giQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGlcYfoZdNpRT8SARPzQT+L4MwTGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTJlZjhhNjItNjVmYS0z
ZDg1LWFkMDQtYjUxMDljZDliMGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3IZ1loBxFfmfnR2TU0CT70H1a2nWDSWAS/4W12sdZctFt3/qtbOyug
3ByMmJ1NT9GsmYkf/6+cjh7EUv1ts4z9pTUify15rW+p8Jd2z2/hq6mLVplGWS/r
ZTjVAqaS6g5DlRPf7rIIRV193g5gNqbyRvkn8ScQq4E2UqH8bQIxwMp3N+nH9S4M
c6lm9/K02ptpF1g32HTBIbLk965kgzdC8sggcfVlT9Phhmm58xSSpmIlCG8mKQAl
btvX+NVWd6ZK/prTEN5xOzR4+rZFYQu156gcd1G/6M/WHc9ZDOSOidfGdmGTKtpt
2x1/pQT9FwY+ZkpFOqVtu9K0/KB+1Qk=
-----END CERTIFICATE-----