Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a56e3126-57e4-3189-8b05-c5c08c1255f4.roa
File:                     a56e3126-57e4-3189-8b05-c5c08c1255f4.roa (raw, json)
Hash identifier:          DgHQlc+c9VVQzZ+Akeb35wWPrFOgePUQRJffT5IZF5Q=
Subject key identifier:   C6:2A:87:D6:EB:F5:6E:AB:DA:E9:C6:B3:BD:D7:4C:4A:B1:AC:36:45
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A27D0235C9E468EECA89680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a56e3126-57e4-3189-8b05-c5c08c1255f4.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:27:d0:23:5c:9e:46:8e:ec:a8:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f92af666-c4e4-4e61-9203-fb71f812a485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e2:c5:ab:d7:02:a0:89:b8:2c:20:3f:37:41:
                    4f:f3:a2:cc:4e:13:b3:17:d5:ce:1d:62:22:b2:f5:
                    3c:1c:c8:05:6b:c9:e0:95:f9:37:bf:59:e3:aa:cb:
                    87:f3:20:5f:17:e2:f2:0d:13:82:48:ec:eb:d7:48:
                    8c:b4:0d:5b:88:e3:7d:09:bf:2e:d2:9b:be:9a:5e:
                    60:65:da:bb:c0:c4:4a:d9:56:bd:79:88:97:e4:65:
                    d7:1a:d8:76:ae:47:bf:5f:68:17:16:1a:08:d4:9a:
                    47:0f:39:d9:79:db:02:a0:5e:b0:c2:5f:61:8e:c5:
                    ce:ea:a6:b8:85:53:d0:a4:ee:4c:26:16:b3:71:ce:
                    ce:05:30:3b:50:f3:3d:e8:38:24:df:54:3f:b4:56:
                    94:16:b4:2d:0f:af:76:eb:fe:32:26:5f:52:0b:48:
                    14:7b:61:6a:d6:a7:dc:e6:a5:0f:c2:2e:bd:97:6d:
                    8d:4b:27:05:cc:7f:13:59:fc:98:54:af:ef:62:9d:
                    49:b2:91:46:07:3e:59:0a:5d:13:15:5c:83:d5:70:
                    af:6c:3a:6f:3d:b7:73:b8:1c:b8:0a:27:51:3e:c2:
                    21:dd:0e:23:aa:75:f2:bb:84:3a:eb:dd:64:6e:02:
                    95:de:0c:63:16:88:c6:a2:73:d9:32:db:64:00:3b:
                    22:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2A:87:D6:EB:F5:6E:AB:DA:E9:C6:B3:BD:D7:4C:4A:B1:AC:36:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a56e3126-57e4-3189-8b05-c5c08c1255f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:08:2d:b3:bc:0c:67:41:d3:6b:1a:93:37:0a:94:65:98:90:
         34:20:ca:e1:c2:04:92:44:5a:0e:fd:99:5e:ad:b6:18:43:d8:
         f4:95:27:b4:c1:a7:d5:ec:7a:c7:be:9b:9a:2d:ff:1e:72:62:
         ff:d4:42:14:f3:75:5a:bc:9e:b2:1b:e2:3c:2f:ec:b4:86:5d:
         e3:01:f3:26:16:23:03:9e:98:85:dd:d8:c2:df:db:6d:19:d9:
         74:9a:f6:66:4f:1b:c8:f6:24:f2:47:1f:27:27:d5:26:ac:88:
         af:d0:8e:dc:d8:eb:e5:2b:a1:bc:76:6c:d1:b8:1d:48:fb:39:
         ec:71:b1:b3:76:c1:b8:09:54:77:ea:8b:2b:e0:de:40:aa:db:
         7a:46:2d:1c:92:cb:2f:4f:ad:0f:e9:69:00:16:6d:9c:e4:c9:
         ce:1c:14:51:80:5b:83:3a:cb:7f:4f:bc:5a:3c:9f:f7:fd:4e:
         12:e6:6a:71:e0:d4:67:1d:a0:e7:0d:06:b1:63:f3:ca:fc:eb:
         18:76:9c:2c:98:5f:eb:f0:5c:96:9a:94:7d:03:d6:9a:cd:bf:
         5f:d2:91:29:13:d1:87:cd:77:04:6d:d1:9e:a7:44:76:0d:23:
         3c:d4:c3:d9:d9:90:a3:d2:07:3b:3d:76:0f:c3:ce:87:48:3a:
         fe:b3:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----