Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8bed2e9-aeff-3c83-adcb-c50535f15b25.roa
File:                     a8bed2e9-aeff-3c83-adcb-c50535f15b25.roa (raw, json)
Hash identifier:          X7PbeW88Xg7XsaspIeeXH6Pg0+8Cq72k+/TQR5U89mY=
Subject key identifier:   AE:C2:06:A0:C9:EE:65:3B:FC:A8:06:41:DA:6B:26:BA:A0:EE:C3:6B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A232C155220ECAA4E750B40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8bed2e9-aeff-3c83-adcb-c50535f15b25.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:23:2c:15:52:20:ec:aa:4e:75:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=df45a0dc-2a1c-4501-b03d-db622cd604c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:2e:89:4a:00:90:38:ec:44:8b:2d:90:87:
                    3c:68:98:58:1a:c0:f8:5d:1c:5b:7a:69:af:27:10:
                    34:70:de:ad:08:4f:01:7a:97:03:0a:c9:3f:40:c9:
                    a0:35:2d:4b:c5:36:8b:f3:41:1b:63:d3:6c:26:9d:
                    bd:4c:3b:86:13:fb:9c:06:0f:67:91:ff:79:26:35:
                    3c:12:fb:d4:91:d7:fe:6c:57:b6:db:ed:ea:10:f1:
                    97:07:70:ab:2f:9b:3b:7c:86:af:47:3e:79:cf:b6:
                    49:6d:08:79:35:6b:3d:93:63:12:54:6b:60:81:49:
                    dd:b5:e7:0b:f1:41:fa:a6:26:a7:1b:2d:78:55:07:
                    38:ee:02:1c:5d:6e:7b:13:bd:6c:67:a7:17:f3:32:
                    10:3e:d4:5b:45:76:63:01:20:29:f0:c8:d7:ae:8c:
                    f7:f9:98:ce:9e:ea:b8:2e:a3:58:96:09:62:5b:40:
                    f2:de:fe:40:d0:b3:13:80:55:ab:df:6b:78:51:b7:
                    45:6c:3a:86:af:0f:b2:a9:c0:b6:aa:ef:33:53:01:
                    f4:5d:b6:b6:47:67:16:93:96:4c:89:ea:ee:83:72:
                    56:6a:29:64:5c:a1:1a:54:b2:ac:d1:1e:df:5d:3b:
                    ff:eb:5b:8c:80:b6:45:40:7d:e5:68:38:cd:51:b9:
                    09:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C2:06:A0:C9:EE:65:3B:FC:A8:06:41:DA:6B:26:BA:A0:EE:C3:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8bed2e9-aeff-3c83-adcb-c50535f15b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:26:55:31:04:e3:18:e4:22:0c:70:9a:80:89:a6:0f:d6:b4:
         ca:5c:15:4d:e9:74:c4:fd:61:79:df:5b:b2:78:78:76:34:26:
         11:90:9a:d4:9f:cb:64:96:a8:f8:ef:13:55:3a:ec:09:a0:c5:
         47:40:fe:1f:61:0d:54:86:bf:60:30:53:fe:27:62:82:e8:cb:
         eb:7c:7c:96:57:7a:21:d3:7f:20:82:94:b7:97:eb:8b:75:e9:
         8c:4b:b2:40:ff:32:10:7b:bb:c9:4b:b0:d1:94:7a:2b:dd:da:
         89:0a:b8:bd:24:ea:ad:cf:57:5a:6a:60:a4:df:2d:af:17:4a:
         04:8d:e8:7b:4b:b7:34:d5:3d:86:15:93:17:91:cf:af:e8:af:
         2f:4c:f5:de:15:70:76:9c:a9:b2:61:f9:ee:4b:f1:a1:62:ba:
         23:2a:30:50:92:9b:53:4c:f7:ed:ce:e2:09:1c:62:28:85:85:
         58:79:38:e1:58:52:46:39:61:83:39:35:9c:2e:27:44:e1:5b:
         8c:61:9d:60:e7:88:62:3d:90:ca:90:08:b8:95:ea:41:bb:b9:
         97:40:d9:f2:d7:91:0d:37:27:73:2b:a2:05:7f:80:ae:f9:95:
         8a:16:b7:98:f6:eb:bc:b2:ea:dd:42:19:59:30:d6:d3:90:83:
         c9:1b:59:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKIywVUiDsqk51C0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGY0NWEwZGMtMmExYy00NTAxLWIwM2QtZGI2MjJjZDYwNGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsUuiUoAkDjsRIstkIc8aJhYGsD4XRxbemmv
JxA0cN6tCE8BepcDCsk/QMmgNS1LxTaL80EbY9NsJp29TDuGE/ucBg9nkf95JjU8
EvvUkdf+bFe22+3qEPGXB3CrL5s7fIavRz55z7ZJbQh5NWs9k2MSVGtggUndtecL
8UH6pianGy14VQc47gIcXW57E71sZ6cX8zIQPtRbRXZjASAp8MjXroz3+ZjOnuq4
LqNYlgliW0Dy3v5A0LMTgFWr32t4UbdFbDqGrw+yqcC2qu8zUwH0Xba2R2cWk5ZM
ierug3JWailkXKEaVLKs0R7fXTv/61uMgLZFQH3laDjNUbkJHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK7CBqDJ7mU7/KgGQdprJrqg7sNrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYThiZWQyZTktYWVmZi0z
YzgzLWFkY2ItYzUwNTM1ZjE1YjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADImVTEE4xjkIgxwmoCJpg/WtMpcFU3pdMT9YXnfW7J4eHY0JhGQmtSf
y2SWqPjvE1U67AmgxUdA/h9hDVSGv2AwU/4nYoLoy+t8fJZXeiHTfyCClLeX64t1
6YxLskD/MhB7u8lLsNGUeivd2okKuL0k6q3PV1pqYKTfLa8XSgSN6HtLtzTVPYYV
kxeRz6/ory9M9d4VcHacqbJh+e5L8aFiuiMqMFCSm1NM9+3O4gkcYiiFhVh5OOFY
UkY5YYM5NZwuJ0ThW4xhnWDniGI9kMqQCLiV6kG7uZdA2fLXkQ03J3MrogV/gK75
lYoWt5j267yy6t1CGVkw1tOQg8kbWfM=
-----END CERTIFICATE-----