Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac176d86-7521-3d81-94a3-f8e124c01788.roa
File:                     ac176d86-7521-3d81-94a3-f8e124c01788.roa (raw, json)
Hash identifier:          3AQI49yVbnxIfk/jLKsU1BgjGBP5UHsBo9xndxNIcko=
Subject key identifier:   C5:47:74:13:2B:11:AD:33:61:9B:21:AF:2F:26:D9:4F:E2:2E:94:29
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F5A4F2AD922C4463B60FA4
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac176d86-7521-3d81-94a3-f8e124c01788.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f5:a4:f2:ad:92:2c:44:63:b6:0f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f8eb03ea-e3ca-4235-807f-78c210012b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1a:f1:26:5f:2f:1c:f6:df:f3:40:45:c0:e2:
                    e2:46:1f:07:47:6e:d0:42:29:08:96:70:6a:26:38:
                    27:5a:fb:7c:66:cc:34:96:9c:fb:73:b2:cd:d7:07:
                    36:76:de:e2:47:07:ff:16:de:16:f0:86:af:ab:8a:
                    a0:8e:6c:6c:54:84:9a:ac:c8:17:1a:2c:b7:73:fa:
                    71:96:17:92:74:72:43:fd:72:5c:2e:ff:79:5d:df:
                    5f:58:4f:07:02:03:ea:f8:fd:dd:24:e5:74:b6:40:
                    0d:00:97:91:36:8d:bf:cd:cc:12:c8:37:cf:ee:1a:
                    05:43:3b:55:c8:6c:24:54:37:be:64:f9:a2:90:04:
                    df:45:e2:de:d8:6a:4d:c4:95:2b:f5:ea:a3:a3:85:
                    af:01:5b:dc:cc:d7:f7:57:b1:fa:38:8d:84:e7:e9:
                    3c:5a:c4:f4:1c:00:c0:1c:7c:c8:e7:43:29:3a:88:
                    a3:87:e2:20:75:1b:02:3b:b6:43:43:93:ab:b0:24:
                    c4:46:9f:d0:6f:84:8e:34:60:35:8f:fc:b8:4d:fb:
                    38:0b:68:cf:4f:ef:b1:c6:a5:98:84:fd:e2:42:83:
                    66:15:73:e2:73:48:b1:18:9c:e8:dd:65:ab:dc:b3:
                    ad:84:70:67:3b:d9:0a:c3:68:c8:a9:76:47:af:d5:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:47:74:13:2B:11:AD:33:61:9B:21:AF:2F:26:D9:4F:E2:2E:94:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac176d86-7521-3d81-94a3-f8e124c01788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:be:75:e1:ae:b2:0e:51:85:62:c3:ba:ac:56:ab:0e:50:16:
         be:ea:ef:fb:20:e7:0d:37:76:3f:0c:de:1c:06:c2:35:d1:8c:
         c2:3b:44:2a:69:87:23:03:7d:ff:ef:67:d2:fd:1f:f7:f3:7a:
         ae:fa:b6:64:cd:db:5c:4d:7a:63:ff:71:63:42:db:c8:0a:96:
         de:2b:50:9f:80:11:17:b3:a1:f6:af:55:c7:ac:e0:d5:d6:29:
         94:b5:31:f0:3d:be:6a:28:c5:1a:5a:31:8d:ec:45:57:4b:57:
         db:86:3c:6e:0c:eb:bd:da:df:ce:23:1e:99:cd:e6:ef:1b:85:
         07:1a:0c:53:bd:78:fb:b6:fe:2f:2d:03:5b:3e:17:2e:5c:16:
         50:f7:a3:fe:d3:46:19:44:3f:f0:46:73:bd:0c:ba:7b:ed:be:
         e1:ac:dc:f3:a2:92:b0:08:bd:c8:78:2b:6a:75:28:a2:13:f0:
         f6:74:0c:44:63:de:54:9e:63:c4:17:0c:97:25:d4:91:87:7e:
         9b:fc:36:12:78:2d:8e:fe:aa:d6:71:df:cc:cb:56:5b:57:3d:
         0b:3c:8a:2b:59:07:a9:a2:18:d0:f0:03:56:76:30:a0:5c:a7:
         87:84:db:e7:71:40:8e:d6:00:3a:84:e2:2a:ab:df:a9:6a:4f:
         38:e2:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----