Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad921cbb-5c1b-3a04-9a8c-b406d00404eb.roa
File:                     ad921cbb-5c1b-3a04-9a8c-b406d00404eb.roa (raw, json)
Hash identifier:          IXmua5Dk5OTFZp+0+fX555s1i/9ya1/gAZ/W71mW1I8=
Subject key identifier:   DD:D6:82:D4:89:FA:30:52:18:95:F0:EC:22:30:07:29:8B:09:22:DA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FC30870C15B62449089C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad921cbb-5c1b-3a04-9a8c-b406d00404eb.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fc:30:87:0c:15:b6:24:49:08:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=0a1a0f35-6832-4fda-9c0f-2dcb309684d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:b6:6d:87:0d:67:18:31:30:bb:4f:c7:b4:
                    95:f0:27:03:fd:0e:56:83:ea:cc:11:b9:bf:0f:9c:
                    e9:db:ec:60:0b:70:3e:79:fb:d3:db:f2:ae:7b:43:
                    43:46:f6:e5:a9:5a:7b:30:06:53:bf:05:cb:00:fa:
                    b2:25:56:80:7a:09:53:8e:8f:c1:36:01:d6:06:40:
                    b0:69:9b:ae:84:b1:53:bd:fc:16:89:a3:2b:87:88:
                    c9:3f:cc:98:75:7e:29:68:14:b9:10:64:6b:76:00:
                    67:f1:b9:8d:4e:f1:47:71:76:19:c5:5e:96:b1:ae:
                    16:cf:3a:3a:1d:42:02:05:d1:62:bf:d4:13:5d:fd:
                    ef:c1:bd:b7:32:8d:1a:1d:99:e6:5c:a6:06:e0:8c:
                    24:98:dc:3a:e3:cb:b2:cb:b4:74:f5:a7:2a:68:46:
                    c7:5d:19:38:3f:5b:b7:00:5e:5d:05:8f:a2:d8:e1:
                    fe:68:65:74:5c:ef:58:22:05:7a:4e:ca:f6:30:00:
                    69:f2:8c:0d:97:97:72:f3:20:6b:06:09:47:d6:2f:
                    38:7d:fc:43:10:5d:01:da:04:d4:26:35:6b:e8:0f:
                    6c:83:05:e3:a3:c4:bf:e2:68:c5:0b:d2:cd:91:68:
                    39:fe:ce:55:64:44:bb:ac:70:23:9e:be:1b:df:cb:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D6:82:D4:89:FA:30:52:18:95:F0:EC:22:30:07:29:8B:09:22:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad921cbb-5c1b-3a04-9a8c-b406d00404eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f6:5f:6a:68:8b:e9:42:fe:d4:ad:fc:ec:98:ef:fe:12:02:
         b7:55:89:9c:b2:20:68:fa:a4:e6:84:c5:f4:33:a8:de:f7:47:
         11:0a:b0:58:c8:ea:18:6b:8c:a1:54:50:8d:cd:c0:69:f4:93:
         c7:26:58:4c:14:48:33:11:f1:0d:23:e4:3d:7c:bf:b4:d0:db:
         f0:a2:a0:fc:e9:ee:33:f6:0b:87:7f:85:48:23:af:ef:be:ef:
         49:8f:a6:4a:89:d4:26:0e:a3:f1:ea:2f:d5:e9:b4:a8:d1:27:
         13:b9:df:1e:b2:ac:c0:95:84:89:38:bb:19:9a:68:b5:30:66:
         b6:22:03:82:a0:c3:fc:a6:6d:c8:07:fc:34:da:d1:3f:66:1b:
         11:62:36:4c:76:ab:5a:21:9e:93:ac:50:3e:5c:ba:5a:95:fd:
         34:d8:0d:7c:65:47:9b:de:ae:44:68:44:07:c9:13:a8:ac:3d:
         d2:88:ce:43:34:2f:b3:30:3d:76:ba:ca:8f:3e:37:95:fe:8d:
         9f:28:40:6f:0c:b3:de:d0:f2:57:4b:5c:f2:e5:79:e7:9d:3e:
         d1:63:8f:07:8e:9a:18:df:b4:24:12:4f:7a:c8:83:a8:20:35:
         b3:32:c2:3e:6f:82:dd:7f:d3:16:0b:92:96:8f:66:81:fc:03:
         a4:7b:fa:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ/DCHDBW2JEkInAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MGExYTBmMzUtNjgzMi00ZmRhLTljMGYtMmRjYjMwOTY4NGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfO2bYcNZxgxMLtPx7SV8CcD/Q5Wg+rMEbm/
D5zp2+xgC3A+efvT2/Kue0NDRvblqVp7MAZTvwXLAPqyJVaAeglTjo/BNgHWBkCw
aZuuhLFTvfwWiaMrh4jJP8yYdX4paBS5EGRrdgBn8bmNTvFHcXYZxV6Wsa4Wzzo6
HUICBdFiv9QTXf3vwb23Mo0aHZnmXKYG4IwkmNw648uyy7R09acqaEbHXRk4P1u3
AF5dBY+i2OH+aGV0XO9YIgV6Tsr2MABp8owNl5dy8yBrBglH1i84ffxDEF0B2gTU
JjVr6A9sgwXjo8S/4mjFC9LNkWg5/s5VZES7rHAjnr4b38uPHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3WgtSJ+jBSGJXw7CIwBymLCSLaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWQ5MjFjYmItNWMxYi0z
YTA0LTlhOGMtYjQwNmQwMDQwNGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJX2X2poi+lC/tSt/OyY7/4SArdViZyyIGj6pOaExfQzqN73RxEKsFjI
6hhrjKFUUI3NwGn0k8cmWEwUSDMR8Q0j5D18v7TQ2/CioPzp7jP2C4d/hUgjr+++
70mPpkqJ1CYOo/HqL9XptKjRJxO53x6yrMCVhIk4uxmaaLUwZrYiA4Kgw/ymbcgH
/DTa0T9mGxFiNkx2q1ohnpOsUD5culqV/TTYDXxlR5verkRoRAfJE6isPdKIzkM0
L7MwPXa6yo8+N5X+jZ8oQG8Ms97Q8ldLXPLleeedPtFjjweOmhjftCQST3rIg6gg
NbMywj5vgt1/0xYLkpaPZoH8A6R7+oI=
-----END CERTIFICATE-----