Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afa85e73-2121-31a7-af50-08eb1669c328.roa
File:                     afa85e73-2121-31a7-af50-08eb1669c328.roa (raw, json)
Hash identifier:          LdITJH6gNOaSOSeG1hviSStDgDnInCEzSDVYmll6hvM=
Subject key identifier:   B2:39:75:AE:E3:13:FA:63:EB:B0:37:B0:C6:BA:46:58:D7:38:E5:B1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309EDB7FAE93C5005FE74DE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afa85e73-2121-31a7-af50-08eb1669c328.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ed:b7:fa:e9:3c:50:05:fe:74:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8e9aba78-7f0b-49d7-8aa1-9927e0235511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:c6:f0:ae:aa:d6:d2:1f:78:52:31:6d:27:
                    49:dd:ce:d9:cf:a4:b9:ec:b4:81:e6:87:bf:4c:09:
                    46:69:4d:4b:49:9f:69:fb:d7:f0:8f:13:06:9c:f9:
                    2d:98:00:21:e0:0f:86:a8:41:0b:a6:d6:3f:c2:3f:
                    2a:4b:9d:32:c5:e4:e1:76:c7:19:ae:67:ba:47:9c:
                    1f:2f:8e:9a:72:25:71:6f:0c:58:1f:8a:39:e2:81:
                    32:80:8e:db:71:23:6c:f0:bf:50:aa:cb:9e:cf:2c:
                    23:0f:fa:1a:f1:c5:5c:90:90:7b:d9:55:9a:65:40:
                    75:b4:db:7a:7f:53:46:df:4b:dd:61:3f:d2:b4:21:
                    3c:cf:43:43:00:b7:e0:ee:50:ea:e3:81:40:87:c2:
                    f5:00:e6:d5:29:14:42:a5:33:16:3a:3c:2b:a6:f4:
                    84:b8:3b:76:c2:cd:75:66:10:2b:bf:35:a9:6c:1e:
                    ab:3a:11:33:2b:71:b1:d0:aa:39:09:c9:2b:be:60:
                    f6:75:67:14:71:63:ce:04:61:cd:98:a0:a8:06:91:
                    66:09:61:31:21:02:a0:38:4b:d3:0c:32:14:fd:b0:
                    c6:3b:6b:fc:e4:30:af:5a:6a:7f:9d:ed:f5:7b:32:
                    f7:13:83:30:8f:9d:95:9c:e0:48:8f:27:17:03:5e:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:39:75:AE:E3:13:FA:63:EB:B0:37:B0:C6:BA:46:58:D7:38:E5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afa85e73-2121-31a7-af50-08eb1669c328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:a3:a1:b1:2b:39:c6:9d:b7:fc:4a:5f:1a:fe:dc:ab:32:a9:
         05:24:aa:22:57:0e:e9:a7:4a:b8:d0:66:09:ef:3d:5d:72:ed:
         1a:af:4f:17:43:a0:c0:23:76:33:84:f4:be:77:ea:6b:3d:de:
         84:eb:ad:e4:8e:c6:12:5a:a0:08:4f:9f:0c:e2:99:2d:60:31:
         42:92:a4:ea:e8:d2:dc:fc:95:3a:f6:c6:fd:55:f1:d1:80:0a:
         4e:a7:be:a7:37:32:47:ac:aa:8b:b0:33:83:0f:f8:41:e4:45:
         cb:fa:55:11:3c:c1:e0:94:1d:92:8f:55:8c:ce:e2:b1:eb:47:
         54:34:65:8d:4c:09:fa:5a:e1:e3:66:dd:0e:1d:8b:86:57:6e:
         3a:40:b7:d1:36:f6:5f:af:5a:7a:f5:1b:23:8b:af:45:05:34:
         a5:14:5d:c4:e4:a5:3a:27:25:35:54:df:38:9d:8c:0b:54:93:
         9d:d8:39:e6:d3:20:f1:4c:30:7d:eb:12:33:b0:6a:e2:c2:58:
         47:0f:18:c3:c0:e0:c0:c5:36:7e:3e:0b:ba:8b:57:16:58:8e:
         3d:e2:27:c2:29:64:43:7c:4b:66:e8:1f:af:38:e8:06:d6:b0:
         ca:33:b1:6f:31:66:bc:27:b0:62:35:08:b5:c7:26:9f:93:a2:
         d7:59:e3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----