Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b175ea67-22e3-3545-a97a-3066d89188e1.roa
File:                     b175ea67-22e3-3545-a97a-3066d89188e1.roa (raw, json)
Hash identifier:          KQ7Sag6szguHvmx8RvAomFle5vztaz49bqif71EfwP0=
Subject key identifier:   4D:D0:0F:11:A4:4B:B2:BE:F6:07:77:15:4D:8C:38:9F:36:AC:32:D0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A108BF6A0B3CA1523E10E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b175ea67-22e3-3545-a97a-3066d89188e1.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:10:8b:f6:a0:b3:ca:15:23:e1:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2b286561-fcf3-4834-a5b8-f2b116663fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:54:94:19:5f:fb:cc:c6:5d:43:12:48:56:54:
                    cc:61:b6:6a:e1:d0:0a:c6:2c:0f:1c:bf:2b:1b:8c:
                    10:78:4f:32:46:93:42:5b:bf:9f:b7:49:e7:a4:e9:
                    2c:f9:15:d1:d5:85:34:da:90:40:b7:38:be:21:e2:
                    78:8d:91:6a:f7:4b:50:b9:fb:f1:2e:f9:d0:db:c6:
                    6e:ac:47:7e:07:14:ad:19:6f:63:e0:6d:b0:1a:21:
                    c0:73:14:a3:69:f5:1e:b4:ec:68:fa:ee:3c:77:4b:
                    d7:ce:e9:32:d9:98:3a:b0:dc:41:c1:31:c3:ac:b0:
                    2d:7c:8c:7c:da:d4:d5:78:2d:b9:27:15:6b:d2:4c:
                    e0:fc:f5:86:57:e7:9f:5c:d0:c5:4a:80:01:24:bd:
                    d4:28:df:d0:48:8e:90:2c:3d:7d:3e:f2:74:36:31:
                    c8:7c:7a:25:69:c0:90:d0:79:52:a6:da:f4:1b:ee:
                    01:d7:21:90:cc:a2:01:5b:d3:b2:f2:15:00:b0:7e:
                    69:06:33:65:bf:53:fb:33:65:ad:19:0f:cc:08:70:
                    c5:0d:57:cf:84:a5:bd:6b:bb:1f:c2:57:d8:6d:de:
                    5b:cc:94:72:c3:ce:ee:71:a4:87:71:6c:71:8a:91:
                    de:c1:45:61:f2:0e:d2:f9:87:a2:42:0a:7e:78:bf:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D0:0F:11:A4:4B:B2:BE:F6:07:77:15:4D:8C:38:9F:36:AC:32:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b175ea67-22e3-3545-a97a-3066d89188e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b6:1e:d5:de:84:84:55:07:24:59:46:b8:4e:9b:c3:a5:f9:
         07:6d:d0:7a:89:d5:28:6d:39:35:ec:ac:c6:60:a9:ef:37:a8:
         47:83:02:15:59:68:27:91:85:d5:fd:a2:44:c5:ed:f8:d8:7f:
         16:84:9b:04:1c:a0:04:3a:33:14:ef:1b:04:d7:30:77:55:42:
         63:10:5c:4b:2d:7a:dc:9c:fc:04:c3:06:4e:7c:a6:8f:e9:df:
         24:de:0b:bc:08:a1:dc:63:f3:8c:09:b2:b8:00:f9:ca:70:f8:
         41:df:52:6c:1e:c8:7a:36:68:c6:ef:b6:83:f2:04:0b:49:da:
         5b:8c:5f:e2:40:3f:ca:54:a1:88:ed:4b:9d:3e:92:9a:17:a1:
         7a:cd:22:54:00:21:a3:fd:9a:b3:18:22:3b:7d:23:73:87:97:
         0f:d5:66:5a:f6:1f:10:86:ca:f3:ed:a7:07:37:0f:93:ea:4d:
         d1:2c:15:29:81:ba:cd:ba:99:fc:7c:4b:7f:f8:a9:5e:2c:03:
         60:74:b2:97:1a:57:fd:26:fa:42:52:ae:d6:8a:b9:24:99:6d:
         18:fa:3e:f9:ae:48:01:53:56:7b:1a:d7:23:da:90:15:42:ef:
         64:c9:2a:cc:ee:73:f9:94:f3:09:fb:47:a3:0b:e6:4c:4d:7c:
         3a:ef:ed:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKEIv2oLPKFSPhDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MmIyODY1NjEtZmNmMy00ODM0LWE1YjgtZjJiMTE2NjYzZmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlSUGV/7zMZdQxJIVlTMYbZq4dAKxiwPHL8r
G4wQeE8yRpNCW7+ft0nnpOks+RXR1YU02pBAtzi+IeJ4jZFq90tQufvxLvnQ28Zu
rEd+BxStGW9j4G2wGiHAcxSjafUetOxo+u48d0vXzuky2Zg6sNxBwTHDrLAtfIx8
2tTVeC25JxVr0kzg/PWGV+efXNDFSoABJL3UKN/QSI6QLD19PvJ0NjHIfHolacCQ
0HlSptr0G+4B1yGQzKIBW9Oy8hUAsH5pBjNlv1P7M2WtGQ/MCHDFDVfPhKW9a7sf
wlfYbd5bzJRyw87ucaSHcWxxipHewUVh8g7S+YeiQgp+eL8YgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3QDxGkS7K+9gd3FU2MOJ82rDLQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjE3NWVhNjctMjJlMy0z
NTQ1LWE5N2EtMzA2NmQ4OTE4OGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAK2HtXehIRVByRZRrhOm8Ol+Qdt0HqJ1ShtOTXsrMZgqe83qEeDAhVZ
aCeRhdX9okTF7fjYfxaEmwQcoAQ6MxTvGwTXMHdVQmMQXEstetyc/ATDBk58po/p
3yTeC7wIodxj84wJsrgA+cpw+EHfUmweyHo2aMbvtoPyBAtJ2luMX+JAP8pUoYjt
S50+kpoXoXrNIlQAIaP9mrMYIjt9I3OHlw/VZlr2HxCGyvPtpwc3D5PqTdEsFSmB
us26mfx8S3/4qV4sA2B0spcaV/0m+kJSrtaKuSSZbRj6PvmuSAFTVnsa1yPakBVC
72TJKszuc/mU8wn7R6ML5kxNfDrv7YM=
-----END CERTIFICATE-----