Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b47b67ed-696c-3ade-9abe-af60dca0ffed.roa
File:                     b47b67ed-696c-3ade-9abe-af60dca0ffed.roa (raw, json)
Hash identifier:          oQ12TwaVZnsBIO7b1V78O2VjH2KieaZO9ywH7yeHvbs=
Subject key identifier:   90:6E:2A:E4:15:A8:BA:4C:10:8A:0B:97:2D:41:9B:3E:79:D8:8A:AA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A235B3C472C4DBEA60C56C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b47b67ed-696c-3ade-9abe-af60dca0ffed.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:23:5b:3c:47:2c:4d:be:a6:0c:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7d4accf6-534d-4899-a160-fef5a70bcac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:40:9e:09:f0:16:a5:40:df:0c:68:14:4b:
                    d1:4f:fa:cd:cf:9a:3a:7a:a2:0a:f8:d7:d7:08:00:
                    5c:48:ea:9b:e2:ac:d4:5c:96:7c:aa:32:56:27:d8:
                    0f:60:07:1d:e2:de:d6:c9:75:69:f3:0b:68:07:7b:
                    5f:29:d4:8d:0d:fd:42:1e:77:39:91:34:f1:e3:3f:
                    6e:8c:31:49:54:a5:fa:1c:f9:f5:82:3d:06:df:fd:
                    f0:00:b0:45:43:21:e7:b4:af:83:8a:73:40:ff:04:
                    68:30:a4:24:28:9c:38:eb:09:40:1d:a9:0f:a4:6f:
                    fd:f0:a9:7e:0e:54:eb:c2:cc:a6:39:51:02:78:d2:
                    52:e4:52:19:31:8c:8e:fb:16:ae:08:3c:a3:b1:c9:
                    cf:e9:14:91:82:80:59:e5:b0:fd:23:d1:03:65:25:
                    c3:28:db:41:91:bf:51:26:19:62:59:1c:8a:4b:92:
                    29:b9:7c:11:89:41:4a:29:fd:4b:96:80:0f:a8:97:
                    69:1d:f4:a5:66:3f:c6:08:cc:cd:33:2c:3c:fc:2b:
                    9d:dd:26:bb:3a:84:33:98:f9:7b:f5:ca:85:df:3b:
                    d9:8c:a2:06:c9:bb:ec:da:54:48:0a:c2:fc:8e:21:
                    a3:5e:fb:ac:a1:63:45:83:99:57:71:37:19:78:26:
                    14:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6E:2A:E4:15:A8:BA:4C:10:8A:0B:97:2D:41:9B:3E:79:D8:8A:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b47b67ed-696c-3ade-9abe-af60dca0ffed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:d7:6f:53:e9:44:a1:af:fa:5a:3f:c6:d9:58:9b:6f:53:27:
         51:72:32:87:45:8c:cf:70:da:8d:da:3e:0d:b6:63:d5:64:e5:
         2b:d1:52:42:e2:65:46:dc:07:1c:fb:11:f3:62:ff:b5:ca:98:
         9e:55:7f:b5:af:36:ea:0d:29:5a:cf:c2:f0:8e:1f:14:4f:a0:
         ca:bf:99:53:81:f2:e7:ba:4b:5c:29:0a:dd:51:ac:d1:54:9e:
         b2:cc:92:07:2c:3b:06:e2:d1:ed:1f:cb:c5:2b:50:c3:ba:9e:
         26:b9:c0:85:d6:4f:bd:4b:64:01:1d:5d:c9:8b:2d:c5:5c:2a:
         cd:8f:25:3b:b6:48:00:57:0a:86:e2:64:d0:8b:d5:98:ab:47:
         a8:ae:7b:33:b7:a5:5a:1f:34:96:8f:89:40:b6:b7:91:47:93:
         3a:5b:76:89:d6:95:49:6e:c8:e4:f8:ba:bd:2c:a4:98:97:fc:
         54:e9:11:f3:82:ea:48:b7:6b:8b:85:6e:51:e4:b9:c8:ba:4f:
         91:9f:5b:26:8c:b2:74:1a:2c:01:5b:93:2a:80:0e:e3:b8:51:
         8d:18:67:35:f8:9b:84:d3:5c:99:99:b4:c2:5e:16:3e:2a:c0:
         44:6e:9b:9a:aa:44:b7:8e:13:7b:c3:c2:5d:92:74:61:4c:a6:
         69:58:59:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKI1s8RyxNvqYMVsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
N2Q0YWNjZjYtNTM0ZC00ODk5LWExNjAtZmVmNWE3MGJjYWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujhAngnwFqVA3wxoFEvRT/rNz5o6eqIK+NfX
CABcSOqb4qzUXJZ8qjJWJ9gPYAcd4t7WyXVp8wtoB3tfKdSNDf1CHnc5kTTx4z9u
jDFJVKX6HPn1gj0G3/3wALBFQyHntK+DinNA/wRoMKQkKJw46wlAHakPpG/98Kl+
DlTrwsymOVECeNJS5FIZMYyO+xauCDyjscnP6RSRgoBZ5bD9I9EDZSXDKNtBkb9R
JhliWRyKS5IpuXwRiUFKKf1LloAPqJdpHfSlZj/GCMzNMyw8/Cud3Sa7OoQzmPl7
9cqF3zvZjKIGybvs2lRICsL8jiGjXvusoWNFg5lXcTcZeCYUKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJBuKuQVqLpMEIoLly1Bmz552IqqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjQ3YjY3ZWQtNjk2Yy0z
YWRlLTlhYmUtYWY2MGRjYTBmZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKrXb1PpRKGv+lo/xtlYm29TJ1FyModFjM9w2o3aPg22Y9Vk5SvRUkLi
ZUbcBxz7EfNi/7XKmJ5Vf7WvNuoNKVrPwvCOHxRPoMq/mVOB8ue6S1wpCt1RrNFU
nrLMkgcsOwbi0e0fy8UrUMO6nia5wIXWT71LZAEdXcmLLcVcKs2PJTu2SABXCobi
ZNCL1ZirR6iuezO3pVofNJaPiUC2t5FHkzpbdonWlUluyOT4ur0spJiX/FTpEfOC
6ki3a4uFblHkuci6T5GfWyaMsnQaLAFbkyqADuO4UY0YZzX4m4TTXJmZtMJeFj4q
wERum5qqRLeOE3vDwl2SdGFMpmlYWQ4=
-----END CERTIFICATE-----