Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9833347-5b51-3eee-ab27-e42227e85d4e.roa
File:                     b9833347-5b51-3eee-ab27-e42227e85d4e.roa (raw, json)
Hash identifier:          Jb8uUyyAEn42PuH6DdWPAT4nVPOlwr5MI+VBkhGk7/w=
Subject key identifier:   83:0B:27:4A:24:7F:0E:18:D2:B9:79:99:92:A3:41:52:8E:AF:2B:D6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F9521618A89A9BC6C2E980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9833347-5b51-3eee-ab27-e42227e85d4e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f9:52:16:18:a8:9a:9b:c6:c2:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f918e96c-9d28-4323-990a-e855ab2ca176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7f:6c:07:07:0b:48:ec:09:b1:04:63:16:ee:
                    33:e6:ca:c0:b5:b3:d4:74:a9:52:12:b4:5e:3f:1c:
                    88:1a:20:10:11:ca:40:7f:0a:58:ca:f0:b8:a6:83:
                    2c:55:69:83:e9:7b:c6:73:29:86:69:19:a5:7a:2f:
                    bf:5f:96:11:bb:7a:2e:e2:39:bf:3b:c2:e9:9e:0c:
                    23:d3:b8:64:d5:2d:42:7c:38:b4:c3:05:6c:ff:aa:
                    16:80:43:c1:5b:2b:7f:ec:67:b5:ec:eb:ea:14:fc:
                    7b:08:e1:a3:ed:5a:3b:89:50:6e:a5:21:27:69:4b:
                    68:80:b6:35:20:fb:79:bf:cf:b5:a0:56:69:b9:d1:
                    47:8d:90:9a:01:71:e5:3c:28:d6:da:da:c9:3c:c2:
                    ac:6d:94:68:3d:a6:ce:6f:df:ef:db:07:04:25:ef:
                    5a:cf:85:d3:ac:b8:dc:e8:92:7a:55:99:64:ec:a5:
                    ed:7e:35:57:c7:4f:3b:3b:3c:05:c3:db:7f:d3:5d:
                    e2:79:3c:85:a1:01:8f:e3:7a:e3:ce:a6:44:3c:f3:
                    8b:39:95:50:29:11:45:ed:c5:00:5d:b6:63:65:85:
                    a3:fb:45:af:2f:30:f0:5c:4f:c7:47:eb:0e:d3:6d:
                    d4:a8:b6:92:59:7f:77:7d:4a:83:c8:de:0f:7d:ee:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0B:27:4A:24:7F:0E:18:D2:B9:79:99:92:A3:41:52:8E:AF:2B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9833347-5b51-3eee-ab27-e42227e85d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9f:3d:4b:58:6b:a1:ce:f3:7f:3f:59:8e:76:8a:b6:a7:ce:
         1b:be:dd:f9:a5:5b:8b:a4:dd:8e:a7:86:4c:76:da:97:66:31:
         01:95:33:02:a3:c0:b8:9e:21:a2:02:3e:d0:de:7d:c9:7a:98:
         14:01:4e:6f:12:41:75:f5:dd:71:30:47:70:0e:cb:1f:89:86:
         e0:72:6f:98:a6:cf:15:4e:c3:9f:72:a4:95:87:94:d5:ac:31:
         4e:cc:8a:fe:4f:b5:dc:e8:c1:33:0f:79:b7:d1:74:88:7f:e0:
         f2:82:3e:ee:60:a5:6d:06:49:d0:b1:46:96:49:1a:c6:34:8e:
         32:06:2e:44:9b:66:62:63:a4:e5:3f:0c:1d:98:55:06:ab:5b:
         ed:ce:33:dc:32:85:1f:ae:4f:4a:8f:f8:79:83:da:ad:da:a2:
         a8:ed:e4:9a:2c:fe:1c:05:09:ea:5b:b4:40:54:4b:f9:76:44:
         ff:cb:de:ed:70:e3:a0:50:62:99:5b:36:e5:83:b9:b7:a1:fb:
         f6:d6:bd:82:a5:dc:5e:df:ea:96:ea:83:6a:04:f1:ab:56:57:
         bb:4e:d1:e2:e6:23:fb:17:f9:8c:3b:b4:74:de:e9:f0:0f:87:
         da:c7:9c:18:9f:74:c2:9b:d0:4e:6a:b0:7b:86:b1:2f:50:c1:
         a6:cd:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----