Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dcb2d76f-90bb-39aa-bee2-314e76d540fa.roa
File:                     dcb2d76f-90bb-39aa-bee2-314e76d540fa.roa (raw, json)
Hash identifier:          AZidjWEHraX4Xdk2iAZ7+7XB9QciVpl1F/5ewTkDlgQ=
Subject key identifier:   7F:4A:F9:F9:12:BE:FC:E3:4F:FD:C5:33:F5:84:FA:1A:59:95:E6:C2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A18293783016E53D2505F60
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dcb2d76f-90bb-39aa-bee2-314e76d540fa.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:53:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:18:29:37:83:01:6e:53:d2:50:5f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=29e78b44-104f-4d60-aded-bae90e1f0432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b9:17:2c:93:3f:bf:45:3b:52:0f:9c:a0:81:
                    c0:ec:84:ef:08:ce:da:be:f4:bf:9d:b1:72:2f:05:
                    b5:6a:ad:5a:d8:05:85:77:9b:7d:76:69:dc:2b:f4:
                    7e:ed:7b:59:d5:3d:ef:9e:59:aa:a4:4a:fb:9e:3a:
                    48:6f:dc:30:14:44:4e:ce:bb:1d:c6:08:c3:05:48:
                    d0:04:b1:b7:e1:85:b0:02:af:1a:f0:e7:98:49:b4:
                    b1:75:88:9c:67:c8:e1:63:00:80:9a:7e:e8:c7:24:
                    89:a2:51:f4:ac:b8:99:46:67:60:b1:ed:5d:77:35:
                    2e:c4:f7:34:cf:a9:42:16:e7:dd:ee:d7:ee:6f:a8:
                    ff:77:8b:f1:11:4d:07:74:83:93:cb:a2:d1:7e:47:
                    82:a4:66:6c:b0:7d:39:cf:b7:14:d5:62:68:f0:0b:
                    ca:09:f5:a3:4b:e8:dd:6b:aa:2a:7e:55:43:96:71:
                    52:fb:2b:06:17:c3:03:40:70:71:11:33:b8:78:67:
                    21:24:2b:04:63:64:5b:d8:b0:b5:fd:a2:6b:7d:33:
                    89:01:8d:cc:39:6c:fd:1a:34:99:28:bd:85:10:be:
                    1c:14:dc:07:cc:96:e3:88:71:b1:ad:04:36:ab:53:
                    a7:83:ae:78:66:af:ea:18:02:1b:25:80:1e:80:7e:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4A:F9:F9:12:BE:FC:E3:4F:FD:C5:33:F5:84:FA:1A:59:95:E6:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dcb2d76f-90bb-39aa-bee2-314e76d540fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:59:43:1e:84:78:54:90:4b:fb:a7:c4:7d:93:86:46:3d:24:
         8e:d8:a6:6a:f5:0a:41:af:d6:ac:4a:57:13:fd:3a:b9:b7:60:
         d2:fc:71:d8:9d:13:2c:0c:7a:b8:26:be:37:f2:00:cf:cd:e2:
         77:04:f5:34:9f:b5:c5:7d:58:9e:13:29:c7:ca:62:25:8a:40:
         d2:05:8b:18:2c:59:6b:5c:52:46:ec:e3:bb:f6:92:82:8e:07:
         a1:ed:3f:20:dc:0b:56:1c:c6:80:3c:14:1a:16:ab:f9:9d:62:
         e0:a0:ad:8a:d5:aa:c2:1c:2d:ca:a7:75:7a:1d:e5:74:be:25:
         7b:0d:b4:f6:e2:b5:dd:db:46:f9:cd:51:c1:17:4a:06:d0:1f:
         ca:6d:dd:68:d6:b2:9c:2f:91:cd:77:35:d4:6e:24:cb:2c:06:
         2c:e1:3a:61:c4:01:af:62:ca:db:69:84:25:a8:14:7f:ea:ac:
         d5:2e:d7:2a:d6:77:e8:d2:da:57:86:de:06:ae:97:60:2b:e2:
         15:f3:0c:69:cf:83:c5:b6:fe:76:5c:7a:f5:ec:3e:39:b6:44:
         36:91:a8:f9:87:7b:7d:de:ba:ea:aa:3d:e2:0b:23:99:f6:95:
         2a:8d:19:3f:0e:ca:72:3e:38:c8:c2:be:c8:63:87:bc:fe:83:
         09:2a:0a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----