Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e033acf9-be07-37ae-adc9-b59c8d9f8e9d.roa
File:                     e033acf9-be07-37ae-adc9-b59c8d9f8e9d.roa (raw, json)
Hash identifier:          k67Ptp68YmsPwSpnvy8udJmtBtJJFUIRhXjnVhNVzSI=
Subject key identifier:   0A:2A:9B:EC:80:A8:54:FB:56:8D:E4:43:E5:BF:60:2C:00:63:5C:1B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FDD1931DA05DF264741CE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e033acf9-be07-37ae-adc9-b59c8d9f8e9d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.162.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fd:d1:93:1d:a0:5d:f2:64:74:1c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=cf1bf784-8356-468d-a3ac-75e92de13e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:64:f1:ac:97:a4:0a:09:0c:a9:ed:68:8e:dc:
                    14:ae:b5:ae:05:95:b8:2f:b0:4a:e4:75:8c:69:69:
                    3a:ca:32:74:06:b3:6a:9c:c7:8d:3a:74:6f:e6:a7:
                    e3:26:da:c9:0c:72:f5:9e:32:37:99:b6:34:7c:cc:
                    41:e7:bb:2a:53:93:a9:3d:df:4c:f8:1d:df:cf:f9:
                    82:65:3e:86:0a:2d:ef:75:6c:9c:e9:ca:68:60:04:
                    e1:6a:f4:0c:59:46:96:12:1f:97:e6:3a:4a:bf:3e:
                    c1:62:f6:05:fb:70:a1:64:6d:84:72:da:53:a0:b8:
                    9f:db:b5:4a:4f:2a:a6:a4:f3:98:bc:ae:07:45:84:
                    1b:4d:81:7f:7e:6d:c7:0a:dd:a4:c4:34:a6:0f:0f:
                    5d:e2:7c:63:67:ed:0d:1c:26:04:9a:9d:9b:44:34:
                    66:57:de:43:ce:b8:db:7d:5e:4a:2c:2e:ab:65:5b:
                    29:b7:46:f5:da:46:ab:70:16:a8:a7:85:6b:9c:80:
                    57:0a:35:e2:ea:29:20:d3:59:dd:fa:86:7d:6a:96:
                    e5:b5:58:67:d7:f1:0f:0d:33:87:86:65:d5:60:21:
                    56:06:a1:20:b8:10:75:cd:9c:11:24:fd:cb:dd:71:
                    68:31:e4:b8:68:06:de:05:92:28:fc:82:c2:eb:0b:
                    27:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:9B:EC:80:A8:54:FB:56:8D:E4:43:E5:BF:60:2C:00:63:5C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e033acf9-be07-37ae-adc9-b59c8d9f8e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d8:da:d7:40:c9:eb:13:d7:69:51:76:48:d9:04:ff:73:cc:
         b4:8a:41:43:08:43:b6:5c:53:bc:60:c7:f6:d8:30:4d:8d:9b:
         b2:c4:bd:dd:91:86:72:a3:63:45:40:3b:d1:73:63:83:b5:1a:
         21:c2:c9:eb:36:ca:dc:23:6d:45:31:79:c9:b9:6a:bd:5f:01:
         25:81:56:27:89:fd:e9:67:1b:a6:86:a1:09:b0:06:e3:27:f1:
         48:3e:d9:f2:5c:50:55:84:c5:0b:75:e6:12:88:35:94:db:cb:
         d6:80:ab:14:42:e6:ee:97:69:b7:9b:e5:cf:22:14:5a:08:93:
         15:f1:1a:a5:5d:36:96:fe:0b:64:69:72:ae:17:ba:2f:16:a8:
         de:d5:0f:92:b1:d1:31:de:a6:2f:1c:c1:61:13:23:11:1d:1e:
         37:05:15:77:37:fa:27:fc:a5:92:ed:fc:82:e1:95:1c:9f:d2:
         4d:00:e5:fc:1e:a1:2f:8a:84:0d:2d:d7:64:1a:68:b0:46:10:
         4d:84:d5:37:16:b5:dc:01:bb:2d:43:ab:cb:41:f6:fd:2a:01:
         6d:7a:80:e2:f7:02:e3:33:ba:be:2a:16:d2:20:bb:59:1f:8a:
         16:9a:e4:18:e4:1b:f9:1b:b8:53:5d:99:74:bb:49:07:5a:01:
         bd:80:64:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ/dGTHaBd8mR0HOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2YxYmY3ODQtODM1Ni00NjhkLWEzYWMtNzVlOTJkZTEzZTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimTxrJekCgkMqe1ojtwUrrWuBZW4L7BK5HWM
aWk6yjJ0BrNqnMeNOnRv5qfjJtrJDHL1njI3mbY0fMxB57sqU5OpPd9M+B3fz/mC
ZT6GCi3vdWyc6cpoYAThavQMWUaWEh+X5jpKvz7BYvYF+3ChZG2EctpToLif27VK
TyqmpPOYvK4HRYQbTYF/fm3HCt2kxDSmDw9d4nxjZ+0NHCYEmp2bRDRmV95Dzrjb
fV5KLC6rZVspt0b12karcBaop4VrnIBXCjXi6ikg01nd+oZ9apbltVhn1/EPDTOH
hmXVYCFWBqEguBB1zZwRJP3L3XFoMeS4aAbeBZIo/ILC6wsnDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAoqm+yAqFT7Vo3kQ+W/YCwAY1wbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTAzM2FjZjktYmUwNy0z
N2FlLWFkYzktYjU5YzhkOWY4ZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKbY2tdAyesT12lRdkjZBP9zzLSKQUMIQ7ZcU7xgx/bYME2Nm7LEvd2R
hnKjY0VAO9FzY4O1GiHCyes2ytwjbUUxecm5ar1fASWBVieJ/elnG6aGoQmwBuMn
8Ug+2fJcUFWExQt15hKINZTby9aAqxRC5u6Xabeb5c8iFFoIkxXxGqVdNpb+C2Rp
cq4Xui8WqN7VD5Kx0THepi8cwWETIxEdHjcFFXc3+if8pZLt/ILhlRyf0k0A5fwe
oS+KhA0t12QaaLBGEE2E1TcWtdwBuy1Dq8tB9v0qAW16gOL3AuMzur4qFtIgu1kf
ihaa5BjkG/kbuFNdmXS7SQdaAb2AZMs=
-----END CERTIFICATE-----