Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e50be6e4-d980-3e18-84fb-41e2b65862fc.roa
File:                     e50be6e4-d980-3e18-84fb-41e2b65862fc.roa (raw, json)
Hash identifier:          qvX/Gb5OIVdGyjFgeN/TZLJW9U9MGcqUwB0RWggZyME=
Subject key identifier:   66:4E:A3:BC:FB:87:B6:13:2C:2D:98:27:1D:26:E8:C7:C6:85:31:8F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A071B4E6F468A3CB9B5A900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e50be6e4-d980-3e18-84fb-41e2b65862fc.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.128.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:07:1b:4e:6f:46:8a:3c:b9:b5:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=691c7ea5-9f5e-48ec-b896-f1a88ef5e471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:18:79:9d:86:9a:75:38:98:a1:43:df:9c:
                    90:2a:f1:e3:1e:2e:6d:23:d7:1c:97:75:a1:73:cb:
                    d1:c9:1f:80:73:9f:59:a8:5a:c3:82:a5:be:1d:12:
                    53:19:e3:b5:5a:dd:62:6f:c5:25:6d:eb:b7:17:e8:
                    c0:b8:40:06:e4:c6:10:ee:a1:68:38:a7:fa:39:c2:
                    94:56:7a:29:09:dd:40:f6:6e:36:72:52:97:15:91:
                    1c:f9:1c:4c:5e:a4:c8:29:8d:db:7e:40:ff:ae:ca:
                    04:30:76:71:1b:50:ae:f7:6c:7a:d2:22:08:4c:28:
                    fb:97:6b:65:d3:8d:f5:13:f9:8f:ba:e5:dd:a3:45:
                    ea:4a:81:00:b4:e3:1a:8a:15:c7:78:da:d8:1a:22:
                    16:18:55:f5:f5:cf:6f:73:67:94:c3:ef:ca:57:e9:
                    64:13:79:a1:c3:85:4c:cf:9e:66:96:f4:eb:63:23:
                    0a:59:70:34:16:4e:b9:b3:86:11:6e:f0:fe:b0:c9:
                    a2:84:43:40:3c:29:0c:68:cc:d9:02:9b:ac:b8:0b:
                    25:ed:d0:b7:bd:ff:c4:9f:4a:38:6b:d4:ad:95:23:
                    13:f4:36:89:b5:4a:6c:09:4e:e7:ab:36:da:51:16:
                    07:5e:62:a9:e4:55:91:8f:40:08:f6:65:3d:5e:8a:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4E:A3:BC:FB:87:B6:13:2C:2D:98:27:1D:26:E8:C7:C6:85:31:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e50be6e4-d980-3e18-84fb-41e2b65862fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c5:c7:79:42:d0:d6:50:29:1e:88:dd:83:b5:c2:63:2d:17:
         1c:ac:5d:99:ac:af:8d:ed:f7:0c:e2:ea:61:d8:c7:1e:15:8d:
         99:eb:09:73:2b:28:d5:67:59:f1:9d:05:69:48:f2:6e:92:75:
         69:c6:b1:0c:f0:12:3c:3b:d7:00:02:15:22:0f:5b:5d:27:17:
         1a:5a:aa:18:68:9b:9f:b2:c8:d0:bf:71:a6:de:37:ce:3e:dc:
         5f:97:79:5d:b9:0b:1e:10:b5:01:77:42:7a:ee:66:00:f3:23:
         9e:18:50:7f:db:82:84:91:0f:c2:f7:c4:5b:e5:5b:be:13:8d:
         53:11:08:da:11:b2:ca:4d:6d:09:2d:1a:11:1b:ab:24:37:b2:
         e1:20:16:e7:52:9c:07:1a:4b:3c:40:cc:3f:c6:18:70:ed:05:
         d5:27:b7:51:a0:2a:25:f4:90:d4:d2:f2:3a:e5:b4:30:9a:fd:
         59:a0:8f:59:14:51:0b:f9:d8:4f:5e:61:f7:5f:6f:0c:27:db:
         7a:63:e4:30:71:37:a3:bb:c1:35:30:a9:6b:3a:a5:8a:b3:0f:
         36:e5:ba:55:72:97:77:0e:fa:fa:ac:bc:c2:68:6e:39:0b:77:
         4a:50:10:e9:f6:75:42:73:6e:f9:18:81:a3:db:77:92:a4:be:
         4b:90:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----