Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef158f50-ece5-3b10-bddc-f1c9c684eb59.roa
File:                     ef158f50-ece5-3b10-bddc-f1c9c684eb59.roa (raw, json)
Hash identifier:          wx/ONKobM6w4dcgTRoSEwqrEb77Dyb8Og4lhE/qQnW8=
Subject key identifier:   31:05:CF:4F:66:15:E7:CA:49:27:6B:57:92:A0:EF:2C:E3:6A:9C:7A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A2282D4CDCDDD4F3BBE2CC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef158f50-ece5-3b10-bddc-f1c9c684eb59.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:22:82:d4:cd:cd:dd:4f:3b:be:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ade06694-6642-4c7f-9eaa-0dcf08e3712c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:e5:b2:50:64:b7:9e:87:ec:83:15:c9:fa:
                    76:18:f3:fe:ab:37:ee:18:9c:be:75:fb:d5:25:fb:
                    24:ae:bd:09:4d:0f:0a:1d:f2:a2:00:63:61:85:4e:
                    cb:0e:a6:4c:a2:4f:bf:a3:79:ca:a4:fd:99:46:03:
                    f7:6c:4d:75:b5:51:52:c5:b7:62:25:84:9c:bf:f1:
                    bc:5e:89:ad:21:dc:cd:91:bb:68:a8:22:56:e6:92:
                    f3:53:94:9d:87:3c:66:28:f1:7c:0b:ed:51:0b:b9:
                    6c:e6:98:07:7f:0a:09:cb:dc:31:06:70:4a:e4:2b:
                    97:75:5c:87:e9:a2:57:2f:5d:94:90:81:54:6d:ed:
                    44:0b:61:79:54:10:d6:f0:f8:0b:69:fd:9c:f9:ab:
                    14:29:c6:ef:68:4b:b8:a8:ea:68:15:a5:82:b5:75:
                    48:f4:07:15:f6:eb:b2:c5:a6:43:28:0d:a2:38:c9:
                    65:95:2b:81:93:89:64:cd:e9:1a:70:8c:06:af:c5:
                    0e:12:89:af:e4:d5:55:3d:9e:87:62:3e:4a:8a:f9:
                    5c:91:af:2d:82:7a:1c:3c:8d:d4:83:aa:25:8a:6b:
                    b1:72:c2:9c:58:1d:05:d6:69:0d:7b:2f:15:f5:6d:
                    6f:cd:9f:df:f6:84:52:36:0c:b7:f9:3a:43:dc:1b:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:05:CF:4F:66:15:E7:CA:49:27:6B:57:92:A0:EF:2C:E3:6A:9C:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef158f50-ece5-3b10-bddc-f1c9c684eb59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:62:ca:e5:7d:de:63:8b:eb:b9:fc:f6:33:3b:b1:63:51:1a:
         6d:4d:70:ce:14:b2:c4:85:6f:ed:d2:b2:61:ff:8e:ad:f8:a1:
         f7:88:de:a2:bf:97:df:c3:23:ed:36:c6:cf:88:d7:b7:a1:0b:
         60:40:f7:d6:d2:7e:a6:9a:e1:60:01:99:77:39:83:13:4a:a7:
         1a:51:b9:16:05:72:45:24:75:fb:24:db:33:70:78:2c:4b:43:
         b2:e0:41:07:91:47:dc:1b:6a:e0:eb:fd:92:f8:32:b5:0b:1a:
         99:39:22:d1:59:83:74:63:66:0b:d2:02:89:48:1d:d4:dd:81:
         a2:3b:42:a4:55:8c:db:27:a8:44:b0:5c:9b:06:94:64:50:4c:
         6d:1a:7a:1d:50:b5:9e:83:b0:70:4f:01:9a:c2:42:3b:af:10:
         97:12:75:04:fc:c1:27:ae:c2:af:68:17:bc:11:71:81:46:7b:
         e7:ea:a7:de:14:4d:2b:2f:0d:25:f7:50:70:04:0c:82:cf:f3:
         d1:1e:28:ea:6c:d8:1f:80:54:14:09:76:f8:84:94:22:54:80:
         fe:bc:fe:b3:6a:e2:8d:59:63:a4:fa:9b:63:18:db:37:dd:47:
         be:53:33:ba:eb:75:aa:c0:e3:af:7c:65:65:53:72:d5:73:95:
         b7:c8:29:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKIoLUzc3dTzu+LMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YWRlMDY2OTQtNjY0Mi00YzdmLTllYWEtMGRjZjA4ZTM3MTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgflslBkt56H7IMVyfp2GPP+qzfuGJy+dfvV
Jfskrr0JTQ8KHfKiAGNhhU7LDqZMok+/o3nKpP2ZRgP3bE11tVFSxbdiJYScv/G8
XomtIdzNkbtoqCJW5pLzU5SdhzxmKPF8C+1RC7ls5pgHfwoJy9wxBnBK5CuXdVyH
6aJXL12UkIFUbe1EC2F5VBDW8PgLaf2c+asUKcbvaEu4qOpoFaWCtXVI9AcV9uuy
xaZDKA2iOMlllSuBk4lkzekacIwGr8UOEomv5NVVPZ6HYj5Kivlcka8tgnocPI3U
g6olimuxcsKcWB0F1mkNey8V9W1vzZ/f9oRSNgy3+TpD3Bvc4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDEFz09mFefKSSdrV5Kg7yzjapx6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWYxNThmNTAtZWNlNS0z
YjEwLWJkZGMtZjFjOWM2ODRlYjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9iyuV93mOL67n89jM7sWNRGm1NcM4UssSFb+3SsmH/jq34ofeI3qK/
l9/DI+02xs+I17ehC2BA99bSfqaa4WABmXc5gxNKpxpRuRYFckUkdfsk2zNweCxL
Q7LgQQeRR9wbauDr/ZL4MrULGpk5ItFZg3RjZgvSAolIHdTdgaI7QqRVjNsnqESw
XJsGlGRQTG0aeh1QtZ6DsHBPAZrCQjuvEJcSdQT8wSeuwq9oF7wRcYFGe+fqp94U
TSsvDSX3UHAEDILP89EeKOps2B+AVBQJdviElCJUgP68/rNq4o1ZY6T6m2MY2zfd
R75TM7rrdarA4698ZWVTctVzlbfIKUQ=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:35 2024 by rpki-client on console-fra.rpki-client.org