Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f1dd7609-2f5f-3d05-ac85-f6029b971459.roa
File:                     f1dd7609-2f5f-3d05-ac85-f6029b971459.roa (raw, json)
Hash identifier:          42l5tc1X+zvvfMnhRjPC51OxC00QZITlucS2Nq97tdI=
Subject key identifier:   0C:1B:2F:9D:8C:18:AC:8F:54:11:93:1F:AC:89:AE:FB:6C:48:46:0C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A114AA419090E4AF2EECEC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f1dd7609-2f5f-3d05-ac85-f6029b971459.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:11:4a:a4:19:09:0e:4a:f2:ee:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e4e73353-dcfd-477a-9db9-cb5bf90fb05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3d:aa:33:7f:b4:93:4a:49:17:27:a6:05:12:
                    29:ef:6c:bc:96:48:77:f6:91:ad:34:7b:55:65:5a:
                    a9:cf:c4:ac:81:6f:ff:9d:c9:83:f9:d5:a5:52:a7:
                    1a:c1:26:6d:ba:8e:00:e5:d0:cc:ad:8f:87:c9:56:
                    c1:37:10:fa:97:45:0f:d1:98:09:25:a8:be:24:b7:
                    23:14:1d:08:3d:01:e2:01:2b:77:6a:a9:81:b8:de:
                    b2:87:23:29:fa:02:ac:b9:40:29:88:62:c7:4b:b6:
                    a9:f7:dd:e1:2b:7f:eb:77:fe:9f:21:0a:04:66:c7:
                    3c:d4:47:9d:b3:0d:bd:a6:c3:98:bd:9e:55:02:ba:
                    d5:c4:e6:42:c6:62:ad:88:fe:8f:40:d2:50:b5:d9:
                    ee:45:6a:8b:06:02:0d:d2:36:0d:3d:a7:a0:dd:c1:
                    03:41:b6:ba:6d:5a:ca:41:a9:bf:bc:d9:f8:a0:74:
                    00:f3:a4:51:48:49:ea:44:12:65:b1:7d:b7:15:22:
                    32:e7:b1:c7:4d:9e:d7:aa:b9:3a:db:5a:c8:d4:cb:
                    b1:c5:d7:e1:88:36:71:20:7a:6e:93:c4:e2:31:3d:
                    5c:ac:49:2e:23:52:07:05:18:41:6c:28:39:3b:45:
                    e7:86:1a:7c:8b:7d:da:da:3c:02:68:96:ca:65:d2:
                    77:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1B:2F:9D:8C:18:AC:8F:54:11:93:1F:AC:89:AE:FB:6C:48:46:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f1dd7609-2f5f-3d05-ac85-f6029b971459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:da:f2:26:67:b5:00:2b:46:89:a5:3d:39:53:9b:9f:b3:f2:
         1c:6e:03:6c:6a:65:14:a6:48:70:ec:90:09:b7:b8:d2:ff:ed:
         bb:9e:ec:30:ae:9f:62:30:98:7b:52:e1:4f:82:7d:0f:30:29:
         47:35:43:6c:05:29:43:c1:d3:17:ed:62:2c:15:9d:d1:bd:67:
         db:84:e6:2d:99:8f:a6:e1:0a:c8:ee:91:1c:35:53:87:36:20:
         c1:c4:7d:aa:2c:82:6a:84:60:f2:8e:4c:d2:83:53:ba:0d:c0:
         3c:18:36:66:c8:a9:d5:7e:53:83:61:38:d4:35:b1:16:b2:ef:
         59:91:e8:91:34:56:af:c2:df:d6:2d:70:a6:55:9c:a1:39:ec:
         5f:fa:53:6a:0d:46:45:92:3b:32:c5:d0:d5:24:fc:15:52:5b:
         d1:6e:36:ce:36:3f:d9:a6:43:5a:c4:6b:73:d7:8e:75:7d:8a:
         0c:99:71:d8:e5:41:6c:86:1c:90:2d:a7:f7:da:d5:6f:06:70:
         69:b1:32:6f:0b:bf:dc:22:19:e6:23:ca:c4:e1:08:25:b9:12:
         71:95:07:a8:3c:8a:73:a6:9b:6f:98:93:80:ac:a5:02:22:42:
         0e:c3:5b:e1:84:52:f4:f1:ac:c7:83:5b:3a:c1:a8:01:92:54:
         b1:19:9a:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKEUqkGQkOSvLuzsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTRlNzMzNTMtZGNmZC00NzdhLTlkYjktY2I1YmY5MGZiMDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD2qM3+0k0pJFyemBRIp72y8lkh39pGtNHtV
ZVqpz8SsgW//ncmD+dWlUqcawSZtuo4A5dDMrY+HyVbBNxD6l0UP0ZgJJai+JLcj
FB0IPQHiASt3aqmBuN6yhyMp+gKsuUApiGLHS7ap993hK3/rd/6fIQoEZsc81Eed
sw29psOYvZ5VArrVxOZCxmKtiP6PQNJQtdnuRWqLBgIN0jYNPaeg3cEDQba6bVrK
Qam/vNn4oHQA86RRSEnqRBJlsX23FSIy57HHTZ7Xqrk621rI1MuxxdfhiDZxIHpu
k8TiMT1crEkuI1IHBRhBbCg5O0Xnhhp8i33a2jwCaJbKZdJ3fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAwbL52MGKyPVBGTH6yJrvtsSEYMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjFkZDc2MDktMmY1Zi0z
ZDA1LWFjODUtZjYwMjliOTcxNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALXa8iZntQArRomlPTlTm5+z8hxuA2xqZRSmSHDskAm3uNL/7bue7DCu
n2IwmHtS4U+CfQ8wKUc1Q2wFKUPB0xftYiwVndG9Z9uE5i2Zj6bhCsjukRw1U4c2
IMHEfaosgmqEYPKOTNKDU7oNwDwYNmbIqdV+U4NhONQ1sRay71mR6JE0Vq/C39Yt
cKZVnKE57F/6U2oNRkWSOzLF0NUk/BVSW9FuNs42P9mmQ1rEa3PXjnV9igyZcdjl
QWyGHJAtp/fa1W8GcGmxMm8Lv9wiGeYjysThCCW5EnGVB6g8inOmm2+Yk4CspQIi
Qg7DW+GEUvTxrMeDWzrBqAGSVLEZmgg=
-----END CERTIFICATE-----