Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f2a066f1-ad7f-328b-97d4-be03a2459858.roa
File:                     f2a066f1-ad7f-328b-97d4-be03a2459858.roa (raw, json)
Hash identifier:          DYyk6Suh2yoRrKphcOotpLye5605NQZ3Z8AAzu7SH9Y=
Subject key identifier:   C6:3E:E6:B5:97:31:37:2D:75:35:9F:DC:2E:FB:60:F6:28:70:0D:B0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A20235172DF89E5C9FE7980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f2a066f1-ad7f-328b-97d4-be03a2459858.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.240.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:20:23:51:72:df:89:e5:c9:fe:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8372a1fc-3956-4690-8a8a-48fe4eaba617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:fb:6b:3a:2d:17:7c:f5:1d:b5:61:58:68:
                    38:e1:00:8d:a2:26:c7:44:b3:4d:db:56:e4:ff:e0:
                    74:c4:4a:09:62:38:f2:ac:98:2f:90:ec:dd:a7:80:
                    3c:4a:35:f2:6a:ab:ad:aa:00:65:b0:d2:98:b5:f8:
                    65:6e:99:3c:6f:e5:be:ec:3f:1c:34:4a:96:7d:a6:
                    cd:11:81:84:17:02:82:e7:1a:b3:a0:4f:88:37:62:
                    dd:61:15:b5:23:77:ec:86:31:2d:13:55:2d:c3:11:
                    44:0d:f0:55:6b:49:97:d7:a2:92:94:9b:63:5e:77:
                    9c:55:13:f1:e4:90:ce:c1:dc:b2:48:47:ff:01:b3:
                    77:9f:55:e2:dc:74:43:f0:fc:74:57:ee:62:ae:c5:
                    55:44:a4:67:c9:9e:d4:93:c8:09:26:3f:85:d9:24:
                    34:57:fe:3a:53:22:58:cd:9c:a9:08:96:a4:e6:f3:
                    99:63:85:5c:fb:97:ef:47:1c:94:01:34:be:71:aa:
                    f2:3d:d1:81:38:c7:cb:67:31:eb:52:a4:97:3f:23:
                    8d:47:9d:bf:90:90:4c:fc:60:c3:ae:07:be:ce:90:
                    a0:fc:7b:46:d8:f2:4c:0b:5e:29:b4:84:36:6f:d6:
                    07:db:2e:ca:46:0e:07:b0:56:c5:8c:eb:ca:cb:e5:
                    ff:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3E:E6:B5:97:31:37:2D:75:35:9F:DC:2E:FB:60:F6:28:70:0D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f2a066f1-ad7f-328b-97d4-be03a2459858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:90:45:dd:6d:26:3a:a4:98:76:7d:44:f4:08:8c:3a:8e:06:
         2e:f3:c8:fa:d9:76:05:8c:c5:bc:7d:e7:fc:be:2a:06:da:47:
         f4:71:ef:de:f6:19:80:66:d1:39:45:22:b6:dc:23:8b:f4:f0:
         dc:60:a5:b1:b5:d0:25:df:04:b0:03:73:23:3b:a8:ce:93:6b:
         3d:4a:19:51:08:4a:a0:fc:1f:86:af:f8:4e:21:e3:10:c3:c5:
         88:f7:79:69:8d:8b:c2:6a:d5:56:46:76:fc:42:be:ae:d3:38:
         1d:42:c4:8f:2e:c2:bc:33:32:f6:8d:25:1e:b1:16:f2:54:75:
         98:97:a4:75:87:5c:11:8b:bb:ca:f2:39:a6:f0:13:74:70:dc:
         2c:04:cd:d9:14:4a:f6:0a:80:af:e5:0a:98:02:f8:3a:61:e9:
         32:bc:8b:12:c7:67:b1:87:38:fa:24:d9:f2:4b:40:60:95:8c:
         a6:ce:e8:b0:16:74:58:b4:a2:d0:d9:2a:17:13:ec:aa:5f:f2:
         1e:27:a2:8e:63:7a:44:36:0b:e7:f0:e5:2a:2d:74:39:7f:29:
         97:9a:2d:96:c8:22:47:3e:9a:6c:9b:57:9c:c9:4a:67:4e:5f:
         68:92:31:df:09:23:92:b5:05:b6:ec:35:56:2a:a0:b5:f1:d6:
         c5:95:66:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKICNRct+J5cn+eYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODM3MmExZmMtMzk1Ni00NjkwLThhOGEtNDhmZTRlYWJhNjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZT7azotF3z1HbVhWGg44QCNoibHRLNN21bk
/+B0xEoJYjjyrJgvkOzdp4A8SjXyaqutqgBlsNKYtfhlbpk8b+W+7D8cNEqWfabN
EYGEFwKC5xqzoE+IN2LdYRW1I3fshjEtE1UtwxFEDfBVa0mX16KSlJtjXnecVRPx
5JDOwdyySEf/AbN3n1Xi3HRD8Px0V+5irsVVRKRnyZ7Uk8gJJj+F2SQ0V/46UyJY
zZypCJak5vOZY4Vc+5fvRxyUATS+caryPdGBOMfLZzHrUqSXPyONR52/kJBM/GDD
rge+zpCg/HtG2PJMC14ptIQ2b9YH2y7KRg4HsFbFjOvKy+X/JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMY+5rWXMTctdTWf3C77YPYocA2wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjJhMDY2ZjEtYWQ3Zi0z
MjhiLTk3ZDQtYmUwM2EyNDU5ODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMSQRd1tJjqkmHZ9RPQIjDqOBi7zyPrZdgWMxbx95/y+KgbaR/Rx7972
GYBm0TlFIrbcI4v08NxgpbG10CXfBLADcyM7qM6Taz1KGVEISqD8H4av+E4h4xDD
xYj3eWmNi8Jq1VZGdvxCvq7TOB1CxI8uwrwzMvaNJR6xFvJUdZiXpHWHXBGLu8ry
OabwE3Rw3CwEzdkUSvYKgK/lCpgC+Dph6TK8ixLHZ7GHOPok2fJLQGCVjKbO6LAW
dFi0otDZKhcT7Kpf8h4noo5jekQ2C+fw5SotdDl/KZeaLZbIIkc+mmybV5zJSmdO
X2iSMd8JI5K1BbbsNVYqoLXx1sWVZrw=
-----END CERTIFICATE-----