Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f5fb341b-d403-316f-bf53-a1cb744c763d.roa
File:                     f5fb341b-d403-316f-bf53-a1cb744c763d.roa (raw, json)
Hash identifier:          vI05kzIIilFLuK0bQo3lTqet8lYFfVjurFLDtyZg690=
Subject key identifier:   BA:D1:F9:3B:FB:DA:6A:AF:91:99:91:AD:53:30:CD:86:98:FB:91:2E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1E0C9D175D34FFBBB08F60
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f5fb341b-d403-316f-bf53-a1cb744c763d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.232.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1e:0c:9d:17:5d:34:ff:bb:b0:8f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=52648919-8abd-4cc7-8922-b6c2c0719fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b3:5b:78:19:44:ad:68:af:db:33:f4:62:d5:
                    7b:ce:cc:59:36:26:7e:02:f3:3b:a1:e6:ed:8a:73:
                    bd:9a:85:96:28:60:bc:a7:e8:71:0b:71:87:44:39:
                    38:84:48:05:82:b6:18:5d:f5:d2:99:79:cd:5e:51:
                    c4:90:a4:a1:94:13:b4:ef:24:2e:39:41:a1:1f:93:
                    aa:46:9b:a8:b0:28:23:d6:40:ed:bc:88:05:73:89:
                    a8:d4:b3:fe:7c:e0:e4:d6:c4:8c:5e:9d:13:f3:e6:
                    8b:78:e3:b0:3e:36:2c:c5:42:93:3f:32:8e:9f:08:
                    b1:c7:2a:8f:10:51:7b:5e:23:34:73:79:de:79:35:
                    45:d0:78:b7:42:c6:49:45:e1:7b:41:5d:9d:de:2a:
                    37:36:0e:85:02:a6:cf:a3:e6:65:3e:f2:32:9a:3b:
                    23:3e:2e:fc:e3:1f:3c:40:f1:7a:6a:01:1c:f0:ad:
                    a7:d3:ba:e8:5b:4e:71:c3:98:a7:34:77:c4:ae:56:
                    d8:85:6e:3a:75:35:05:de:d5:8b:76:03:cc:45:47:
                    2a:b9:6f:c1:c1:43:47:d4:cf:12:92:c6:bb:da:75:
                    81:57:4e:7b:07:8e:ab:c4:fb:e9:85:6d:48:7d:97:
                    5b:03:9c:a7:66:ea:e2:c5:b6:36:95:3f:fd:76:60:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D1:F9:3B:FB:DA:6A:AF:91:99:91:AD:53:30:CD:86:98:FB:91:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f5fb341b-d403-316f-bf53-a1cb744c763d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c4:61:df:8c:28:26:7a:31:8a:67:77:fb:45:d1:77:7c:c6:
         f6:21:3f:c5:f0:65:fe:23:98:d9:4f:8a:7d:35:67:dc:be:32:
         43:6d:4b:a9:3d:00:3d:b6:cf:50:a6:cc:1f:b2:22:2b:74:f0:
         01:42:22:80:8e:db:14:a1:bc:31:c3:bb:2a:63:6f:5b:f7:62:
         1d:de:5d:b3:ba:5a:e5:0e:3d:19:a4:47:a7:9c:ed:5d:ad:ed:
         41:c4:14:e9:17:21:a4:a3:48:d1:19:d3:ad:4d:90:de:f9:fd:
         c9:73:84:f0:76:1a:ed:04:8c:0b:6d:86:06:6c:d2:ff:88:54:
         e3:a8:52:39:93:34:14:5c:84:66:ba:b7:77:a6:d4:14:58:55:
         97:9f:a8:96:56:c7:10:9a:1c:a1:cd:1e:15:d5:7a:6c:d7:33:
         b9:3e:f8:d9:a3:7c:5f:f3:75:39:ff:8a:b2:ed:60:d2:8c:a7:
         cd:fa:3b:0b:7f:ce:15:a5:dc:fc:6a:80:e5:b3:bb:15:1e:04:
         87:00:1a:c8:f4:ed:48:3c:85:d2:10:c1:cf:38:b1:64:45:ca:
         a8:ff:c4:e4:15:cc:8f:62:55:bc:fa:02:45:f6:64:98:2b:3e:
         54:98:77:b2:0c:e0:68:aa:ce:c3:e3:a5:3f:9e:35:2d:f4:72:
         18:a9:8e:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKHgydF100/7uwj2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTI2NDg5MTktOGFiZC00Y2M3LTg5MjItYjZjMmMwNzE5ZmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbNbeBlErWiv2zP0YtV7zsxZNiZ+AvM7oebt
inO9moWWKGC8p+hxC3GHRDk4hEgFgrYYXfXSmXnNXlHEkKShlBO07yQuOUGhH5Oq
RpuosCgj1kDtvIgFc4mo1LP+fODk1sSMXp0T8+aLeOOwPjYsxUKTPzKOnwixxyqP
EFF7XiM0c3neeTVF0Hi3QsZJReF7QV2d3io3Ng6FAqbPo+ZlPvIymjsjPi784x88
QPF6agEc8K2n07roW05xw5inNHfErlbYhW46dTUF3tWLdgPMRUcquW/BwUNH1M8S
ksa72nWBV057B46rxPvphW1IfZdbA5ynZurixbY2lT/9dmCbAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLrR+Tv72mqvkZmRrVMwzYaY+5EuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjVmYjM0MWItZDQwMy0z
MTZmLWJmNTMtYTFjYjc0NGM3NjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIboMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATEYd+MKCZ6MYpnd/tF0Xd8xvYhP8XwZf4jmNlPin01Z9y+MkNtS6k9
AD22z1CmzB+yIit08AFCIoCO2xShvDHDuypjb1v3Yh3eXbO6WuUOPRmkR6ec7V2t
7UHEFOkXIaSjSNEZ061NkN75/clzhPB2Gu0EjAtthgZs0v+IVOOoUjmTNBRchGa6
t3em1BRYVZefqJZWxxCaHKHNHhXVemzXM7k++NmjfF/zdTn/irLtYNKMp836Owt/
zhWl3PxqgOWzuxUeBIcAGsj07Ug8hdIQwc84sWRFyqj/xOQVzI9iVbz6AkX2ZJgr
PlSYd7IM4GiqzsPjpT+eNS30chipjkY=
-----END CERTIFICATE-----