Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f8702983-9550-3cd2-afa1-e5cdf5f9f17d.roa
File:                     f8702983-9550-3cd2-afa1-e5cdf5f9f17d.roa (raw, json)
Hash identifier:          qaoWXsE0H2jS5f2fGWvfiE7jLX4j6mZUiro2mEznMbA=
Subject key identifier:   2B:C1:FB:07:B9:88:71:A4:C6:51:F1:5C:BD:54:61:F3:B7:87:50:68
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1AF52B62FDA6309B06B780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f8702983-9550-3cd2-afa1-e5cdf5f9f17d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1a:f5:2b:62:fd:a6:30:9b:06:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=0fa4e91a-6c1c-4c5a-bed1-0ff27373f4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8b:a2:86:9a:af:7c:34:f9:02:dc:4f:66:4c:
                    73:16:54:cc:c1:8e:bc:94:60:54:b3:4b:93:5c:80:
                    79:a7:b9:d6:dc:3c:9e:90:cf:38:c1:c8:d6:cd:d4:
                    80:f9:42:bf:6b:60:f8:04:cf:6b:d4:b5:87:15:e0:
                    d7:34:24:bc:ab:60:59:c5:aa:29:34:06:01:60:f3:
                    d9:5c:23:dc:29:cb:d7:c8:01:9e:15:55:0c:57:a1:
                    12:b4:c8:35:a5:7f:2d:dc:37:19:a6:63:a7:a8:74:
                    18:02:7c:71:f4:c0:86:7a:b5:02:f9:f2:1f:a5:0f:
                    42:03:ce:35:1f:28:9c:c7:3c:89:c6:e0:00:69:71:
                    00:73:7b:53:07:fd:2e:e5:95:54:1c:c4:a6:5c:ce:
                    b1:df:16:e0:c2:9e:8c:ba:30:00:2f:53:e3:28:40:
                    f6:ec:d6:f5:2d:84:fe:81:f6:87:40:7e:d0:8d:e7:
                    4f:92:52:81:c4:84:6c:0b:6d:91:68:c1:cc:de:04:
                    4f:1e:1c:e4:59:90:12:d6:4f:34:fb:91:86:ca:1d:
                    9e:32:65:80:6f:99:40:51:e7:48:b0:8c:ff:7c:c5:
                    62:ff:c8:bb:cd:e0:47:01:ec:c7:9e:ad:8d:5c:86:
                    81:af:49:fe:b4:4e:14:33:c1:41:a9:01:08:81:33:
                    c8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C1:FB:07:B9:88:71:A4:C6:51:F1:5C:BD:54:61:F3:B7:87:50:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f8702983-9550-3cd2-afa1-e5cdf5f9f17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fb:53:f3:ad:4f:c6:26:32:c2:cf:d1:a7:64:7b:bf:0f:67:
         e7:be:b6:d6:43:da:bd:eb:5d:43:0b:ba:24:c3:86:c6:5a:fe:
         66:d2:50:e8:13:eb:79:18:22:37:d3:c1:6d:54:f2:75:e8:ca:
         99:18:56:8a:10:df:5e:e0:90:84:45:03:97:a0:ac:42:8c:40:
         91:8d:5a:a8:ab:65:46:b2:66:c9:e9:22:67:c9:f9:38:0d:99:
         64:97:de:32:64:3e:45:d5:d7:c9:ae:ec:03:49:91:cb:18:d1:
         a8:84:82:f7:23:96:f1:ed:1d:32:e6:84:62:3e:d0:60:75:a7:
         aa:e3:86:b3:d6:2f:1c:a4:54:34:11:12:e2:53:a7:9e:8e:f5:
         f1:f1:1b:f7:60:7f:9a:d5:c9:83:69:e6:7c:85:14:2b:e1:c6:
         b8:dd:15:d2:0e:79:04:1c:ff:02:34:a0:28:c1:80:e8:6a:ab:
         12:54:4c:7e:2f:80:c2:b2:39:e6:cb:09:41:41:92:e8:e4:e2:
         3c:9e:fb:4c:e4:17:e9:4a:af:28:27:69:d9:d3:87:f7:74:be:
         9e:c2:d9:9c:91:57:63:01:6d:08:92:d4:a7:95:50:49:dc:32:
         17:85:4f:25:d4:ae:a6:24:50:6d:47:30:67:fa:d5:88:57:a7:
         9b:12:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----