Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fdbce185-0020-38eb-8ddb-b7754fadb0d3.roa
File:                     fdbce185-0020-38eb-8ddb-b7754fadb0d3.roa (raw, json)
Hash identifier:          GVtOWSV6iU706dcjJEnKtEfOOzBlg/FNzsLm2AGJiDw=
Subject key identifier:   92:2E:D1:1C:52:27:C9:2A:37:D0:8A:7C:AB:89:5D:4A:3D:E1:B7:3A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0C53F0EF8764D582BA6640
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fdbce185-0020-38eb-8ddb-b7754fadb0d3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0c:53:f0:ef:87:64:d5:82:ba:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=68d5c57f-360d-4484-99f5-8124da346078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:56:23:69:b2:05:09:c1:35:fb:bc:86:f8:
                    39:97:59:50:9c:bc:20:1a:b8:bc:1f:e7:0c:5a:f1:
                    55:d5:e3:4b:eb:89:b4:35:ac:1c:24:c1:6c:0e:59:
                    a5:2f:fb:64:02:4d:d2:84:9b:e2:4b:66:26:91:7f:
                    5d:4c:89:3d:04:93:5f:b6:87:0e:c7:5b:14:e3:16:
                    f1:f1:b8:c1:93:e2:af:6d:92:4e:42:2a:29:4f:f7:
                    bc:d3:2d:0d:3f:38:fb:a6:7b:69:5d:85:77:93:7f:
                    24:86:6c:2c:e4:0c:e7:dc:bc:4b:30:2b:6c:2f:d5:
                    e5:f7:80:59:bd:bf:67:e2:a4:20:7e:48:e3:f3:f7:
                    4e:33:5f:c6:dc:59:8c:fc:74:a9:16:4c:ae:54:98:
                    23:e9:95:f4:00:9c:7b:6d:8f:b7:0e:ec:77:c9:33:
                    c8:55:7c:b3:4d:d2:87:5b:cc:f0:5a:12:de:0a:df:
                    b2:02:53:d1:fa:c4:37:47:62:85:a5:ba:30:22:8d:
                    9a:66:64:2b:de:d2:59:23:d4:25:53:ac:0b:ed:58:
                    10:5e:e0:9e:a4:eb:fa:20:d2:19:5b:3d:2a:26:5f:
                    23:e5:65:30:d0:bd:e9:6c:5f:31:f2:81:b5:78:6e:
                    a0:dd:1c:6b:75:1a:0a:36:c7:45:ff:6a:87:66:b9:
                    ee:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2E:D1:1C:52:27:C9:2A:37:D0:8A:7C:AB:89:5D:4A:3D:E1:B7:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fdbce185-0020-38eb-8ddb-b7754fadb0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:69:62:99:e2:fd:c2:52:68:2b:fd:b2:03:bb:d6:0d:5c:e5:
         d0:0f:40:b3:1f:23:a0:d1:a8:49:21:5e:8b:60:c3:5a:7f:7c:
         04:e6:4c:7f:d8:46:ab:66:3a:10:da:02:4f:74:54:e4:c2:d8:
         b8:93:0a:02:67:df:f5:66:cb:5a:9e:c4:7d:2b:3b:59:f2:2e:
         9b:fc:17:63:c9:57:61:d8:5a:77:f5:95:0a:b6:de:84:f2:14:
         0c:32:7b:20:b5:11:2f:6e:98:f2:9a:92:ef:86:c6:40:32:5d:
         fb:32:94:2f:b7:77:65:c8:45:0c:02:4a:7a:67:86:ee:85:b1:
         27:ac:f7:98:e6:01:50:ed:cb:cf:ad:01:f8:d1:61:b7:e8:b2:
         d8:bd:c8:14:b1:65:2e:ce:7a:11:36:5e:9a:c4:d8:d2:39:a9:
         f3:63:7d:ff:d3:f4:fd:4b:29:13:ce:80:38:35:ae:fa:df:b7:
         97:e0:ab:fb:bb:ab:51:b0:ca:8f:f3:09:b7:91:7b:8f:8e:74:
         68:43:29:71:78:a1:86:59:e1:f0:6e:d0:08:b4:ce:61:7a:58:
         87:e5:97:3d:80:05:e2:4b:82:a8:9d:4c:ab:1f:af:48:70:d7:
         c6:07:a1:11:a6:8a:88:58:9e:dc:82:0f:ed:b7:8f:4a:0e:3c:
         9b:52:f0:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKDFPw74dk1YK6ZkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjhkNWM1N2YtMzYwZC00NDg0LTk5ZjUtODEyNGRhMzQ2MDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/RWI2myBQnBNfu8hvg5l1lQnLwgGri8H+cM
WvFV1eNL64m0NawcJMFsDlmlL/tkAk3ShJviS2YmkX9dTIk9BJNftocOx1sU4xbx
8bjBk+KvbZJOQiopT/e80y0NPzj7pntpXYV3k38khmws5Azn3LxLMCtsL9Xl94BZ
vb9n4qQgfkjj8/dOM1/G3FmM/HSpFkyuVJgj6ZX0AJx7bY+3Dux3yTPIVXyzTdKH
W8zwWhLeCt+yAlPR+sQ3R2KFpbowIo2aZmQr3tJZI9QlU6wL7VgQXuCepOv6INIZ
Wz0qJl8j5WUw0L3pbF8x8oG1eG6g3RxrdRoKNsdF/2qHZrnuKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIu0RxSJ8kqN9CKfKuJXUo94bc6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmRiY2UxODUtMDAyMC0z
OGViLThkZGItYjc3NTRmYWRiMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANpYpni/cJSaCv9sgO71g1c5dAPQLMfI6DRqEkhXotgw1p/fATmTH/Y
RqtmOhDaAk90VOTC2LiTCgJn3/Vmy1qexH0rO1nyLpv8F2PJV2HYWnf1lQq23oTy
FAwyeyC1ES9umPKaku+GxkAyXfsylC+3d2XIRQwCSnpnhu6FsSes95jmAVDty8+t
AfjRYbfosti9yBSxZS7OehE2XprE2NI5qfNjff/T9P1LKRPOgDg1rvrft5fgq/u7
q1Gwyo/zCbeRe4+OdGhDKXF4oYZZ4fBu0Ai0zmF6WIfllz2ABeJLgqidTKsfr0hw
18YHoRGmiohYntyCD+23j0oOPJtS8IA=
-----END CERTIFICATE-----