Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff868780-0a93-3dcb-9daf-42c5ecad6c10.roa
File:                     ff868780-0a93-3dcb-9daf-42c5ecad6c10.roa (raw, json)
Hash identifier:          Rz4dULclhd6BWQdDZ2DyVjxL6zHn1yeJPqrOdnVtrO0=
Subject key identifier:   65:6C:2F:9B:54:C9:CE:CB:F7:4B:87:42:22:90:94:2B:7F:81:7D:BA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A139F8628A96B71AC9DE200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff868780-0a93-3dcb-9daf-42c5ecad6c10.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:13:9f:86:28:a9:6b:71:ac:9d:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=1ef192c6-e6d7-4c54-a37f-d4b0d58f87e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:bb:fd:96:22:d5:a4:04:7d:2d:0e:ea:ad:
                    71:c4:ca:b4:63:2d:11:06:5c:58:6a:fd:b1:a1:d8:
                    bc:57:d1:91:75:67:48:db:cb:4a:9c:bc:d5:30:91:
                    06:7c:94:40:53:f9:d1:3c:b9:d9:bf:f1:a0:3a:a2:
                    5d:7b:f1:49:e7:d6:df:f6:c1:ca:83:61:e5:f4:52:
                    d4:83:b7:21:37:f8:b4:7d:81:0e:36:7a:fd:a4:70:
                    2c:37:fe:4e:55:7a:67:7a:05:11:07:e2:3f:b8:64:
                    68:c5:f4:a7:eb:94:3a:16:95:ff:b9:14:cf:0b:6c:
                    68:c7:91:84:10:30:63:a3:52:e7:37:ea:a6:92:d0:
                    81:b4:14:96:f3:b0:84:07:db:7d:db:8d:0a:6a:cc:
                    4d:84:4a:94:1f:92:c4:4c:d8:45:55:8e:80:c1:f3:
                    1f:d4:db:c9:49:20:f8:1b:0b:4e:7b:33:7a:14:8b:
                    f2:c9:28:9b:1d:1e:d1:d5:55:7b:7a:d5:f5:b3:d0:
                    ba:13:8b:1f:87:a2:51:90:ff:63:ab:53:06:e3:b8:
                    f8:c8:b1:d6:b7:58:55:60:41:e0:54:e7:9f:08:c0:
                    a2:45:24:59:b6:8f:a0:ff:6a:13:3f:c3:c1:2d:96:
                    20:a3:95:44:35:99:f4:9a:9f:58:c3:65:6b:df:ed:
                    21:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6C:2F:9B:54:C9:CE:CB:F7:4B:87:42:22:90:94:2B:7F:81:7D:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff868780-0a93-3dcb-9daf-42c5ecad6c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:13:80:f8:50:ed:44:78:a8:c2:b6:80:d2:ef:6d:24:8f:
         87:a5:18:c9:d2:cc:b8:50:37:e9:f1:19:c8:4e:58:ca:77:71:
         0f:42:9d:58:aa:27:6a:a2:7f:02:c5:52:60:fe:c7:13:ef:60:
         b4:ac:a4:4d:47:df:db:04:b6:7b:f2:a8:48:66:ed:78:3e:4f:
         04:68:37:56:14:8d:8c:24:87:6b:73:1f:eb:6f:6d:d1:d7:b8:
         3f:2a:bb:d2:0f:53:ac:8f:60:a6:b4:ee:2d:7d:a8:6d:d7:74:
         b5:40:87:77:0f:6f:f7:36:d5:e8:d3:31:f6:0a:cd:3f:d0:a2:
         8c:d1:44:70:f9:02:4e:b3:82:e2:e3:ce:bd:bd:59:9b:04:f8:
         4c:28:da:5b:17:ed:ff:b4:1f:b7:7a:30:92:1b:93:fd:85:31:
         61:60:23:af:ce:1c:37:9b:57:a8:c1:e1:85:18:c1:2e:a8:70:
         24:ad:6c:0f:de:f0:38:af:5e:d4:d4:d9:34:7e:80:9f:10:21:
         d6:9c:d7:f2:cb:7a:e0:0f:46:6f:51:ef:05:1c:97:17:e2:21:
         94:5e:24:f9:a0:40:95:7f:fc:62:f0:88:34:5b:54:b9:18:3d:
         82:19:13:21:c3:40:6b:07:17:f0:6b:4a:0d:63:62:55:fa:05:
         9b:5c:e3:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKE5+GKKlrcayd4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MWVmMTkyYzYtZTZkNy00YzU0LWEzN2YtZDRiMGQ1OGY4N2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCK7/ZYi1aQEfS0O6q1xxMq0Yy0RBlxYav2x
odi8V9GRdWdI28tKnLzVMJEGfJRAU/nRPLnZv/GgOqJde/FJ59bf9sHKg2Hl9FLU
g7chN/i0fYEONnr9pHAsN/5OVXpnegURB+I/uGRoxfSn65Q6FpX/uRTPC2xox5GE
EDBjo1LnN+qmktCBtBSW87CEB9t9240KasxNhEqUH5LETNhFVY6AwfMf1NvJSSD4
GwtOezN6FIvyySibHR7R1VV7etX1s9C6E4sfh6JRkP9jq1MG47j4yLHWt1hVYEHg
VOefCMCiRSRZto+g/2oTP8PBLZYgo5VENZn0mp9Yw2Vr3+0h4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGVsL5tUyc7L90uHQiKQlCt/gX26MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmY4Njg3ODAtMGE5My0z
ZGNiLTlkYWYtNDJjNWVjYWQ2YzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2oE4D4UO1EeKjCtoDS720kj4elGMnSzLhQN+nxGchOWMp3cQ9CnViq
J2qifwLFUmD+xxPvYLSspE1H39sEtnvyqEhm7Xg+TwRoN1YUjYwkh2tzH+tvbdHX
uD8qu9IPU6yPYKa07i19qG3XdLVAh3cPb/c21ejTMfYKzT/QoozRRHD5Ak6zguLj
zr29WZsE+Ewo2lsX7f+0H7d6MJIbk/2FMWFgI6/OHDebV6jB4YUYwS6ocCStbA/e
8DivXtTU2TR+gJ8QIdac1/LLeuAPRm9R7wUclxfiIZReJPmgQJV//GLwiDRbVLkY
PYIZEyHDQGsHF/BrSg1jYlX6BZtc4yg=
-----END CERTIFICATE-----