Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ffb05e86-4bb2-35dc-be10-0e9fa4e0b85a.roa
File:                     ffb05e86-4bb2-35dc-be10-0e9fa4e0b85a.roa (raw, json)
Hash identifier:          eEiuYC4fMJKTJQKF4kt1rJRnxIx6QzJ/TMYHBsyU9lg=
Subject key identifier:   41:8B:B3:51:DE:2A:9C:19:B5:37:B5:07:F4:82:AF:6C:3A:87:A4:00
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1106EF7F2EEA10DF27B740
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ffb05e86-4bb2-35dc-be10-0e9fa4e0b85a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:11:06:ef:7f:2e:ea:10:df:27:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f673f82c-a6c1-4037-869e-3ab9e7d999c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:88:a9:28:17:f9:82:14:d8:76:8e:e6:fc:
                    37:bf:8d:fa:35:d9:fb:cb:0a:bc:a0:e9:ff:49:ca:
                    2a:61:7d:6a:1a:52:29:73:8b:eb:1f:3c:9e:34:91:
                    e6:d0:3b:a2:55:1c:98:e6:4c:4e:cc:22:2e:7f:e2:
                    31:3c:47:72:63:95:e7:9b:07:d9:22:70:13:83:22:
                    6c:50:40:53:7f:70:e0:ad:ec:35:66:18:09:20:db:
                    f5:83:bd:16:36:b9:a0:c0:c6:a2:99:94:a0:0b:53:
                    68:86:a4:27:55:7e:df:18:22:45:37:d7:6d:34:a7:
                    fc:9c:3f:2d:c9:9f:ee:85:c4:ec:5f:de:9d:5f:62:
                    43:41:4a:3e:01:95:34:da:c2:3d:7e:da:f5:89:ee:
                    02:5d:37:22:70:45:9e:b3:6b:80:36:54:8d:17:0f:
                    9d:a5:a2:10:49:99:f9:f2:1c:52:9f:6d:e7:e9:25:
                    df:de:43:cf:4f:73:05:2c:4f:6b:1e:ec:9b:5b:b6:
                    72:f8:ca:e9:a1:f9:56:47:bd:ee:43:fc:e7:a9:27:
                    37:c1:60:c6:74:6f:09:d1:49:82:cb:5c:51:d6:2b:
                    bd:53:a4:39:62:8d:8a:b0:85:59:f9:e1:33:1a:7d:
                    aa:1e:8e:a1:56:08:af:aa:75:ed:d6:a9:45:f1:b5:
                    23:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8B:B3:51:DE:2A:9C:19:B5:37:B5:07:F4:82:AF:6C:3A:87:A4:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ffb05e86-4bb2-35dc-be10-0e9fa4e0b85a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:81:10:d5:38:0e:40:61:1b:b1:c4:68:44:03:96:eb:8e:d3:
         cc:26:3d:88:7a:56:b1:2e:cb:77:2b:d3:5c:5e:c9:d9:36:93:
         4a:2c:62:25:e9:5e:ee:7c:ac:cd:59:84:22:71:3e:d6:9f:a4:
         ce:e2:22:c4:cd:34:a6:97:ee:c1:0e:76:c1:6b:3a:24:7c:3c:
         e1:42:04:ab:22:38:23:34:e0:f8:56:55:d9:70:47:76:ce:1e:
         27:9c:cf:35:02:21:45:60:df:a0:b5:e7:5a:71:49:88:1e:fc:
         9d:f6:7a:28:84:01:9e:45:72:8c:bf:18:80:47:12:84:4b:9c:
         11:f4:dc:51:f1:32:e4:7f:6d:0e:0c:af:8e:47:47:e2:d9:2d:
         60:01:63:9a:8f:75:23:8f:8f:5f:d3:df:c9:d4:af:23:c4:e8:
         a6:47:0c:3a:d4:8b:7d:bf:00:1f:b8:35:73:6f:b0:32:a0:39:
         fa:cb:e3:53:96:14:1b:96:27:a3:ed:a9:c4:1a:c3:13:88:75:
         4a:1c:49:bf:8e:c5:48:bb:f5:9f:8e:eb:c9:6d:54:df:8d:18:
         a9:e1:b1:df:19:df:e2:ca:72:ce:7b:17:d7:ba:b7:1d:ab:54:
         70:65:3b:4c:17:c5:9a:fb:c8:e3:8f:6d:60:9c:c4:eb:cc:f0:
         ea:3a:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----