Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/70ec1793-f49f-3c8b-8f10-aa813ad49a9a.roa
File:                     70ec1793-f49f-3c8b-8f10-aa813ad49a9a.roa (raw, json)
Hash identifier:          OXWbzO0N669s+CTISWG5O+Ca9/fdkCig/kD+RjdbvUA=
Subject key identifier:   DE:D1:53:71:C5:A7:00:07:85:27:C5:DD:27:63:CD:C5:D3:5D:46:82
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858430A26675BFAFB41DB78D10400
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/70ec1793-f49f-3c8b-8f10-aa813ad49a9a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.142.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:26:67:5b:fa:fb:41:db:78:d1:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f7cfd880-5204-4e51-b6cd-81e5db344e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:fd:9d:b3:dc:d4:9d:49:ee:8d:a3:df:85:
                    8d:c8:60:08:4e:38:5e:af:77:49:81:e0:e7:8b:75:
                    b0:ee:96:89:8c:8b:56:8a:9b:77:8c:7e:52:b9:87:
                    45:5e:c7:74:16:14:64:06:30:48:ae:c1:66:49:57:
                    b5:c3:ab:fc:0a:3b:5a:63:3f:79:17:c7:16:92:32:
                    9c:ed:62:25:ca:b9:0d:1e:ea:87:d7:ac:0b:3e:32:
                    b7:07:34:5a:49:c8:cf:c5:fa:eb:85:ad:b6:1c:01:
                    b7:7a:ba:7e:ee:e1:2e:5d:49:d3:0e:40:d9:bc:83:
                    bf:d9:23:f3:af:e5:86:c3:0c:a3:15:80:de:c1:75:
                    a2:dd:18:b8:8f:83:c7:57:1e:91:de:94:76:61:09:
                    f3:9b:5b:33:ed:0e:ff:1e:af:a6:2e:18:63:dd:a8:
                    b9:02:1c:43:f5:e7:f1:e2:93:6f:7d:b9:29:19:41:
                    01:ae:35:36:61:53:92:81:21:45:59:3a:c4:14:91:
                    51:34:ec:c3:69:2e:42:c8:2c:bd:91:71:b5:c9:34:
                    eb:5a:a5:01:0f:6c:91:d3:7f:29:ae:c5:6d:e5:5e:
                    27:9d:6e:42:ae:d7:06:fe:d1:9f:b0:d0:04:17:3f:
                    15:61:b5:b9:e5:95:5b:10:a1:98:e4:ee:cf:e9:e4:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D1:53:71:C5:A7:00:07:85:27:C5:DD:27:63:CD:C5:D3:5D:46:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/70ec1793-f49f-3c8b-8f10-aa813ad49a9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d9:ce:e4:36:e2:69:de:64:d6:90:9b:85:92:0e:53:7d:26:
         fe:59:d6:9d:42:0d:05:e6:d6:74:bc:e2:4b:40:da:2c:38:83:
         17:21:1c:3f:ce:71:50:b8:b9:df:21:cb:27:6d:ce:b8:b8:4d:
         32:80:12:e5:2d:f9:35:13:37:97:44:9e:ef:c7:8e:b2:4a:08:
         65:bb:dc:56:2d:3a:41:ef:b7:d3:ae:85:5c:6d:6d:21:c1:7d:
         93:f8:fc:d9:34:df:3e:c1:3b:c5:7c:ed:13:7e:a4:02:84:41:
         15:96:b8:3d:b1:27:0a:3a:2c:a7:da:74:ca:68:06:e6:0e:71:
         d0:17:e9:bb:55:63:6d:43:77:4d:2a:6d:eb:02:e0:d4:30:96:
         b6:0a:c7:19:d0:fb:ed:db:ba:33:f6:19:07:9d:46:cc:6f:ba:
         d5:e4:26:d0:96:66:21:6c:fb:cd:e3:37:3f:ce:cd:b4:38:92:
         42:7e:2d:e6:be:4c:5f:2a:9f:fc:c1:50:42:67:82:4e:a3:c9:
         75:52:d5:d6:8a:43:26:a7:1b:cb:79:20:a4:7c:b4:49:15:ef:
         8e:8e:76:55:c1:21:33:ca:27:35:9e:6f:2b:3a:15:ea:4e:c3:
         14:db:09:43:06:d8:b4:97:ba:48:8b:30:a3:4b:86:f4:f8:1e:
         d9:ee:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org