Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/98e263e7-4483-3de1-8ed5-f6f50116bb14.roa
File:                     98e263e7-4483-3de1-8ed5-f6f50116bb14.roa (raw, json)
Hash identifier:          6iYrGsVh8F98KzIhKxSc0fXjyvTcmgCgtf62noPRjEg=
Subject key identifier:   0A:59:2F:55:77:AD:58:2F:6A:87:04:5A:49:DD:1A:96:CE:0D:A2:B8
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584309F3B0BB9B6B037392063400
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/98e263e7-4483-3de1-8ed5-f6f50116bb14.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f3:b0:bb:9b:6b:03:73:92:06:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=4954e781-5118-438b-b115-e14d6e0a82ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:51:03:b3:1a:09:c7:b1:dc:df:8a:08:aa:
                    7b:76:72:74:c7:89:83:35:37:16:c0:6a:35:70:92:
                    1a:8e:53:4d:57:96:09:39:09:4d:77:d0:28:c9:17:
                    67:0a:d6:14:8e:e4:9b:a5:16:1e:7b:40:3e:69:49:
                    49:3b:9a:85:fd:34:81:54:b6:ef:f4:79:aa:a0:80:
                    08:51:e1:bf:ac:45:cd:fe:b5:43:c9:9f:9d:db:70:
                    a7:db:ad:96:6b:fa:55:4d:d9:01:f9:23:12:52:c5:
                    20:27:a5:ce:95:ca:33:94:24:a4:8c:18:22:a1:af:
                    76:94:26:31:1b:77:6d:d0:49:bf:a1:4d:2f:44:2c:
                    b9:ac:48:65:8e:8a:0f:0a:66:f4:f2:47:f1:c6:85:
                    99:10:98:85:03:2f:d1:75:10:bd:0f:34:2e:54:97:
                    c0:84:a0:08:b3:f9:9d:04:52:12:ac:57:65:a3:d4:
                    bc:df:18:ad:13:28:47:15:35:a9:0f:d4:3e:44:39:
                    38:e2:c8:b4:f9:7a:ce:c0:7f:c1:57:b2:d6:53:fb:
                    53:7b:09:83:59:4e:dd:ab:be:4a:a1:9a:5a:13:6d:
                    70:6e:a8:b7:85:76:cf:51:41:f7:55:d0:e6:47:4d:
                    36:32:1c:16:7a:bd:d3:17:e6:22:a6:94:43:9c:6b:
                    63:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:59:2F:55:77:AD:58:2F:6A:87:04:5A:49:DD:1A:96:CE:0D:A2:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/98e263e7-4483-3de1-8ed5-f6f50116bb14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f0:d0:f5:3a:ff:b1:af:0e:5e:3d:b5:74:46:88:07:4e:1f:
         62:a0:93:aa:d1:e3:d1:38:44:3f:c4:74:81:94:07:15:bc:bb:
         67:9a:68:9b:93:75:0c:36:ff:a8:e4:f2:85:96:aa:70:ac:63:
         45:bb:b8:58:23:2f:04:37:3f:f6:f0:b4:49:b9:16:16:e7:cc:
         66:23:7b:c0:e6:58:fa:1c:65:01:c7:b3:ca:28:a5:7d:83:64:
         82:d1:3a:b8:fb:86:e0:1c:1f:2e:17:e2:78:3a:de:fa:c9:94:
         38:39:0d:59:9f:02:5d:e7:c5:30:4f:a6:fb:48:3c:b0:cf:f0:
         e3:e3:e0:6b:72:81:3d:78:66:e1:04:f7:9a:95:6e:3e:ee:db:
         57:07:be:2c:16:e4:ef:5d:74:af:0b:63:f6:1f:ab:5f:46:b2:
         1e:14:59:ff:b2:0c:fc:8b:e0:17:0c:3b:46:ff:28:7a:15:f9:
         3e:ae:d3:35:e3:40:1a:a9:c7:78:10:33:8b:84:cc:ca:ff:11:
         13:01:32:32:9c:71:16:7f:92:d1:dc:2c:5e:45:19:99:48:3b:
         72:e0:47:9f:72:29:df:35:59:2d:8e:d2:36:d7:ca:a6:2e:fe:
         c0:e5:20:3f:98:08:cf:1d:95:ec:e5:b8:c8:e1:d7:f5:11:1d:
         24:f3:47:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----