Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a26e1844-4ebd-34f3-9792-1746079af2ad.roa
File:                     a26e1844-4ebd-34f3-9792-1746079af2ad.roa (raw, json)
Hash identifier:          s9ANedoKXewgO2rrS/jXtZ5o1sSkzkSv1/KSSHxiszQ=
Subject key identifier:   E2:16:B6:CD:1E:CB:EC:3F:4D:13:7D:3C:B3:3F:34:EF:E4:D9:0D:E5
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584309F9780F98CEAB93626D0580
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a26e1844-4ebd-34f3-9792-1746079af2ad.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f9:78:0f:98:ce:ab:93:62:6d:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3a69df27-e048-4771-9f7f-126933bb5288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b8:25:88:1a:cf:a8:e3:3f:9a:e7:85:78:aa:
                    18:5c:1c:0c:38:ad:b2:b5:7f:92:80:de:a1:a9:66:
                    92:53:ef:cb:83:5e:47:ad:4d:e1:28:ec:eb:61:8d:
                    08:e8:72:8c:ea:5d:89:02:af:cb:d4:e1:6a:24:be:
                    31:96:5f:cc:0d:7f:36:6f:5a:d1:dd:ed:7b:26:4d:
                    d0:72:e9:1d:c8:62:b3:b2:a4:4a:33:68:dc:43:b2:
                    a1:08:ce:9a:2c:2b:c2:55:60:ca:c1:75:e3:0d:35:
                    42:76:9e:11:73:86:32:71:e4:ff:25:d8:79:e0:4c:
                    7a:1f:62:d4:53:f4:47:f4:7e:50:cb:41:e6:39:a2:
                    a5:ac:89:cd:1e:8b:d2:8a:fc:c0:d7:f6:23:f5:b8:
                    ba:17:33:d0:37:f9:0e:72:01:93:7c:7a:f6:09:65:
                    8f:e7:e4:2d:df:76:3b:23:5c:b1:19:e8:67:3a:c2:
                    3a:6e:38:22:9e:d0:ea:86:22:2c:db:b4:32:32:e0:
                    24:3f:f7:aa:59:67:69:75:1a:15:c4:5d:50:06:69:
                    7e:6c:7b:95:7a:27:4f:47:41:76:39:b7:3b:5f:10:
                    8c:6f:f6:ed:a9:55:42:c0:21:a4:01:c3:97:3b:95:
                    05:14:a2:4c:36:06:ad:f8:83:8f:5b:11:67:2d:ee:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:16:B6:CD:1E:CB:EC:3F:4D:13:7D:3C:B3:3F:34:EF:E4:D9:0D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a26e1844-4ebd-34f3-9792-1746079af2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:da:c8:9c:08:f3:b3:50:98:88:83:b9:e6:1a:d5:8a:98:5b:
         a5:28:e0:5d:e5:6e:dc:0b:43:8a:85:a9:5a:c7:b2:17:56:34:
         e8:54:77:d6:01:f6:f3:74:22:b6:8d:a1:ca:ca:62:2c:20:83:
         52:30:1d:3c:80:af:28:36:a4:2d:8b:5b:92:3b:e5:ea:91:97:
         7a:68:91:88:45:66:b7:9b:bf:48:e5:bc:4a:7b:33:ef:17:1d:
         68:34:9b:ff:a0:74:30:9d:dc:63:61:d4:43:67:5d:f4:ca:7f:
         bf:88:e6:2b:79:76:ec:a6:c2:5e:a7:ef:b4:47:07:d9:1f:4f:
         7f:15:98:b7:e9:53:6f:f9:14:ef:22:70:34:1b:84:f6:25:9d:
         40:24:a5:28:89:c7:1a:71:7b:00:46:83:db:49:01:28:bf:f4:
         a2:95:99:1c:ff:68:3e:c0:07:c6:73:3e:af:78:c9:90:a0:31:
         d5:8c:ae:46:07:06:0b:37:0d:30:a1:92:5b:1c:53:8e:70:4b:
         30:60:95:39:50:31:c2:21:5d:22:5a:ea:6e:3c:89:77:1b:61:
         af:c5:42:63:fc:92:97:8a:be:43:25:77:24:55:c2:5b:52:79:
         4e:3e:80:ea:b1:21:14:15:73:1f:5f:ca:d4:ef:3b:e7:3a:02:
         df:d6:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----