Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/22548e44-a185-37db-bb4a-825ee0064a72.roa
File:                     22548e44-a185-37db-bb4a-825ee0064a72.roa (raw, json)
Hash identifier:          KX5uUk2MBhc+uAC5Wi+5wPeVP4feoFLsAGh1fFY5mLo=
Subject key identifier:   9B:C7:3B:B8:A5:6B:E9:37:42:5B:62:7F:AD:07:C9:DB:65:66:AA:39
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328583D7D731D1CB024BFB1012A0E40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/22548e44-a185-37db-bb4a-825ee0064a72.roa
Signing time:             Wed 06 Apr 2022 04:00:00 +0000
ROA not before:           Wed 06 Apr 2022 04:00:00 +0000
ROA not after:            Mon 08 Jul 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.58.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7d:73:1d:1c:b0:24:bf:b1:01:2a:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr  6 04:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2024 GMT
        Subject: CN=29609547-5aaf-47bd-981e-15a59cc7be36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:55:22:a1:0b:53:42:16:13:3e:58:b5:26:53:
                    f4:bd:86:d4:21:d2:39:8d:ee:54:cd:8a:7b:42:2a:
                    93:fb:ec:9a:d0:d2:bc:5a:73:76:ab:6d:e7:a4:f0:
                    39:84:35:15:25:10:f2:42:89:10:94:c7:61:9f:1f:
                    12:d3:47:c8:e9:94:3a:a4:d4:35:ff:6d:98:e0:39:
                    13:c0:69:01:b0:7f:d7:bd:6a:e7:5c:4d:73:76:b6:
                    6e:91:78:a2:b5:c9:cc:dd:9d:4d:2d:b4:66:4f:69:
                    76:b3:2d:3a:d2:0c:12:42:2d:73:05:3b:4f:2d:c6:
                    3e:be:a9:e6:95:b7:33:5e:3c:92:96:71:db:f4:68:
                    3e:5b:20:4b:d9:5a:cc:6a:da:6d:97:f9:90:3e:bf:
                    8e:43:98:3c:56:2c:db:0a:82:cd:e9:87:04:38:0f:
                    5e:6a:db:72:f8:04:1f:4e:f6:4d:10:f4:fe:6c:6e:
                    b7:01:c3:87:97:8e:87:de:d0:db:6f:e9:e1:a6:4a:
                    6b:2c:d9:2c:6f:85:12:be:39:d5:32:2a:b1:20:23:
                    31:a4:89:60:6c:90:7b:73:1f:84:49:99:73:6d:64:
                    f4:6d:39:fc:82:6d:be:ad:87:e0:c7:8f:a9:7a:bf:
                    e8:78:45:78:48:a3:e2:20:c4:07:6b:17:87:e9:6a:
                    a0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C7:3B:B8:A5:6B:E9:37:42:5B:62:7F:AD:07:C9:DB:65:66:AA:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/22548e44-a185-37db-bb4a-825ee0064a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:3e:11:c9:ee:21:55:56:db:eb:fc:69:f1:e0:c7:39:d9:95:
         e1:49:86:2b:28:dd:e5:96:f0:6b:1f:7b:fd:30:2a:f9:75:00:
         36:c7:b5:53:72:63:28:88:79:8e:47:0d:ff:22:02:ac:96:e9:
         3c:1e:bb:c4:9d:44:13:e4:83:a2:37:10:82:bb:7f:76:37:85:
         97:1e:67:58:dc:c3:69:81:07:43:e8:31:63:89:67:a2:f8:05:
         c1:12:47:b4:9f:84:72:9f:f1:f4:8d:da:a3:ee:1d:94:8a:5a:
         2a:bd:a1:7a:b0:4e:70:0d:f8:5c:5b:b2:b0:2e:ac:12:81:f6:
         47:03:fd:bd:9c:92:51:42:9f:77:6e:ff:c9:6b:6d:5f:99:98:
         27:43:0d:56:69:01:33:7f:4a:b6:31:0f:29:17:04:45:3a:29:
         12:51:93:17:cd:3d:52:17:e9:c7:00:9e:be:c1:a8:29:65:67:
         7a:a3:51:f3:f6:aa:54:91:5f:c0:c8:37:55:c0:9e:12:1f:20:
         7a:a2:65:5b:79:f7:bf:3e:36:8f:25:4b:e1:61:47:2c:a6:3e:
         e0:25:f7:5a:a0:f1:26:7d:7f:b2:fd:a3:3c:37:73:b6:34:89:
         1f:d0:c0:7c:e3:3a:89:50:0c:fe:3e:bc:ac:3b:42:36:f9:07:
         8a:62:f3:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD19cx0csCS/sQEqDkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTIyMDQwNjA0MDAwMFoXDTI0MDcwODA0MDAwMFowLzEtMCsGA1UEAxMk
Mjk2MDk1NDctNWFhZi00N2JkLTk4MWUtMTVhNTljYzdiZTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVUioQtTQhYTPli1JlP0vYbUIdI5je5UzYp7
QiqT++ya0NK8WnN2q23npPA5hDUVJRDyQokQlMdhnx8S00fI6ZQ6pNQ1/22Y4DkT
wGkBsH/XvWrnXE1zdrZukXiitcnM3Z1NLbRmT2l2sy060gwSQi1zBTtPLcY+vqnm
lbczXjySlnHb9Gg+WyBL2VrMatptl/mQPr+OQ5g8VizbCoLN6YcEOA9eatty+AQf
TvZNEPT+bG63AcOHl46H3tDbb+nhpkprLNksb4USvjnVMiqxICMxpIlgbJB7cx+E
SZlzbWT0bTn8gm2+rYfgx4+per/oeEV4SKPiIMQHaxeH6WqghQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJvHO7ila+k3Qltif60HydtlZqo5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMjI1NDhlNDQtYTE4NS0z
N2RiLWJiNGEtODI1ZWUwMDY0YTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBc6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0+EcnuIVVW2+v8afHgxznZleFJhiso3eWW8Gsfe/0wKvl1ADbHtVNy
YyiIeY5HDf8iAqyW6Tweu8SdRBPkg6I3EIK7f3Y3hZceZ1jcw2mBB0PoMWOJZ6L4
BcESR7SfhHKf8fSN2qPuHZSKWiq9oXqwTnAN+FxbsrAurBKB9kcD/b2cklFCn3du
/8lrbV+ZmCdDDVZpATN/SrYxDykXBEU6KRJRkxfNPVIX6ccAnr7BqCllZ3qjUfP2
qlSRX8DIN1XAnhIfIHqiZVt5978+No8lS+FhRyymPuAl91qg8SZ9f7L9ozw3c7Y0
iR/QwHzjOolQDP4+vKw7Qjb5B4pi834=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:26 2024 by rpki-client on console-ams.rpki-client.org