Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1e8567e1-ec70-3400-aa17-bf86240478f6.roa
File:                     1e8567e1-ec70-3400-aa17-bf86240478f6.roa (raw, json)
Hash identifier:          cq+cj8mYRswZFsU+gbwv0B39MbdRMrrrKLPT67mKwNc=
Subject key identifier:   4D:42:F4:F5:89:BE:6E:95:97:DB:F6:4D:35:61:34:FB:A6:AC:69:7F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309F0BCE6E7B0F0BBA39E81C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1e8567e1-ec70-3400-aa17-bf86240478f6.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f0:bc:e6:e7:b0:f0:bb:a3:9e:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=0240f224-bf2c-4cc2-aa1a-3b6665b2c89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:ae:62:a3:be:82:d7:ae:7d:bb:1e:c7:99:
                    77:b6:92:f8:db:49:9e:eb:e1:98:ef:45:40:46:55:
                    cf:08:d1:41:e4:73:1f:8f:bc:dc:2a:97:93:09:7a:
                    f8:5b:cd:07:0b:3b:7c:94:6e:8a:e8:15:37:6a:b9:
                    8a:42:11:b0:c8:76:c5:5c:99:fc:b5:91:eb:71:d6:
                    ab:8e:7e:77:a3:13:59:bc:b4:76:40:8c:ac:1c:dd:
                    16:80:dc:3c:9a:db:9f:3f:f4:c0:7e:60:c0:03:be:
                    c5:e6:04:3b:4c:ef:ad:e9:6b:a7:54:b5:15:ec:3e:
                    52:b9:b8:f4:a7:13:7d:2f:3f:05:66:bc:14:8c:93:
                    35:8b:59:0d:3e:b5:7f:71:97:09:28:5b:d0:df:76:
                    ac:62:9e:f9:b2:93:9e:7c:91:af:a1:18:b8:f6:54:
                    fb:cd:9e:bf:a6:c1:61:20:1d:d7:79:8e:d8:f4:d0:
                    7d:ff:e7:4c:dd:5e:ee:ce:f2:e2:0e:e2:9e:48:e0:
                    0d:7c:0e:5c:4d:2c:db:24:da:5f:19:eb:c7:f0:39:
                    cd:4e:5d:e1:f8:d1:a5:10:99:30:58:6c:49:90:cc:
                    08:59:5d:66:11:2a:db:5f:c9:ba:4f:6b:7f:c7:16:
                    4b:35:75:96:5a:4b:75:00:d9:95:ab:1e:86:d3:e2:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:42:F4:F5:89:BE:6E:95:97:DB:F6:4D:35:61:34:FB:A6:AC:69:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1e8567e1-ec70-3400-aa17-bf86240478f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5c:4b:de:4d:09:10:a0:3a:6e:1d:f8:c8:ce:ef:8a:df:02:
         aa:87:d3:3f:d2:be:2a:8f:52:56:43:b8:e2:f7:b3:a7:65:6b:
         f3:b1:43:54:f1:0e:3e:7b:10:c0:39:59:f4:59:dd:8b:bf:8d:
         93:6b:05:3f:fa:bc:e0:0a:ba:89:80:ef:53:14:6b:73:56:26:
         1c:84:79:88:7b:9f:a0:bd:87:b3:06:5f:7c:a0:13:9f:13:47:
         f7:d7:f6:11:aa:92:78:13:22:61:ee:d3:78:03:ef:9d:c6:4a:
         ae:ba:e1:dc:48:c1:0a:67:a8:73:65:a6:10:85:67:59:ab:d8:
         d5:31:48:55:97:9b:8b:ad:26:a7:ab:c7:69:3d:14:83:f0:8f:
         45:e4:d1:1b:e9:4b:49:71:ab:a7:2a:5a:32:8a:d0:f5:20:3b:
         a6:fa:33:6e:59:f2:f8:a0:51:d9:d4:92:4b:44:3a:4d:91:c9:
         ee:15:8c:a6:49:1d:3a:19:af:76:c7:52:b7:ba:af:f9:a8:5d:
         6a:f9:54:86:c1:e6:ae:36:b4:fb:5e:69:fc:17:73:a4:bd:3f:
         1e:f0:83:26:f2:81:96:db:d6:ff:14:83:34:85:fb:49:7e:bc:
         be:b9:e3:bf:15:d8:0a:d6:c5:47:0d:48:0b:bc:b1:4b:7f:bd:
         79:6f:98:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:54 2024 by rpki-client on console-fra.rpki-client.org