Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3b188e5c-0848-35da-9ee1-f1fab8239930.roa
File:                     3b188e5c-0848-35da-9ee1-f1fab8239930.roa (raw, json)
Hash identifier:          Grk09qq98Rg07TU/egMpc4OmH/6pnOzv0K0QaIeWpgg=
Subject key identifier:   06:03:D9:6F:45:D9:8A:2F:34:65:14:87:F2:98:3B:57:55:4E:3E:E5
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309FE30C6E67B951CE6D7DE00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3b188e5c-0848-35da-9ee1-f1fab8239930.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.204.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fe:30:c6:e6:7b:95:1c:e6:d7:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=1671f713-bad7-48f0-969a-3d21751b9a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:d7:08:71:b4:12:19:6f:9c:ff:0b:de:6f:
                    aa:3d:c6:bb:e0:e1:34:ec:18:ea:16:4d:88:1c:b5:
                    a8:2a:da:8d:86:6b:5b:fd:43:8e:f3:c3:0a:a7:09:
                    56:f1:5a:64:1e:e5:fe:32:22:1c:81:32:13:9a:5f:
                    81:66:73:63:3f:9f:17:e0:78:be:ca:92:2f:b3:e3:
                    93:96:16:a7:a2:9d:c8:2c:3e:5b:06:b0:bf:39:88:
                    07:5b:36:72:18:4d:a3:fb:39:fa:8c:ce:ea:03:27:
                    bd:d8:21:af:a5:f1:79:14:6b:84:0e:63:95:57:bb:
                    a8:65:80:98:eb:46:b4:ff:e3:f4:45:9b:21:83:b5:
                    a2:d9:2a:69:06:ef:fe:63:4c:bd:a3:68:c2:e8:fe:
                    e6:24:c1:d2:06:e6:1f:89:51:d2:e1:2a:53:ec:08:
                    20:98:ee:89:64:27:b6:e6:51:e3:5c:4e:96:40:8c:
                    4b:a7:a9:7f:94:d5:28:b7:96:35:9b:e5:29:1d:0d:
                    9c:d0:11:61:d2:01:af:76:f4:fe:36:a0:eb:46:63:
                    a4:07:3a:55:c3:7e:d4:22:10:d3:7e:b0:94:c7:a8:
                    5c:3e:ff:8d:09:22:9e:e0:cb:f7:5f:e8:9d:0f:b6:
                    4e:1f:3d:e7:e2:86:48:2b:87:04:90:e6:b9:dc:a5:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:03:D9:6F:45:D9:8A:2F:34:65:14:87:F2:98:3B:57:55:4E:3E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3b188e5c-0848-35da-9ee1-f1fab8239930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0d:73:4c:d3:da:66:88:8f:b1:cd:1c:ec:aa:d2:bd:2e:fb:
         b0:2b:1e:fc:8b:9f:03:70:27:a3:43:10:7f:a0:fe:65:06:82:
         d2:a6:4c:7d:04:fe:62:b9:5b:85:ff:b6:b3:30:eb:2b:fc:1f:
         95:ba:53:d1:8c:45:db:ac:83:ae:d1:73:60:e9:0d:2e:55:92:
         45:88:2b:9e:76:95:e0:31:98:fd:18:5a:cf:5c:24:91:ad:d4:
         02:bc:ab:27:f6:eb:39:18:55:0b:57:1b:8a:08:bf:8c:2a:f3:
         9d:4e:d6:9f:ac:e9:18:4b:63:0e:28:5a:f2:80:88:ad:35:46:
         9e:2c:fe:46:1d:49:78:e5:55:72:7e:20:a3:8d:93:57:01:b4:
         d2:23:69:17:2b:d0:0a:bc:1a:0d:0c:21:06:a7:6d:96:7e:75:
         d1:f3:41:59:18:31:43:9c:66:1c:0f:96:c2:ee:d6:5b:d0:36:
         bd:4c:4c:73:a6:1c:12:af:50:ba:0a:de:c0:27:5a:12:98:da:
         c5:7e:e5:65:13:95:f8:0b:12:06:3a:09:30:91:45:ff:00:79:
         65:3f:20:58:b2:02:e4:6b:29:80:f8:2a:22:1a:9f:bf:bd:2e:
         92:0b:10:27:53:6b:c9:92:76:64:9f:1b:13:3c:a9:c4:e7:28:
         8d:9f:cc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----