Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3bd3535c-508d-3765-b254-2f64988cc166.roa
File:                     3bd3535c-508d-3765-b254-2f64988cc166.roa (raw, json)
Hash identifier:          opfPTRpYeO0d2f7P9f4/RHtjOzIs/MAjXjyc2FB/92I=
Subject key identifier:   F3:C9:C2:7A:87:EE:93:6F:F1:7D:0D:00:DD:48:99:90:98:E6:09:18
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A24372242C09AD94AE30800
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3bd3535c-508d-3765-b254-2f64988cc166.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.246.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:24:37:22:42:c0:9a:d9:4a:e3:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=51884891-6051-4f72-a914-e454b5619377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:f9:94:c1:20:a2:88:d6:90:73:fe:b6:20:
                    71:fc:98:01:08:89:5b:3b:59:a0:13:9f:23:80:8f:
                    47:f7:99:18:03:a1:91:80:59:2b:81:86:4a:ad:6a:
                    08:d8:bc:63:08:f2:99:38:80:67:71:a8:e3:e0:48:
                    5e:11:79:06:bd:84:65:b1:1b:ba:ab:9e:f9:1c:96:
                    8d:c4:c7:9f:6d:bf:df:4e:cf:39:80:ae:66:cb:6d:
                    b0:34:4f:03:4f:db:ec:de:1b:c0:9e:fd:b1:25:1e:
                    08:94:76:1d:17:5e:4c:02:48:0f:f4:5f:0f:4b:b5:
                    50:16:12:1b:fc:54:0a:8b:0c:ea:c1:e1:31:b8:fb:
                    06:f7:9f:60:22:b4:3d:33:46:a5:81:85:5e:5b:4a:
                    cd:d4:58:a0:a6:76:3e:60:bc:8b:4d:a0:d9:d4:f5:
                    c7:8e:dd:80:ea:4e:8c:2f:20:1d:c2:5b:b4:a1:37:
                    96:30:01:f3:95:1e:48:31:53:63:02:14:7a:8d:7e:
                    bf:d3:73:16:99:46:11:dd:d4:22:00:e1:aa:7b:1f:
                    9c:41:f2:d5:b1:52:b8:24:b3:d0:24:5a:84:ac:3d:
                    aa:35:2c:44:3c:15:a9:c0:40:24:8f:21:b3:05:b3:
                    3f:68:64:24:87:5e:02:f3:82:fc:1c:f9:a8:78:5f:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C9:C2:7A:87:EE:93:6F:F1:7D:0D:00:DD:48:99:90:98:E6:09:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3bd3535c-508d-3765-b254-2f64988cc166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:be:5b:cb:94:6d:e1:e7:45:cb:07:97:3c:1a:76:e7:c8:b8:
         82:2b:30:64:ad:e4:88:e8:81:75:78:7c:14:7a:c2:9c:00:3d:
         e6:7d:ac:c9:18:87:7e:ac:39:bd:5f:be:f1:f4:5b:6d:61:a7:
         19:9e:e9:5e:c8:df:aa:fc:f6:a3:5d:aa:48:ea:c6:78:b8:95:
         34:10:e7:4d:3b:41:51:c7:f3:6e:e3:ce:cc:9d:05:5c:76:67:
         a3:bf:ee:d6:96:a8:69:78:b1:74:d6:42:30:d1:bf:db:06:1e:
         9f:be:34:f5:bc:d9:a5:f9:fb:c8:35:40:6f:ce:a2:ac:ae:01:
         3d:5b:d6:63:45:4f:9a:30:f3:b2:b9:c9:d4:12:0b:dc:db:31:
         69:76:5d:54:18:37:7e:30:79:e8:6e:3c:eb:69:e3:7b:cb:fa:
         ec:1f:a4:b2:7c:db:dd:da:d2:f2:e2:01:e5:48:43:df:5b:7a:
         99:d7:23:19:8f:89:2e:20:38:d2:97:13:33:a6:55:f4:07:a3:
         25:c8:40:ea:84:37:1c:4f:2b:1c:f6:81:04:44:90:7f:e1:de:
         fc:3a:a9:92:2d:90:54:a3:1a:18:de:6d:91:5c:7a:34:e2:85:
         8b:06:c6:4b:50:c3:2a:d3:20:75:21:3d:71:07:1d:a7:64:6b:
         2c:b0:25:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----