Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3c2847c8-01fa-3424-9d10-a504dfd6bb65.roa
File:                     3c2847c8-01fa-3424-9d10-a504dfd6bb65.roa (raw, json)
Hash identifier:          IGBD4TZV3duy7errXMc6zkRKsewUIhn1dESmDkTPPyk=
Subject key identifier:   E9:66:87:FA:56:45:EC:75:C4:47:88:89:A3:C1:0C:F7:1B:40:80:16
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A0D6136850DED6C16262580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3c2847c8-01fa-3424-9d10-a504dfd6bb65.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.104.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0d:61:36:85:0d:ed:6c:16:26:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6c360b9d-1024-4b08-afd6-e8ef3599e8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:49:70:d2:b0:75:43:44:c2:d6:e5:dc:0d:
                    b2:e0:cf:e2:bf:7a:6f:5d:bc:8b:92:17:b2:d2:e3:
                    42:60:b9:1e:21:8f:e7:67:92:5e:5a:33:6d:21:b8:
                    27:70:de:69:5a:1e:f9:59:07:78:f0:17:db:87:ca:
                    fc:a2:32:dd:e8:37:c3:fe:82:3c:61:90:3c:8b:43:
                    1e:08:dc:78:7c:2b:08:e8:75:25:4c:0f:34:4e:8e:
                    71:ef:c3:56:84:1d:39:a5:98:d3:6f:53:93:d3:a2:
                    68:47:39:06:af:ca:25:77:95:8a:6c:fb:17:4a:b2:
                    d2:45:2a:4c:5b:82:6b:19:c7:54:5f:1f:1a:51:86:
                    a1:60:2d:4e:27:a7:bc:93:1c:ea:f7:34:40:6b:d2:
                    d6:3f:25:25:94:1a:8e:43:87:bb:65:29:36:26:53:
                    03:75:9a:ca:8b:f9:02:23:50:c2:29:30:12:0c:31:
                    a3:77:ab:a4:d3:48:64:e6:ff:ec:96:4a:bf:ae:c5:
                    50:ca:13:80:b4:5b:41:b5:0c:ba:51:82:79:84:b5:
                    c9:ce:23:44:c6:e3:ca:1e:02:71:21:03:6a:fa:2e:
                    97:a1:47:52:06:bf:60:1d:5d:d8:b4:8c:f1:79:b7:
                    0f:66:18:3a:b0:8d:55:a7:69:fa:de:86:8c:b3:ea:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:66:87:FA:56:45:EC:75:C4:47:88:89:A3:C1:0C:F7:1B:40:80:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3c2847c8-01fa-3424-9d10-a504dfd6bb65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f8:dd:c4:c8:29:ae:63:42:8d:15:b4:c2:f9:62:73:23:e6:
         c4:72:52:7b:e9:03:9b:14:c1:c4:da:10:7a:e6:37:19:42:fe:
         1a:75:1c:a7:d6:06:77:f9:73:f3:d4:b0:48:ec:69:fe:50:af:
         d0:de:cc:c7:12:7a:08:20:39:ea:cd:4a:9c:57:94:49:d7:de:
         0b:97:66:13:92:11:d2:fa:83:c5:fc:ea:1f:a4:29:28:48:a9:
         3b:43:e5:61:c5:84:09:40:16:a3:c3:ed:9b:0f:c8:45:dd:6b:
         07:cf:8b:a4:e2:76:a5:47:66:24:cc:bc:39:40:7e:0b:98:ec:
         9d:fe:ae:9f:89:40:fd:87:12:3f:cb:d0:f2:49:2f:db:17:66:
         79:46:7e:37:10:b9:e7:c5:75:29:ae:df:a7:c2:73:3f:26:f5:
         3b:e2:4c:83:33:19:b7:6f:95:e4:6e:85:a2:78:8d:03:92:85:
         1e:c5:ee:62:31:73:85:32:da:dc:89:de:f4:0f:1d:b6:c3:8f:
         d2:b6:e5:71:6b:e1:23:9e:4d:9a:23:ff:7e:79:43:51:85:e2:
         99:95:0b:f9:26:4a:2f:8e:ca:38:b3:d7:b3:ee:83:1f:42:46:
         2f:a7:b2:67:be:11:f6:ab:39:a8:a3:13:cb:e7:b5:83:d8:98:
         a5:cc:1b:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKDWE2hQ3tbBYmJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NmMzNjBiOWQtMTAyNC00YjA4LWFmZDYtZThlZjM1OTllOGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP1JcNKwdUNEwtbl3A2y4M/iv3pvXbyLkhey
0uNCYLkeIY/nZ5JeWjNtIbgncN5pWh75WQd48Bfbh8r8ojLd6DfD/oI8YZA8i0Me
CNx4fCsI6HUlTA80To5x78NWhB05pZjTb1OT06JoRzkGr8old5WKbPsXSrLSRSpM
W4JrGcdUXx8aUYahYC1OJ6e8kxzq9zRAa9LWPyUllBqOQ4e7ZSk2JlMDdZrKi/kC
I1DCKTASDDGjd6uk00hk5v/slkq/rsVQyhOAtFtBtQy6UYJ5hLXJziNExuPKHgJx
IQNq+i6XoUdSBr9gHV3YtIzxebcPZhg6sI1Vp2n63oaMs+owwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlmh/pWRex1xEeIiaPBDPcbQIAWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvM2MyODQ3YzgtMDFmYS0z
NDI0LTlkMTAtYTUwNGRmZDZiYjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACT43cTIKa5jQo0VtML5YnMj5sRyUnvpA5sUwcTaEHrmNxlC/hp1HKfW
Bnf5c/PUsEjsaf5Qr9DezMcSegggOerNSpxXlEnX3guXZhOSEdL6g8X86h+kKShI
qTtD5WHFhAlAFqPD7ZsPyEXdawfPi6TidqVHZiTMvDlAfguY7J3+rp+JQP2HEj/L
0PJJL9sXZnlGfjcQuefFdSmu36fCcz8m9TviTIMzGbdvleRuhaJ4jQOShR7F7mIx
c4Uy2tyJ3vQPHbbDj9K25XFr4SOeTZoj/355Q1GF4pmVC/kmSi+Oyjiz17Pugx9C
Ri+nsme+EfarOaijE8vntYPYmKXMG9s=
-----END CERTIFICATE-----