Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/55cf2839-8699-3a42-aeb8-61c017481e97.roa
File:                     55cf2839-8699-3a42-aeb8-61c017481e97.roa (raw, json)
Hash identifier:          AGqBrOccp/ZP90K4OUIpIVis3JJ2ZxAFyk3AOtNblUQ=
Subject key identifier:   1D:71:47:9F:FA:08:9D:A1:0C:58:9B:44:8C:63:BE:54:2F:1C:26:B9
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A0FAC9F3258D669DE236F40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/55cf2839-8699-3a42-aeb8-61c017481e97.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0f:ac:9f:32:58:d6:69:de:23:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b1aac639-f3fa-4082-9a2b-bee597b220a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:d6:2a:1d:8a:a6:e4:61:80:21:47:42:9c:
                    71:87:8b:32:16:7d:a4:ef:cc:e8:5b:68:82:6b:91:
                    7f:d5:55:8f:38:4b:71:aa:5e:5c:c9:46:cb:c2:e9:
                    63:01:d2:27:fe:f1:af:ce:d5:56:08:96:71:3e:08:
                    8d:a9:31:78:d3:a5:6e:53:d0:a8:40:c6:a7:32:82:
                    90:30:15:c8:33:2b:de:40:e1:51:e4:07:ad:85:32:
                    71:af:a3:2c:be:35:de:a1:6b:06:14:c2:05:f4:71:
                    38:62:a8:92:25:ee:21:bd:86:3f:09:28:c2:09:e8:
                    45:bc:5d:98:14:4e:fb:48:06:29:5a:19:e9:4d:2d:
                    81:5b:f6:1d:d9:c7:e7:69:16:41:42:36:bd:17:36:
                    93:2f:d3:71:d6:81:49:8f:a9:25:75:92:16:86:7f:
                    7b:05:e5:7a:84:59:18:86:69:66:23:1b:6a:60:5c:
                    80:7e:fe:21:ed:a9:ea:73:58:d2:ec:1b:c4:15:68:
                    d2:ab:d0:2e:7a:43:f5:ff:1c:e7:0b:01:33:f2:f4:
                    78:96:de:91:8e:55:96:07:0b:40:dc:8e:83:f1:21:
                    c6:af:40:bd:e1:7e:83:ab:3b:98:49:f0:d8:13:ea:
                    1a:07:f9:f9:8d:ea:c8:39:d9:82:99:d6:8a:7b:b8:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:71:47:9F:FA:08:9D:A1:0C:58:9B:44:8C:63:BE:54:2F:1C:26:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/55cf2839-8699-3a42-aeb8-61c017481e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ab:1e:a1:70:a8:f2:ca:5e:b4:ba:bd:3f:d0:bc:b4:bb:b9:
         07:fc:45:b3:7b:3e:0a:f2:40:5b:c2:c9:a6:03:09:8c:19:8f:
         4d:29:d7:76:4d:17:24:95:3c:29:55:1a:43:20:5e:0c:19:76:
         1e:c8:f5:72:2e:b8:6a:95:49:8b:01:e2:c2:2f:f6:57:1a:f2:
         af:b4:c5:72:dc:fd:58:64:84:46:ac:9b:61:64:24:ee:2e:0a:
         17:c9:fe:d3:13:4a:71:f0:5d:f9:84:2a:52:6e:74:7d:ea:57:
         25:72:fe:4c:b5:c9:64:59:ea:fa:a3:af:f7:3a:a6:50:30:17:
         43:45:7c:21:16:45:01:28:77:f8:e4:27:e7:82:8e:fa:ef:01:
         b6:da:58:73:79:5e:24:51:85:b3:86:7a:41:ed:95:55:99:38:
         d5:10:a0:5a:3f:31:4e:d6:b6:0b:5a:80:16:31:df:da:83:18:
         48:47:5a:aa:2e:95:3d:3d:82:8a:1e:61:fb:6e:79:4a:a2:82:
         ee:bf:9a:56:d9:4e:0c:10:da:fe:82:5b:12:54:42:91:1a:fe:
         6a:2d:0a:a4:6e:17:af:6a:f1:e0:be:36:b6:5c:b5:82:b1:85:
         c3:9d:9d:40:df:ba:58:55:04:42:38:ad:9f:08:1e:1c:c9:77:
         b7:f3:e1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----