Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/578084af-efc7-300c-84ba-60e3e34d4fa9.roa
File:                     578084af-efc7-300c-84ba-60e3e34d4fa9.roa (raw, json)
Hash identifier:          xsbpoJymo8UAlOym1MmJiZlxx7UG4VYl3fJ1BnhtKQ8=
Subject key identifier:   AE:65:BE:53:E0:BC:52:D9:49:A8:67:CE:A9:CE:37:7B:3C:E2:70:30
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309F8DF92E8A7F5D0BB4F7900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/578084af-efc7-300c-84ba-60e3e34d4fa9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.88.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f8:df:92:e8:a7:f5:d0:bb:4f:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c5922890-864a-4a42-bce5-2d8de72bffaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:38:76:94:88:40:2a:9f:8e:bc:be:92:d1:
                    38:39:a9:02:a6:98:35:44:08:89:e6:95:c8:4d:85:
                    6f:ec:2a:7b:d6:18:b2:cf:c0:ef:8f:9e:14:a6:8b:
                    e4:1a:ee:87:46:f2:cd:c0:cc:d3:3c:b3:aa:0e:ed:
                    98:04:a0:ba:c6:14:f0:1d:d2:22:0b:a1:4f:95:1b:
                    fa:8d:1c:69:98:9f:e1:bd:9b:f5:a7:e4:4f:31:e1:
                    b6:8d:10:7a:aa:ba:74:78:6d:ce:40:76:e0:a1:cb:
                    76:44:fc:72:f3:44:21:e6:96:b0:a4:3f:12:bd:44:
                    89:84:e7:d0:72:cb:eb:31:e5:7e:4b:4f:cf:ae:b1:
                    e4:f6:d9:0f:b2:0e:58:67:31:88:e2:84:60:2c:44:
                    aa:78:7a:cb:e9:f2:95:0f:e3:3f:d5:d9:94:ca:fd:
                    79:c0:0f:6e:0f:73:87:1b:49:4e:c3:6c:0c:34:10:
                    88:64:14:ff:16:31:46:f5:7a:45:04:5c:16:4c:58:
                    de:55:81:82:d4:52:c7:f2:fd:4d:d0:15:dc:ae:08:
                    10:d5:fc:28:65:a6:ee:fa:79:32:02:2b:ef:28:6c:
                    86:7d:5b:a3:ba:98:d5:a5:24:8c:4d:2a:9d:e0:dc:
                    f3:eb:f6:68:0c:f9:3c:5f:7c:f9:b8:7f:c9:8b:bf:
                    d3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:65:BE:53:E0:BC:52:D9:49:A8:67:CE:A9:CE:37:7B:3C:E2:70:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/578084af-efc7-300c-84ba-60e3e34d4fa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:26:0e:1b:87:94:56:08:b7:7a:ce:19:ac:30:f3:72:e6:
         3a:14:ec:e1:13:2a:3e:cf:f5:b2:96:3a:cf:99:1c:97:f2:a9:
         f0:b0:6b:7f:18:8b:cb:02:13:67:a1:a5:3d:f3:34:71:d1:ee:
         59:9e:cc:1b:44:8f:d1:33:03:58:8f:c3:1c:12:ac:4b:04:14:
         8a:83:dc:ab:8a:b7:51:76:ae:1d:82:9b:f0:43:37:7b:6c:f0:
         63:31:f0:3c:8b:56:4f:c5:fe:39:85:40:5f:13:12:00:6b:ae:
         4b:64:18:d6:2c:66:df:14:34:39:16:ae:6c:fb:8c:47:93:1f:
         70:b1:c8:78:41:9e:f1:34:19:e1:e6:f2:eb:37:9b:81:4a:bb:
         a7:54:37:86:f4:17:88:9e:24:84:ba:0e:55:23:46:5a:a4:9c:
         45:0c:60:d7:e4:6f:1e:de:41:14:41:ec:46:3f:d4:c6:84:26:
         1a:ea:0e:34:18:29:35:df:55:c9:52:21:54:23:de:ba:13:05:
         9c:97:d6:43:a8:b8:88:67:ee:e5:1e:03:e8:9d:72:50:19:09:
         ff:e7:b9:3a:5e:09:88:dd:15:68:38:0e:3b:9c:1c:71:ef:61:
         06:0f:8b:b5:1c:49:c3:7d:94:9d:4a:86:dc:c7:13:e8:f6:7b:
         5c:da:ad:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----