Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/57cb3815-f742-35f5-a277-909d8163f7f7.roa
File:                     57cb3815-f742-35f5-a277-909d8163f7f7.roa (raw, json)
Hash identifier:          reCkjS5L4MrKQxKydM5nBpJ14uWlPHpSJZsz8DzWVW4=
Subject key identifier:   59:04:D4:C0:D7:18:EE:D2:EA:8C:7F:FE:40:23:57:51:99:FC:30:27
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A18CB4D99D916C28570AB80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/57cb3815-f742-35f5-a277-909d8163f7f7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.98.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:18:cb:4d:99:d9:16:c2:85:70:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c7d956a1-c7f1-4796-b758-14dbe231a6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:30:d5:e9:4a:58:2b:a7:d9:06:46:44:fd:
                    95:1a:57:0e:9c:12:e0:04:ff:0d:f1:13:b0:d0:09:
                    16:71:98:c4:05:33:db:f1:80:24:93:fe:74:18:b6:
                    87:73:22:1f:e8:1c:a0:c0:6e:a1:ec:e5:fa:25:c9:
                    50:26:2e:6a:b0:14:84:b3:9d:5d:83:be:ea:a5:2e:
                    12:a2:a7:d2:63:11:5c:33:3e:81:dd:d6:6c:4f:75:
                    fc:bc:d3:fc:95:ed:ee:9c:c8:4b:76:5c:92:9a:c8:
                    a2:ab:17:18:d4:cd:de:1c:cf:32:8a:43:74:e0:b6:
                    80:1b:80:72:d0:49:44:44:0c:61:09:60:c8:10:28:
                    a4:b2:0b:c0:2b:15:10:e1:1a:46:d0:1d:69:aa:41:
                    42:3d:22:6c:8e:f0:06:5c:56:59:9c:34:03:95:6f:
                    2b:0a:01:fa:46:53:53:21:07:22:7d:53:70:63:e0:
                    97:4c:9f:81:ac:3b:19:b5:1c:51:ed:01:de:f4:ec:
                    6f:b3:29:df:d3:4f:56:da:44:2c:14:c3:1d:07:3e:
                    44:a2:7f:61:fb:69:79:a1:b0:ac:cc:48:23:50:77:
                    e0:32:f9:54:e0:b7:68:42:5b:56:66:40:ed:00:6c:
                    bb:e2:46:50:0e:55:3a:3d:a4:8e:b6:df:cf:20:06:
                    e4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:04:D4:C0:D7:18:EE:D2:EA:8C:7F:FE:40:23:57:51:99:FC:30:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/57cb3815-f742-35f5-a277-909d8163f7f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:7c:05:ce:6e:b3:5d:44:0e:a4:7f:a4:23:06:dd:bb:77:a8:
         18:26:4d:d7:c7:a8:ed:55:6c:55:75:8a:2d:0b:8a:b1:4a:21:
         6b:c5:32:b8:21:47:23:6e:f9:5c:80:23:3f:02:99:ef:c1:c8:
         1f:e4:94:5b:94:a4:4f:21:19:3b:e9:48:c0:74:6d:d7:16:b2:
         ce:b6:df:41:38:05:2c:13:5d:e8:96:8f:1e:f9:83:3a:61:6f:
         87:f7:94:6c:0e:11:23:25:32:89:82:3d:b9:ff:10:2e:75:c3:
         3f:86:f6:d4:68:63:ce:93:e4:d0:d8:80:74:52:bb:26:8c:4a:
         5b:b3:31:a3:14:d2:e9:52:d3:90:2c:1c:fc:b1:1f:0f:8d:ff:
         a1:f7:2a:b9:7c:f0:0b:7d:ab:69:14:7c:80:ec:4c:19:53:56:
         db:bf:01:f2:0c:6f:96:a4:4b:d6:d9:3b:42:8c:a5:50:cc:0b:
         0c:3c:f1:6d:a2:53:b0:4f:5f:08:94:95:37:29:c9:88:22:d9:
         11:be:72:fc:36:fe:fb:0a:3e:c5:41:56:ff:52:b1:04:60:a7:
         72:2a:5b:8e:82:9e:23:79:ac:b0:f0:25:97:d6:bb:6d:7b:8f:
         8b:bf:8e:5b:d6:3a:11:8d:d2:e7:3f:1d:01:39:6d:7a:ac:c5:
         be:ae:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:55 2024 by rpki-client on console-fra.rpki-client.org