Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68111b84-a81c-3b06-a984-44b4636f43f1.roa
File:                     68111b84-a81c-3b06-a984-44b4636f43f1.roa (raw, json)
Hash identifier:          hMB0yIU39gfRGZrRMDK+T9Yk94ouz9PdlgTUcW30QCo=
Subject key identifier:   18:60:61:C5:A4:FF:F1:10:85:B7:83:8C:A4:92:96:6D:9E:55:C4:61
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A241DD8767776E457A81240
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68111b84-a81c-3b06-a984-44b4636f43f1.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.200.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:24:1d:d8:76:77:76:e4:57:a8:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=fe00c1f9-5688-4b8b-90ef-aa44253183ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:52:f9:4e:2a:90:50:ea:73:69:e5:49:cc:
                    94:64:47:2e:1e:27:36:98:64:65:ac:40:ea:e3:c7:
                    43:ad:07:66:2f:ca:64:be:b5:de:fb:04:d9:5b:d5:
                    ae:01:31:a5:b1:7d:f7:6d:6b:37:97:4b:d1:4d:d7:
                    bc:f1:94:ee:13:5c:e1:71:3a:b3:33:df:c5:8c:3a:
                    ac:a8:1e:2d:9b:e3:b7:da:c6:4a:00:46:a9:68:80:
                    ca:4b:4b:9e:e3:48:33:7a:e6:72:01:0c:3f:a4:ab:
                    dc:0b:01:cc:d9:06:ab:fd:f9:ae:44:69:cd:9b:3e:
                    8b:67:90:9e:46:08:44:84:7c:e7:57:c9:e5:e5:2e:
                    1b:fc:93:55:31:4d:53:32:66:f5:a5:74:97:3f:0a:
                    da:99:4d:a9:90:cc:e0:21:fb:cc:a7:2f:45:35:06:
                    67:1a:2a:ba:22:e6:e1:93:47:ee:5b:05:8a:c7:12:
                    e4:26:34:2e:55:6f:fa:9b:7a:e8:a3:26:08:42:da:
                    56:72:c5:1d:9f:6a:3c:a2:c0:4e:93:e9:b5:2a:43:
                    cb:b4:e6:44:ef:0e:e3:e7:e5:1d:a5:26:2a:60:b8:
                    b6:74:67:8d:52:24:28:e1:e8:d6:86:4e:8b:ae:9f:
                    bc:5c:9e:11:4e:08:d1:b0:8a:27:c5:74:a9:26:c3:
                    d7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:60:61:C5:A4:FF:F1:10:85:B7:83:8C:A4:92:96:6D:9E:55:C4:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68111b84-a81c-3b06-a984-44b4636f43f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:38:88:89:fd:8f:86:fe:70:ee:f1:89:25:bf:1c:94:c9:ec:
         2a:45:3d:aa:fe:e6:92:63:7e:d3:9f:02:19:aa:11:a9:11:d9:
         5c:68:64:42:60:9f:3c:90:1a:9d:f2:5b:fa:de:55:0b:94:66:
         ac:5b:7b:b7:a3:23:1f:6a:e0:2a:41:fb:fa:52:15:23:93:44:
         95:b8:38:b6:dc:0a:a7:40:d2:77:a6:cf:69:9d:b3:46:5a:61:
         50:76:7d:ff:22:79:d4:d0:4f:6f:57:5f:e5:a8:45:92:d5:8b:
         a7:38:9a:db:a3:07:eb:ef:ed:1f:81:8c:6c:13:e9:6a:c7:18:
         24:62:0d:af:e9:e5:83:35:02:40:fd:f4:6b:06:fa:27:6f:25:
         02:13:39:a3:f7:75:a8:0b:28:37:fb:e0:86:30:fb:c0:0c:5d:
         c7:9b:cd:f0:d5:74:91:73:ae:2b:d6:bb:c6:59:7c:ed:3d:7e:
         db:d0:62:71:7b:04:47:92:2f:40:b0:61:9a:4d:43:db:fc:5f:
         f8:39:7a:75:41:e2:a6:cd:b1:c5:c9:55:b7:dc:3b:f7:11:e1:
         19:2e:23:20:86:d6:90:78:f2:19:11:a0:04:23:0d:e1:83:65:
         28:d4:6c:d5:69:99:83:42:e8:98:a4:46:98:3c:27:c4:5b:78:
         b4:0f:9f:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJB3Ydnd25FeoEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmUwMGMxZjktNTY4OC00YjhiLTkwZWYtYWE0NDI1MzE4M2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvVS+U4qkFDqc2nlScyUZEcuHic2mGRlrEDq
48dDrQdmL8pkvrXe+wTZW9WuATGlsX33bWs3l0vRTde88ZTuE1zhcTqzM9/FjDqs
qB4tm+O32sZKAEapaIDKS0ue40gzeuZyAQw/pKvcCwHM2Qar/fmuRGnNmz6LZ5Ce
RghEhHznV8nl5S4b/JNVMU1TMmb1pXSXPwramU2pkMzgIfvMpy9FNQZnGiq6Iubh
k0fuWwWKxxLkJjQuVW/6m3rooyYIQtpWcsUdn2o8osBOk+m1KkPLtOZE7w7j5+Ud
pSYqYLi2dGeNUiQo4ejWhk6Lrp+8XJ4RTgjRsIonxXSpJsPXGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhgYcWk//EQhbeDjKSSlm2eVcRhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNjgxMTFiODQtYTgxYy0z
YjA2LWE5ODQtNDRiNDYzNmY0M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHI4iIn9j4b+cO7xiSW/HJTJ7CpFPar+5pJjftOfAhmqEakR2VxoZEJg
nzyQGp3yW/reVQuUZqxbe7ejIx9q4CpB+/pSFSOTRJW4OLbcCqdA0nemz2mds0Za
YVB2ff8iedTQT29XX+WoRZLVi6c4mtujB+vv7R+BjGwT6WrHGCRiDa/p5YM1AkD9
9GsG+idvJQITOaP3dagLKDf74IYw+8AMXcebzfDVdJFzrivWu8ZZfO09ftvQYnF7
BEeSL0CwYZpNQ9v8X/g5enVB4qbNscXJVbfcO/cR4RkuIyCG1pB48hkRoAQjDeGD
ZSjUbNVpmYNC6JikRpg8J8RbeLQPn+Q=
-----END CERTIFICATE-----