Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8060a2cb-1143-32ed-8b4f-ef8483101aeb.roa
File:                     8060a2cb-1143-32ed-8b4f-ef8483101aeb.roa (raw, json)
Hash identifier:          ehxd/jRgIPMFLIHtdz7IbyavXatUkU7xAlvB9WR9VAs=
Subject key identifier:   C9:8A:AC:03:91:03:8F:0D:BF:6F:9E:3E:8D:90:D2:48:8E:00:72:9B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A27E56C8999125D2543BEC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8060a2cb-1143-32ed-8b4f-ef8483101aeb.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.238.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:27:e5:6c:89:99:12:5d:25:43:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=0e399f45-ceb6-4176-aa81-7542fae0058b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:e0:75:4b:5e:31:33:da:17:8f:91:ca:71:
                    e0:e7:4c:5d:24:60:af:26:a5:f5:3c:54:5d:bc:86:
                    16:90:07:a8:de:e9:c2:43:4f:fc:d5:41:51:0e:c3:
                    ac:7f:7d:db:43:7d:d4:d1:90:1a:37:a2:da:92:3c:
                    ba:4a:3a:dd:0a:63:42:c3:68:67:eb:16:6b:88:90:
                    88:9e:d7:6b:d5:b5:f6:90:a2:25:c9:40:33:35:4e:
                    03:d3:e2:2a:68:cf:83:c0:82:88:84:11:d4:d9:3b:
                    33:b8:50:07:1e:4e:dd:8d:a9:c1:8e:32:79:d1:a4:
                    a0:7a:2f:dc:95:9f:8c:43:b3:e7:6b:2c:fc:ad:90:
                    fa:6a:1d:e5:14:59:27:6a:1a:2b:d2:06:11:a1:a5:
                    fb:90:7f:af:3a:8a:80:0f:d7:53:80:01:5f:98:6e:
                    27:32:00:25:30:e4:e0:ef:2c:19:8d:4e:2c:d1:1e:
                    0a:f4:bf:41:20:64:8f:3d:75:1b:0f:7a:f2:bd:4b:
                    0d:25:cb:25:69:73:04:65:fe:53:6f:22:77:dd:fc:
                    ea:e6:7b:08:79:05:2a:3a:c0:2e:17:3a:5a:26:c2:
                    99:07:62:de:fd:82:3a:32:e0:5e:ad:d3:32:2b:07:
                    51:cd:e4:68:c2:26:c7:2c:db:ed:1d:b3:3e:fc:38:
                    07:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8A:AC:03:91:03:8F:0D:BF:6F:9E:3E:8D:90:D2:48:8E:00:72:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8060a2cb-1143-32ed-8b4f-ef8483101aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:26:d0:ae:ee:75:c4:a4:55:16:69:5c:b7:2d:c4:94:6b:cd:
         d8:ec:51:29:6b:c3:8a:3a:8e:e6:65:ea:5d:4e:b6:68:5e:ac:
         04:76:f6:b6:c1:e1:87:57:16:bb:00:6e:18:45:92:bd:83:81:
         b6:53:b1:78:10:21:6c:48:87:ba:a4:31:2d:b3:89:d4:09:2f:
         40:08:7e:6a:ec:af:39:81:3e:c8:7e:a4:aa:8d:10:28:d2:c7:
         39:d1:fc:77:a3:f2:cf:a2:d3:6a:56:28:e3:a8:01:70:bd:4d:
         d0:85:ed:8e:01:89:38:3b:64:d3:da:c9:31:38:dc:40:a5:23:
         a9:a6:ab:ae:e0:69:3a:5a:5c:e5:26:da:8e:b1:69:ed:18:ba:
         98:9c:51:b7:2f:83:c3:04:7f:86:51:47:20:52:f8:9f:bd:30:
         a1:a0:de:77:69:23:0f:f4:d7:36:24:67:d6:8f:14:5e:ec:b5:
         7c:32:10:b4:f9:3f:f5:11:9a:4e:38:b9:26:d5:b9:26:c8:fa:
         ab:86:0e:be:e8:d3:b1:61:c8:d7:86:dd:80:d7:8d:85:a4:d6:
         c8:d8:90:fb:a1:27:9f:62:f5:ad:c4:64:d7:48:f7:99:3e:ee:
         6e:da:42:fd:42:46:bb:c4:9c:99:ae:81:b8:1d:42:32:52:0e:
         12:98:c5:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJ+VsiZkSXSVDvsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MGUzOTlmNDUtY2ViNi00MTc2LWFhODEtNzU0MmZhZTAwNThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocngdUteMTPaF4+RynHg50xdJGCvJqX1PFRd
vIYWkAeo3unCQ0/81UFRDsOsf33bQ33U0ZAaN6Lakjy6SjrdCmNCw2hn6xZriJCI
ntdr1bX2kKIlyUAzNU4D0+IqaM+DwIKIhBHU2TszuFAHHk7djanBjjJ50aSgei/c
lZ+MQ7Pnayz8rZD6ah3lFFknahor0gYRoaX7kH+vOoqAD9dTgAFfmG4nMgAlMOTg
7ywZjU4s0R4K9L9BIGSPPXUbD3ryvUsNJcslaXMEZf5TbyJ33fzq5nsIeQUqOsAu
FzpaJsKZB2Le/YI6MuBerdMyKwdRzeRowibHLNvtHbM+/DgHmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMmKrAORA48Nv2+ePo2Q0kiOAHKbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvODA2MGEyY2ItMTE0My0z
MmVkLThiNGYtZWY4NDgzMTAxYWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcm0K7udcSkVRZpXLctxJRrzdjsUSlrw4o6juZl6l1OtmherAR29rbB
4YdXFrsAbhhFkr2DgbZTsXgQIWxIh7qkMS2zidQJL0AIfmrsrzmBPsh+pKqNECjS
xznR/Hej8s+i02pWKOOoAXC9TdCF7Y4BiTg7ZNPayTE43EClI6mmq67gaTpaXOUm
2o6xae0YupicUbcvg8MEf4ZRRyBS+J+9MKGg3ndpIw/01zYkZ9aPFF7stXwyELT5
P/URmk44uSbVuSbI+quGDr7o07FhyNeG3YDXjYWk1sjYkPuhJ59i9a3EZNdI95k+
7m7aQv1CRrvEnJmugbgdQjJSDhKYxYw=
-----END CERTIFICATE-----