Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8b6228bf-249b-3bcc-9836-88eb6f253378.roa
File:                     8b6228bf-249b-3bcc-9836-88eb6f253378.roa (raw, json)
Hash identifier:          pwxXMpmV8nxfM9jBO+8mSvDqR+720lCzwEOkSAFuBPA=
Subject key identifier:   37:6D:5E:14:7D:8F:4D:0B:E2:DD:D7:C9:CA:62:76:80:48:A1:AA:FB
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A20AB5FF75ED324EE585500
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8b6228bf-249b-3bcc-9836-88eb6f253378.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.216.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:20:ab:5f:f7:5e:d3:24:ee:58:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=581231b5-e31b-497a-a146-33786435fda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:43:1d:de:b7:e9:ce:14:91:c4:6b:de:02:
                    63:7c:e8:ac:ae:1a:ba:92:6e:92:04:48:2c:72:8d:
                    98:4d:99:f3:2a:7e:13:a3:e3:40:d8:00:a7:99:78:
                    16:85:80:b7:12:a5:da:72:8a:d9:0c:56:8d:ae:52:
                    85:2a:db:88:0c:7e:2a:db:20:9a:ba:cf:36:5e:68:
                    2c:c2:9d:bb:5e:27:5c:12:7e:46:50:c2:22:73:da:
                    df:fd:7a:90:33:b4:70:0a:a8:55:af:ff:51:b0:77:
                    a7:0d:3f:00:8c:ef:a5:6b:de:62:0a:fd:2a:ee:f5:
                    d1:1b:22:3b:da:4f:00:95:ab:92:b1:28:7b:8f:98:
                    61:4c:0d:c4:5f:59:87:37:9b:a9:82:15:4b:36:9b:
                    f5:f9:ac:6f:34:7f:1f:9c:47:f5:de:55:87:d7:5a:
                    cf:5a:c3:5b:fe:a1:de:1d:cc:40:16:b4:8b:74:cc:
                    30:e5:64:32:a9:31:24:ef:c6:60:06:fb:9c:66:f2:
                    a0:3b:c7:34:37:d9:30:40:31:98:b8:e6:6c:de:40:
                    95:f3:7d:e5:42:6e:8a:e0:5a:b2:a6:cc:07:c7:03:
                    88:b7:63:89:e3:67:d8:75:14:10:9f:6f:d3:ac:87:
                    f9:95:bd:80:91:71:6b:49:c8:93:3b:77:9b:ab:b2:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6D:5E:14:7D:8F:4D:0B:E2:DD:D7:C9:CA:62:76:80:48:A1:AA:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8b6228bf-249b-3bcc-9836-88eb6f253378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:bd:7b:a1:79:46:d8:ae:92:5f:33:c1:3b:fb:51:41:8e:e3:
         95:73:0d:8c:51:ca:02:8d:77:0f:d6:70:07:16:b5:ec:ec:93:
         b7:63:82:8a:ba:d5:88:1c:e4:3d:e3:6a:67:f4:38:a2:19:c1:
         db:ec:7f:7c:eb:82:74:55:4a:99:37:7b:c6:87:dc:c3:19:19:
         0e:08:91:f2:75:c1:ac:0e:ba:b9:95:c7:5c:d7:c4:14:7d:79:
         46:a7:33:07:af:a5:6f:3c:62:3a:c1:c6:6f:93:fc:26:3d:da:
         b2:ed:86:43:46:bf:14:e5:8c:3e:1a:8a:ed:a1:58:61:18:f7:
         15:89:4c:e4:cb:e3:0c:a3:9b:56:dc:1c:55:59:42:69:08:56:
         f3:24:46:ca:36:e5:2d:b6:d4:2c:8c:6a:29:2f:f7:8e:b6:5e:
         83:3c:51:9b:a1:0f:2d:d4:08:c1:19:9f:49:a2:32:e9:ae:2b:
         07:07:14:4b:92:04:b4:13:df:d0:5c:de:a0:2b:07:11:11:a4:
         d2:35:1f:a1:9e:09:08:98:06:15:c8:f0:6a:8e:07:f7:ff:69:
         d4:ed:6f:5c:1b:4f:8d:c1:27:f7:f7:e8:34:bf:2e:1b:05:41:
         78:d9:8c:f8:16:d7:7c:27:46:fb:4b:30:73:84:a9:3f:1c:3e:
         bc:cf:f2:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKIKtf917TJO5YVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTgxMjMxYjUtZTMxYi00OTdhLWExNDYtMzM3ODY0MzVmZGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhRDHd636c4UkcRr3gJjfOisrhq6km6SBEgs
co2YTZnzKn4To+NA2ACnmXgWhYC3EqXacorZDFaNrlKFKtuIDH4q2yCaus82Xmgs
wp27XidcEn5GUMIic9rf/XqQM7RwCqhVr/9RsHenDT8AjO+la95iCv0q7vXRGyI7
2k8AlauSsSh7j5hhTA3EX1mHN5upghVLNpv1+axvNH8fnEf13lWH11rPWsNb/qHe
HcxAFrSLdMww5WQyqTEk78ZgBvucZvKgO8c0N9kwQDGYuOZs3kCV833lQm6K4Fqy
pswHxwOIt2OJ42fYdRQQn2/TrIf5lb2AkXFrSciTO3ebq7Jn3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdtXhR9j00L4t3XycpidoBIoar7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvOGI2MjI4YmYtMjQ5Yi0z
YmNjLTk4MzYtODhlYjZmMjUzMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD69e6F5Rtiukl8zwTv7UUGO45VzDYxRygKNdw/WcAcWtezsk7djgoq6
1Ygc5D3jamf0OKIZwdvsf3zrgnRVSpk3e8aH3MMZGQ4IkfJ1wawOurmVx1zXxBR9
eUanMwevpW88YjrBxm+T/CY92rLthkNGvxTljD4aiu2hWGEY9xWJTOTL4wyjm1bc
HFVZQmkIVvMkRso25S221CyMaikv9462XoM8UZuhDy3UCMEZn0miMumuKwcHFEuS
BLQT39Bc3qArBxERpNI1H6GeCQiYBhXI8GqOB/f/adTtb1wbT43BJ/f36DS/LhsF
QXjZjPgW13wnRvtLMHOEqT8cPrzP8hQ=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:55 2024 by rpki-client on console-fra.rpki-client.org