Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8c999700-ad24-3867-b85b-eba168827aa2.roa
File:                     8c999700-ad24-3867-b85b-eba168827aa2.roa (raw, json)
Hash identifier:          3QVpFPDd2yjNF9cR2rZCf6CgGK8QWQDcUdY6UidcSl0=
Subject key identifier:   F6:2E:42:91:5A:84:FD:92:C7:68:B4:46:15:28:B9:FD:31:94:4A:4D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309EB6D345C889A361B505380
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8c999700-ad24-3867-b85b-eba168827aa2.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.214.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:eb:6d:34:5c:88:9a:36:1b:50:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3212035e-0724-444a-83c8-7753811e0d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:3a:77:e7:69:f3:2f:a0:d4:10:ae:39:65:
                    cf:1b:3f:f5:9f:01:cb:2f:46:54:42:16:f8:31:19:
                    f6:cd:c9:8b:76:93:fe:e7:15:c9:2e:c4:9a:a4:d6:
                    d8:4d:4f:42:98:d6:ae:55:c8:1b:68:05:e1:4a:37:
                    c8:07:15:3c:71:0c:78:06:f0:44:04:8e:27:5b:2e:
                    e5:0e:fd:4d:4d:00:05:31:7c:77:e6:db:bf:04:8d:
                    5e:94:1f:10:33:15:a6:18:95:f2:ff:f0:5f:2e:6d:
                    16:da:cb:49:7c:79:87:97:73:32:3c:14:2c:22:1b:
                    d4:12:d3:97:dc:81:32:1c:3c:55:c9:df:66:5e:3f:
                    19:ba:67:6a:f9:34:ec:04:c0:bb:83:b1:fe:fa:34:
                    85:9b:5b:ec:15:50:32:b1:7d:47:d1:10:67:43:2a:
                    ce:b3:dc:4e:6d:ee:ae:57:11:60:8e:40:21:05:36:
                    13:9a:c7:57:c4:bf:2b:40:9d:24:b5:1d:3c:a8:7f:
                    67:b3:aa:e8:f2:c2:54:8d:fc:80:a7:14:c8:e6:94:
                    ce:7f:79:d1:c0:5d:4e:4f:67:81:93:83:8a:9e:c2:
                    42:5b:94:31:d0:27:0e:4f:84:ed:04:04:51:86:dd:
                    e2:12:3b:f5:e9:24:f0:ab:f8:56:e9:75:32:23:d6:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2E:42:91:5A:84:FD:92:C7:68:B4:46:15:28:B9:FD:31:94:4A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8c999700-ad24-3867-b85b-eba168827aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:64:97:4a:d5:27:72:69:a6:bd:6f:ac:bb:e3:2e:97:a6:fe:
         d9:8b:87:87:c5:fb:a6:80:a8:9a:c5:84:72:42:77:1f:7c:05:
         90:87:09:97:58:bc:a8:df:2f:ac:36:c8:59:73:f0:8d:0e:f5:
         fc:0b:15:a6:cf:a3:94:10:ed:29:2a:e9:b5:44:bd:6b:f6:d0:
         8a:a5:20:90:0b:ad:10:f8:5e:87:66:bd:7c:f4:ed:08:d5:0d:
         97:63:b6:73:58:e6:4d:67:96:7f:48:41:e0:f0:49:06:ac:f7:
         53:19:9f:da:d9:da:2b:c2:bd:b2:ca:ac:ca:68:c1:58:99:8e:
         46:01:1a:7f:03:25:70:2c:a3:4d:a8:7b:8e:c4:8c:ee:86:d8:
         48:41:1d:94:53:b0:95:5f:15:a3:40:ce:d2:48:01:5b:18:ad:
         23:5c:db:fa:33:d7:7c:48:be:1e:c4:30:80:fc:bc:9f:92:e9:
         5c:9e:5f:ab:39:5f:ce:63:f1:bc:1f:8d:6a:cc:60:07:ad:29:
         1c:9d:c4:bb:9e:8a:bf:e6:48:f1:06:be:be:d6:96:26:2d:13:
         f4:8a:be:5c:44:5d:6f:4c:6c:10:07:ef:97:9d:bc:bd:a6:f9:
         ed:11:3f:3c:26:46:97:33:37:76:47:4a:bd:56:d8:d9:2f:84:
         99:74:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----