Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d44a5ad-b1e0-3edf-b61f-f7c5c35e3ff2.roa
File:                     8d44a5ad-b1e0-3edf-b61f-f7c5c35e3ff2.roa (raw, json)
Hash identifier:          HmHqkXB+MkFmy7sEnWZxJScthYax4bg5m6Fm/SnEAKo=
Subject key identifier:   E2:BD:D2:7F:89:81:10:18:FE:6D:1D:79:53:3D:C2:30:6B:A1:D1:0E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A2047039DC281602BDBCE60
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d44a5ad-b1e0-3edf-b61f-f7c5c35e3ff2.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.118.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:20:47:03:9d:c2:81:60:2b:db:ce:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=57286e98-6a7e-41f4-b1ca-6ca21a3e8a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:66:56:94:04:03:2c:f5:ca:67:96:71:ff:
                    eb:bb:dd:49:c0:78:5f:70:f1:b1:fa:db:ef:6f:96:
                    15:f6:ee:00:37:3f:fb:3f:eb:6f:0f:73:b0:db:a4:
                    b4:ce:78:23:f7:34:1a:6d:64:f9:2f:3f:14:eb:3f:
                    28:d9:29:28:ee:5d:30:06:9d:ee:7f:8c:af:46:8c:
                    9d:c2:86:a5:8d:8d:ea:1a:8c:85:ae:e2:9d:89:38:
                    90:ec:20:dc:76:e4:fd:1c:35:c9:d6:73:42:0d:85:
                    64:74:b2:c3:1c:99:3b:db:00:3d:31:69:c5:bb:c2:
                    e0:12:3a:84:d8:07:5f:c4:8d:35:67:c9:77:48:b7:
                    02:9b:da:02:f7:cb:5e:49:da:1d:a9:2a:f1:ec:2f:
                    c3:28:cd:2b:d5:78:db:63:b5:5d:14:3c:a7:d8:91:
                    e7:01:b2:b3:f5:1a:b4:22:90:12:ad:ac:0b:5f:5a:
                    5d:6e:a8:bf:9b:7b:9f:a8:5e:e6:c5:b1:c8:8b:52:
                    1e:bc:61:1d:fb:46:30:50:52:63:8b:71:51:d7:13:
                    35:4f:81:45:5c:f0:2a:83:b7:aa:2d:e9:e9:fe:a8:
                    39:43:b2:d9:a4:a5:9d:31:2f:b2:1e:37:2e:e4:6c:
                    75:9c:e6:d1:da:4b:ab:a5:ee:f7:0f:7b:4d:0c:3c:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BD:D2:7F:89:81:10:18:FE:6D:1D:79:53:3D:C2:30:6B:A1:D1:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d44a5ad-b1e0-3edf-b61f-f7c5c35e3ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:84:d0:81:aa:7c:86:a1:ae:8f:94:34:09:40:69:4c:64:81:
         8e:39:b9:c4:97:c7:2f:f7:94:c8:47:14:41:4c:33:87:79:25:
         0e:35:14:ae:2b:be:52:5e:c7:47:05:8f:f2:bc:16:ac:96:94:
         6a:24:fc:50:33:2c:ed:65:1a:5d:d0:8e:aa:ab:c3:72:bf:91:
         13:5a:e1:a8:ec:5c:22:0c:46:3a:8f:cb:e7:b7:b2:4b:ec:4e:
         c9:27:d2:db:75:57:2c:d7:f0:3d:15:77:97:8a:48:42:e2:8c:
         97:d3:33:e7:9f:a0:fd:7f:84:9d:1a:c6:e3:da:07:d1:da:49:
         81:fb:3b:67:d4:a5:a0:8e:d4:79:da:3b:e0:52:84:78:cd:5e:
         5b:14:d6:8e:c8:76:5d:4e:a0:dc:b3:75:91:2b:ff:2c:86:24:
         eb:a2:1d:eb:64:ad:db:2a:a4:42:13:fb:0e:a7:0a:7c:cd:57:
         5d:28:cd:c8:a4:7b:10:27:46:91:ce:37:b3:7c:2e:52:c7:5f:
         33:eb:bc:5c:cb:8b:af:fc:a3:aa:f0:d8:8b:96:20:18:d2:37:
         f3:cd:2a:b2:e8:7b:ca:39:e8:4e:02:5b:8a:e1:17:12:e3:f4:
         34:82:92:44:93:2f:dd:4e:fe:e8:b5:08:eb:0d:31:78:d7:32:
         85:07:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----