Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/94690cf6-ab60-3ac6-92fc-2cf8a580425d.roa
File:                     94690cf6-ab60-3ac6-92fc-2cf8a580425d.roa (raw, json)
Hash identifier:          WRZ8QjpbEw5cTAgigy8b0R/GTEnK6YOw5DTnxxafPJI=
Subject key identifier:   8A:05:F5:51:61:9E:A3:48:9B:4B:E4:F5:E3:5D:BF:A5:E4:73:3E:8C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309F62825A6D7502037C57080
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/94690cf6-ab60-3ac6-92fc-2cf8a580425d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.116.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f6:28:25:a6:d7:50:20:37:c5:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=af36f3dd-45f3-49ae-ab35-487892880f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dc:aa:28:98:a9:4d:20:c0:bc:3c:8e:c2:ac:
                    69:de:50:30:13:e0:35:80:03:b9:89:3e:4d:15:0b:
                    6f:e7:45:5e:9a:2a:d7:7c:7b:08:6a:a4:42:da:28:
                    2e:4e:e0:6a:d2:a0:15:1d:c8:1d:2d:ee:96:ee:75:
                    24:61:e3:b5:62:da:ec:df:13:eb:9f:38:e1:ee:af:
                    82:89:40:b4:a6:a6:a2:f1:dd:2c:6a:22:6c:d0:90:
                    ff:1c:ce:4f:a4:dc:1c:5b:f4:9d:d1:56:7c:df:4e:
                    f5:50:e6:2a:39:db:b7:3e:e4:c3:c9:68:13:ea:61:
                    bf:dc:0e:84:10:90:37:f0:46:25:f5:a1:3b:9e:29:
                    e3:3a:40:4b:41:61:ac:07:dd:8b:47:fb:9b:5e:54:
                    91:14:de:bc:02:a2:45:11:87:41:64:eb:3c:75:fb:
                    41:0d:ba:47:fa:13:2b:3a:34:74:7b:c3:b6:d8:74:
                    04:cd:af:5b:14:c3:83:7f:17:04:9a:8b:8d:1f:22:
                    35:3c:e8:98:f3:ac:73:47:4a:18:1d:5b:b0:86:ab:
                    01:2e:28:43:71:7c:6a:53:d3:83:93:28:fa:59:b4:
                    73:4b:9a:ff:02:c4:55:35:7c:4d:cc:4b:f1:3c:3e:
                    1e:86:5f:7f:61:7e:b6:e9:a9:1a:83:66:71:7b:70:
                    90:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:05:F5:51:61:9E:A3:48:9B:4B:E4:F5:E3:5D:BF:A5:E4:73:3E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/94690cf6-ab60-3ac6-92fc-2cf8a580425d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:b8:1a:89:c4:67:be:1e:dc:69:3d:f1:4d:04:f1:0d:05:
         a4:24:58:53:df:b0:54:98:5c:54:3f:3a:fc:9c:7d:ce:dc:c7:
         44:49:e5:1e:31:2d:f4:14:4b:55:8b:1d:7b:71:2a:22:ee:a4:
         29:62:5b:f7:e1:ea:59:73:ad:e5:2d:db:d2:4b:7f:0d:86:72:
         55:12:23:8b:8a:9b:0f:6a:cc:fe:a2:5c:bd:3b:aa:13:c1:cd:
         14:34:6d:3a:13:01:70:26:aa:19:d9:ae:75:c7:1e:12:48:93:
         50:0f:76:cd:33:3e:f0:26:b3:89:4b:d3:83:ed:74:ae:3c:b2:
         25:15:45:0d:a1:ee:ca:f2:c5:df:06:ec:12:95:4c:60:77:69:
         12:ec:f5:7a:2f:04:58:0d:a8:ad:c2:f6:a4:21:83:23:51:91:
         27:69:9b:88:50:86:e4:0b:09:2b:9b:82:fe:36:54:bd:23:57:
         1b:5e:2c:3a:81:bd:3d:66:ed:8f:5c:78:3e:5b:0f:ce:da:38:
         a2:ed:61:26:d8:5d:e2:58:e2:cc:5f:e6:32:06:22:92:ca:a0:
         ba:b1:52:63:dd:dd:c6:e3:f0:49:32:59:87:85:7e:78:6e:3e:
         5f:a0:8f:97:0a:78:02:0d:52:b8:41:cb:83:f9:c3:56:67:f4:
         a9:25:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:55 2024 by rpki-client on console-fra.rpki-client.org