Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9f01fb2b-a79f-30c8-93b3-23b27015aa2b.roa
File:                     9f01fb2b-a79f-30c8-93b3-23b27015aa2b.roa (raw, json)
Hash identifier:          JT3Sf4d4WEP4XSHCShFw3Vp7LxM5Uoj4ZsjfBxZEOEQ=
Subject key identifier:   4F:67:C4:68:DA:32:0D:93:44:B4:F8:E4:0C:CA:9C:E0:6C:D0:FA:F9
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309F36266318E78B2BF01B100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9f01fb2b-a79f-30c8-93b3-23b27015aa2b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f3:62:66:31:8e:78:b2:bf:01:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8458ed1d-9dd3-4367-8044-f357cdf53506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:97:8e:60:54:47:c9:9e:c7:53:69:83:4e:
                    ac:63:3d:de:88:a0:fc:ba:8d:4b:50:86:a3:ff:80:
                    c9:c1:1e:59:d1:3d:3b:7b:b2:2e:6b:df:48:53:37:
                    9d:07:87:78:86:31:22:64:76:cf:7b:1c:14:5f:03:
                    dd:35:39:61:cb:67:60:c2:3a:e9:c9:9e:82:2d:76:
                    ba:e6:87:6f:ec:3c:2c:56:fa:73:f8:55:bf:22:66:
                    03:16:27:8b:9e:d5:b0:c9:f1:f1:b8:d2:c1:a4:ff:
                    40:c8:7d:0e:83:65:02:4b:0d:62:78:84:45:25:a1:
                    b8:24:1b:3b:cc:24:d0:d3:7b:eb:b2:49:ad:22:96:
                    60:f4:c5:51:f3:e1:a4:be:c6:3c:84:8e:0f:6f:59:
                    6b:03:4c:b6:af:aa:63:b9:54:e1:7f:a3:1d:83:8a:
                    e9:0c:b2:0e:a2:9c:86:19:2b:4c:37:1a:6e:96:ad:
                    00:a7:6b:80:3a:e0:f6:c1:6a:80:ce:9c:cb:a6:79:
                    8a:20:fd:70:91:59:a0:3d:d9:8a:10:aa:83:2b:9f:
                    1d:97:c6:78:45:c2:70:30:64:ae:80:a7:ed:03:8b:
                    da:52:75:e5:33:64:67:ab:cd:57:91:67:4f:4d:39:
                    df:91:d6:0a:43:a0:ae:ee:9c:6f:63:e1:21:db:b5:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:67:C4:68:DA:32:0D:93:44:B4:F8:E4:0C:CA:9C:E0:6C:D0:FA:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9f01fb2b-a79f-30c8-93b3-23b27015aa2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:62:35:0b:d2:f6:77:ef:ab:b2:85:f4:c2:c6:9a:cf:25:
         17:82:af:02:43:58:45:af:2d:f5:e6:12:46:71:17:18:24:16:
         10:6e:6a:a4:46:77:6c:57:6c:b8:4f:eb:94:dd:08:07:50:eb:
         9a:2d:a6:d9:14:c9:c2:a8:08:81:ce:9c:5e:27:a1:0e:90:c9:
         5d:95:04:3c:61:d6:d1:ab:9c:36:46:1a:23:43:de:2f:78:54:
         33:03:75:17:62:c6:d3:69:89:70:d9:ed:f3:a4:fd:86:18:86:
         4c:70:7a:2b:c7:c9:2e:c8:a5:eb:5b:84:b0:7a:a7:ea:d5:b9:
         88:f5:58:bc:9f:c6:1a:00:59:42:83:aa:a2:7d:c0:40:25:72:
         d4:89:cd:eb:e2:4b:da:88:79:20:6d:86:7d:a1:c6:7a:e0:4e:
         19:7a:fe:f1:ac:7e:b1:0a:ac:0a:80:01:de:76:64:84:a5:11:
         fc:31:57:fd:38:f8:b8:61:cb:93:48:ea:16:02:48:65:cd:0d:
         95:6e:bc:d5:b3:fe:e0:28:73:b6:ca:27:03:45:3f:c3:a3:4f:
         43:8f:8b:cf:fb:36:7a:ff:ed:ca:ec:b5:d9:09:88:71:8b:8b:
         51:78:3f:aa:9c:bc:a5:d5:b4:32:01:6c:b4:09:2f:bc:de:84:
         50:4f:4d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:02:44 2024 by rpki-client on console-ams.rpki-client.org