Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b0d9eceb-1ac5-3b16-bb18-319495dd6b9e.roa
File:                     b0d9eceb-1ac5-3b16-bb18-319495dd6b9e.roa (raw, json)
Hash identifier:          rozgwgzcCflftcMDsadIyGSvPiuMGPjyJyy9xSpEbrY=
Subject key identifier:   60:34:37:0E:67:17:00:9F:C5:91:46:B9:27:47:E2:BD:12:66:96:39
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A16E545F9485F50B8554820
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b0d9eceb-1ac5-3b16-bb18-319495dd6b9e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:16:e5:45:f9:48:5f:50:b8:55:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f43410c2-f09f-4ec3-abd0-f4c82ceabc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:8c:15:f2:19:4c:56:e4:1c:c4:bb:e5:67:
                    90:4e:6f:ec:14:24:f8:37:98:e9:c3:21:a3:cb:28:
                    e5:8a:f8:da:ca:28:ef:60:09:fb:d5:65:b8:ed:5b:
                    71:c3:68:e4:fc:5f:dd:0d:c3:12:ad:62:81:fd:bd:
                    09:4b:f0:04:fd:6c:ce:ad:9d:f9:3b:93:26:08:a2:
                    91:c5:ee:79:7b:9e:57:dd:87:48:f4:67:49:51:99:
                    c1:01:3e:46:20:95:6e:f0:9d:83:7a:9b:73:47:a6:
                    ee:18:a8:d0:77:64:8e:c9:0e:b5:db:a8:94:13:7c:
                    c6:70:10:fe:d9:42:61:5a:fe:c8:15:98:37:4b:b2:
                    2b:62:55:27:91:7d:5d:27:81:87:c8:00:53:6c:8c:
                    9e:97:c5:3e:d4:9b:47:a3:4f:d2:88:0a:f8:78:6c:
                    e3:ea:3d:c0:27:1e:b9:1d:33:2f:05:a4:80:2c:3d:
                    2d:5d:71:43:53:f9:45:cc:23:0a:79:11:91:0a:45:
                    61:74:a5:88:24:96:27:2d:66:05:ce:27:b1:b7:85:
                    fb:75:4a:14:12:a1:87:d6:b4:18:27:92:76:55:bb:
                    df:f5:2d:d9:35:6c:9f:6e:24:f2:7f:57:79:71:05:
                    76:52:e7:17:61:bd:51:31:47:fa:16:9f:79:68:ae:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:34:37:0E:67:17:00:9F:C5:91:46:B9:27:47:E2:BD:12:66:96:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b0d9eceb-1ac5-3b16-bb18-319495dd6b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:90:e1:a5:50:49:bc:26:db:aa:16:c8:ad:ee:06:35:16:b0:
         5a:0e:fc:0b:fa:9c:ae:8a:b1:ac:24:ca:8a:db:79:8c:d1:b3:
         93:09:1b:fd:97:8c:c0:ac:e3:12:53:a9:2a:9b:4d:3b:44:aa:
         67:f6:18:b2:87:59:09:93:c1:b2:e5:3c:ab:bb:38:f5:bd:1a:
         be:60:cd:4b:7d:aa:d5:a2:ed:8d:52:12:78:da:e1:77:f7:11:
         b1:a9:6d:97:cc:36:ca:c8:d8:e8:bd:80:26:e1:fb:d0:ff:f9:
         40:ea:fa:b2:96:01:67:4c:52:1b:eb:51:1c:42:ed:ba:bc:bc:
         63:a5:cf:08:0e:a5:5c:bd:3e:b6:51:0a:3b:ad:1f:d1:95:af:
         9b:4e:cd:0e:33:10:c3:8f:af:20:c3:77:1a:c3:f6:f5:3f:8f:
         5c:39:4b:1d:da:c3:e6:e6:9b:54:df:5a:6a:da:8c:b5:34:ec:
         04:6f:e2:1f:4f:ba:3e:49:de:ca:5f:46:12:a4:95:6f:cb:ed:
         c1:97:6b:6e:e6:29:f2:0e:95:8f:69:fa:33:7e:93:f6:0b:10:
         2f:33:01:70:a9:69:6f:2f:eb:6f:68:55:09:17:d6:54:9d:19:
         d2:ed:ec:cc:f2:d9:cd:04:db:8f:b2:55:0c:34:08:51:3b:e1:
         0c:fb:ab:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFuVF+UhfULhVSCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjQzNDEwYzItZjA5Zi00ZWMzLWFiZDAtZjRjODJjZWFiYzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS2MFfIZTFbkHMS75WeQTm/sFCT4N5jpwyGj
yyjlivjayijvYAn71WW47Vtxw2jk/F/dDcMSrWKB/b0JS/AE/WzOrZ35O5MmCKKR
xe55e55X3YdI9GdJUZnBAT5GIJVu8J2DeptzR6buGKjQd2SOyQ6126iUE3zGcBD+
2UJhWv7IFZg3S7IrYlUnkX1dJ4GHyABTbIyel8U+1JtHo0/SiAr4eGzj6j3AJx65
HTMvBaSALD0tXXFDU/lFzCMKeRGRCkVhdKWIJJYnLWYFziext4X7dUoUEqGH1rQY
J5J2Vbvf9S3ZNWyfbiTyf1d5cQV2UucXYb1RMUf6Fp95aK56LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGA0Nw5nFwCfxZFGuSdH4r0SZpY5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYjBkOWVjZWItMWFjNS0z
YjE2LWJiMTgtMzE5NDk1ZGQ2YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+Q4aVQSbwm26oWyK3uBjUWsFoO/Av6nK6KsawkyorbeYzRs5MJG/2X
jMCs4xJTqSqbTTtEqmf2GLKHWQmTwbLlPKu7OPW9Gr5gzUt9qtWi7Y1SEnja4Xf3
EbGpbZfMNsrI2Oi9gCbh+9D/+UDq+rKWAWdMUhvrURxC7bq8vGOlzwgOpVy9PrZR
CjutH9GVr5tOzQ4zEMOPryDDdxrD9vU/j1w5Sx3aw+bmm1TfWmrajLU07ARv4h9P
uj5J3spfRhKklW/L7cGXa27mKfIOlY9p+jN+k/YLEC8zAXCpaW8v629oVQkX1lSd
GdLt7Mzy2c0E24+yVQw0CFE74Qz7qwo=
-----END CERTIFICATE-----