Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b0f3ae66-4c01-3315-9b31-801e99f7582d.roa
File:                     b0f3ae66-4c01-3315-9b31-801e99f7582d.roa (raw, json)
Hash identifier:          0cqtiOBP8WBHQUkL2DQivYrACKI9rkaWa/TvFvuPNIs=
Subject key identifier:   82:25:8C:5C:B5:21:09:5D:E1:71:EE:48:DA:FF:A9:89:E5:95:44:E3
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A069B66F4629B6B5E0F14C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b0f3ae66-4c01-3315-9b31-801e99f7582d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:06:9b:66:f4:62:9b:6b:5e:0f:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7bb432a2-33fa-49c1-8539-305b7cb267c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:55:b6:80:ca:1a:7f:6e:c7:a7:dc:0f:21:3e:
                    5a:6d:83:b8:93:08:39:8d:e5:9e:3e:e8:0c:dd:65:
                    f3:c5:29:43:cb:69:52:6d:eb:4a:ee:bb:a1:f9:b7:
                    e5:98:9b:1e:a0:d4:5b:7d:99:05:ff:8c:66:f4:c6:
                    66:b6:44:42:34:f8:59:35:a3:64:df:c3:c9:a8:65:
                    fe:6b:86:6b:c9:47:6a:b8:2a:26:7c:0f:b1:ef:c6:
                    b4:ca:06:32:b9:ad:1e:03:ee:dd:f1:06:e2:e2:cc:
                    29:18:23:ab:f2:43:74:c8:e6:0d:7f:c6:58:be:11:
                    9a:7d:05:ae:33:62:9e:5a:12:4d:e4:c4:9f:ef:7f:
                    f9:4d:73:20:e1:87:db:fa:d3:42:83:62:d6:00:eb:
                    d9:c4:fa:c1:a6:8b:b5:84:34:b9:0e:3e:c4:92:21:
                    6f:19:7b:56:13:6c:75:5e:5e:62:b8:31:d9:c0:c2:
                    02:6e:19:d2:9c:0d:77:65:ca:45:da:0a:19:9f:ba:
                    61:ba:d6:04:35:44:0d:a1:2e:76:53:b3:7c:96:fd:
                    83:c7:8a:18:92:aa:fd:42:0f:65:ce:1b:c1:31:f5:
                    37:d8:14:f9:87:95:9a:54:a0:82:d1:5e:a6:55:3d:
                    52:e4:0e:e7:b3:2b:36:e9:6a:35:e8:e8:0d:c3:1d:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:25:8C:5C:B5:21:09:5D:E1:71:EE:48:DA:FF:A9:89:E5:95:44:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b0f3ae66-4c01-3315-9b31-801e99f7582d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ed:92:3d:6b:1f:61:39:e8:f2:84:97:81:5d:a6:b1:2f:e2:
         42:af:f6:80:41:5c:31:54:8f:34:44:d7:d0:b5:7e:b6:fc:6e:
         f9:8e:22:fb:c4:11:9c:e1:7b:ee:f0:f3:31:fb:c4:5b:da:c1:
         35:10:32:0f:14:fa:40:3b:c0:6d:65:60:cf:b9:64:eb:6e:b3:
         b5:d5:c6:34:0d:37:62:22:db:22:fe:12:12:12:2b:c2:a1:79:
         87:a5:25:38:35:5c:6d:62:3b:26:da:42:46:d6:c4:87:5a:f3:
         7c:41:cc:b9:fa:c5:17:a9:fc:f2:6d:80:7b:47:10:49:3b:4c:
         f4:cc:1e:57:8f:76:a9:46:ad:36:c9:24:6f:17:04:31:2a:6a:
         8d:f5:26:d3:b4:b1:53:38:cc:fc:4c:c5:5b:a0:45:4b:20:e5:
         48:8c:1d:35:1f:80:19:70:d8:20:96:af:a4:4c:89:b6:cc:f1:
         fb:8d:a5:6c:91:96:b4:98:29:38:37:bd:df:46:e7:fa:2f:80:
         91:9c:ed:61:60:76:4f:a2:ed:73:a5:b9:96:8f:61:88:fc:2e:
         e0:09:cf:2e:d2:b0:dd:f0:f5:f4:d7:ed:07:82:33:82:9e:a2:
         a7:d1:f5:cf:3e:11:c4:fb:c4:fe:2c:50:f0:3a:68:1e:8d:1a:
         97:87:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org