Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bb9465c8-3d35-3a12-b1a1-54473462a2e8.roa
File:                     bb9465c8-3d35-3a12-b1a1-54473462a2e8.roa (raw, json)
Hash identifier:          fjy/bMOHkWo6y/N5dLh++p7M6Wx/MJ0/CDsqhQGYlnM=
Subject key identifier:   F9:0E:92:6A:F8:AC:9C:96:5E:20:74:CA:28:B2:32:CB:54:6B:C7:94
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309EB01D1D50CAE9830AF2060
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bb9465c8-3d35-3a12-b1a1-54473462a2e8.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:eb:01:d1:d5:0c:ae:98:30:af:20:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=010a822d-f6c3-426c-9409-85e9bb4b5462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:88:77:3f:20:d5:bd:b6:57:07:e2:5a:5c:
                    bb:2f:c4:72:8d:59:ba:7b:16:3c:21:ad:d7:52:14:
                    b1:13:8d:b1:9a:61:38:35:ff:08:eb:73:37:b2:36:
                    e2:3f:1c:88:36:4e:b5:cc:80:6e:4c:6f:66:d7:32:
                    93:db:a8:f2:2d:13:b6:c9:3d:16:76:8f:84:db:b3:
                    ac:dc:d9:23:0c:cd:a0:ea:71:23:12:49:a0:8d:0c:
                    6a:92:b4:af:e7:ae:31:ea:bc:4b:d9:cb:b9:49:73:
                    f4:30:9b:ea:b6:54:2a:bd:43:29:d0:e1:80:83:4e:
                    f7:71:bd:f7:38:ac:c7:c9:8e:f6:51:cb:ff:d5:96:
                    e6:b5:7c:af:21:5d:70:11:d4:44:e4:24:bb:47:f0:
                    ca:7c:d0:48:77:5e:3c:04:86:56:ef:92:83:d7:17:
                    02:16:fe:43:33:1f:fe:cd:d4:1f:f7:8f:96:79:0a:
                    fe:83:0d:3f:7e:2b:bf:3d:42:23:33:ac:49:36:45:
                    37:10:26:80:c4:3a:b6:72:f5:4d:6f:73:fe:94:00:
                    05:fc:c7:4c:1e:93:3e:be:e4:e8:fc:04:8e:ca:1b:
                    80:c2:08:42:d7:59:e3:88:94:fa:78:70:ed:b7:5b:
                    36:7d:82:ee:3f:4e:79:ef:18:55:e8:5f:34:e8:33:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0E:92:6A:F8:AC:9C:96:5E:20:74:CA:28:B2:32:CB:54:6B:C7:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bb9465c8-3d35-3a12-b1a1-54473462a2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:36:8b:e8:be:5a:ff:2c:61:54:3d:17:9a:bb:6c:54:60:3a:
         bc:c9:6b:fc:2c:26:e4:6f:ef:26:88:f3:26:cb:56:cb:bd:f2:
         1f:a1:93:77:db:6c:8d:91:2c:35:07:10:b1:21:24:74:f7:c5:
         cb:ca:78:ce:07:2f:97:c6:61:9d:29:c6:c7:72:d4:1b:04:08:
         34:01:3e:4b:9a:9c:ae:25:fa:6e:88:45:e6:85:bb:2b:5b:14:
         ab:0a:61:8c:d9:84:41:16:6e:7a:6e:05:32:e9:d1:e2:f4:79:
         fc:a7:e0:4d:09:03:dd:99:9f:21:ae:d0:db:60:2f:e8:06:aa:
         49:0e:a5:b7:51:bd:17:5e:aa:42:65:a5:3a:96:d8:70:7d:6e:
         61:90:24:4e:5c:a3:54:32:91:5e:38:93:40:61:42:01:cf:f1:
         a0:67:5f:9b:5a:a7:1a:98:00:9b:a4:18:c0:8f:98:21:57:79:
         93:e9:aa:10:ce:ed:ef:a1:17:df:b3:7c:e5:26:37:3d:a9:3a:
         59:bc:9c:20:cf:e3:50:9c:f3:10:12:ab:db:70:df:e1:4d:a2:
         d6:a5:f5:50:0b:61:18:61:de:0c:e8:1d:47:36:bf:0d:ec:18:
         f3:15:7e:ff:d1:16:97:5f:b3:ff:71:41:e0:60:e7:82:90:92:
         c8:7b:ac:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ6wHR1QyumDCvIGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDEwYTgyMmQtZjZjMy00MjZjLTk0MDktODVlOWJiNGI1NDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM6Idz8g1b22VwfiWly7L8RyjVm6exY8Ia3X
UhSxE42xmmE4Nf8I63M3sjbiPxyINk61zIBuTG9m1zKT26jyLRO2yT0Wdo+E27Os
3NkjDM2g6nEjEkmgjQxqkrSv564x6rxL2cu5SXP0MJvqtlQqvUMp0OGAg073cb33
OKzHyY72Ucv/1ZbmtXyvIV1wEdRE5CS7R/DKfNBId148BIZW75KD1xcCFv5DMx/+
zdQf94+WeQr+gw0/fiu/PUIjM6xJNkU3ECaAxDq2cvVNb3P+lAAF/MdMHpM+vuTo
/ASOyhuAwghC11njiJT6eHDtt1s2fYLuP0557xhV6F806DPONwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPkOkmr4rJyWXiB0yiiyMstUa8eUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYmI5NDY1YzgtM2QzNS0z
YTEyLWIxYTEtNTQ0NzM0NjJhMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKI2i+i+Wv8sYVQ9F5q7bFRgOrzJa/wsJuRv7yaI8ybLVsu98h+hk3fb
bI2RLDUHELEhJHT3xcvKeM4HL5fGYZ0pxsdy1BsECDQBPkuanK4l+m6IReaFuytb
FKsKYYzZhEEWbnpuBTLp0eL0efyn4E0JA92ZnyGu0NtgL+gGqkkOpbdRvRdeqkJl
pTqW2HB9bmGQJE5co1QykV44k0BhQgHP8aBnX5tapxqYAJukGMCPmCFXeZPpqhDO
7e+hF9+zfOUmNz2pOlm8nCDP41Cc8xASq9tw3+FNotal9VALYRhh3gzoHUc2vw3s
GPMVfv/RFpdfs/9xQeBg54KQksh7rLM=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org