Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c2b4bf34-20b5-3698-a55a-38d80e12341c.roa
File:                     c2b4bf34-20b5-3698-a55a-38d80e12341c.roa (raw, json)
Hash identifier:          +mpetPufUZMlJsOyKfapT9y8A2JYf+5oJP9PdcI2tHo=
Subject key identifier:   47:89:73:51:F6:D4:E4:B9:EB:A2:D7:0D:BD:5C:AA:E2:1B:23:E0:F5
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A0646B25CD1A18F993E1A70
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c2b4bf34-20b5-3698-a55a-38d80e12341c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.240.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:06:46:b2:5c:d1:a1:8f:99:3e:1a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=90fac423-4525-4d33-9d03-9dbfeb48b98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:11:fd:78:15:92:19:35:20:81:40:dd:6e:
                    2a:ec:fd:20:1d:d8:b5:21:cc:17:92:f2:8b:6d:2e:
                    17:52:4e:be:31:15:5c:41:9c:df:6f:0c:aa:46:70:
                    33:b6:a3:5a:01:a2:d7:01:a4:2b:4f:1d:55:e5:f5:
                    5b:59:df:4c:10:27:26:1e:33:55:13:8b:d4:48:09:
                    3b:45:da:5d:c8:1c:db:ec:72:1d:76:83:f7:07:08:
                    cd:54:7e:3f:8a:d4:b9:92:24:ff:5f:c5:0e:c7:0c:
                    8e:32:d1:28:1e:5b:97:b6:6a:dd:c7:1c:fc:3f:8b:
                    b4:0f:29:6b:c6:b9:22:3c:0d:a2:91:67:63:e7:14:
                    d4:c2:6a:a1:2d:88:b2:8d:c2:a3:2c:9c:b6:c5:51:
                    75:07:8c:f2:ed:03:85:18:a2:dd:51:75:f2:aa:2d:
                    27:33:a7:74:84:76:d8:c1:f3:c9:0c:71:13:da:50:
                    d3:a0:91:7a:1d:58:ed:da:a4:5f:46:a2:86:51:46:
                    37:8e:7c:a6:c4:fb:a6:85:6a:5a:b9:26:e7:85:66:
                    c2:06:30:06:c2:1c:62:bb:33:6c:b9:af:16:e6:25:
                    39:73:f0:e1:18:47:da:bb:2b:91:a0:0a:12:55:b0:
                    48:cb:6d:ef:7d:ac:e6:4e:f1:d8:b7:d8:ba:90:24:
                    d3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:89:73:51:F6:D4:E4:B9:EB:A2:D7:0D:BD:5C:AA:E2:1B:23:E0:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c2b4bf34-20b5-3698-a55a-38d80e12341c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:2b:c8:03:73:97:36:07:4b:d0:72:4d:f7:5c:62:64:2e:36:
         b0:74:04:ef:0b:9f:ac:21:1c:9e:8a:82:fc:0f:12:76:bd:a6:
         c8:80:d3:b6:b4:f2:04:2c:26:70:30:91:b4:56:b2:91:39:52:
         d3:14:cc:f1:79:9e:96:17:13:4c:0e:d1:3c:67:fb:bb:76:e3:
         f8:99:e4:95:ac:6d:6a:cb:69:7e:ae:61:df:ef:89:e1:cb:f5:
         8e:87:98:fd:88:fb:14:02:35:92:2b:46:d6:57:c7:32:56:92:
         b3:00:bc:5b:94:30:58:c9:6f:56:15:1a:fc:20:c6:a3:0d:8e:
         55:0b:25:83:c8:58:12:20:6d:4a:9b:67:a4:7e:dc:60:8b:31:
         8b:c0:03:e8:be:f0:9b:d2:b1:d4:56:82:ca:7b:8c:3a:07:ea:
         e1:bf:cd:57:6d:32:90:84:8e:23:3f:bb:28:ee:5b:33:50:25:
         98:3b:0b:e7:6d:ad:b2:eb:31:91:3e:84:17:95:21:40:f7:fd:
         9f:7f:f6:2d:ba:21:af:f5:b7:9a:38:4e:2a:e6:64:f8:7a:7d:
         2f:c8:92:eb:64:7e:b8:42:a1:5d:43:ea:d1:f6:c7:90:25:59:
         59:e3:3a:e5:2a:6f:ac:6c:09:51:50:74:e3:05:2c:4b:5b:f5:
         2b:0a:67:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKBkayXNGhj5k+GnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OTBmYWM0MjMtNDUyNS00ZDMzLTlkMDMtOWRiZmViNDhiOThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5IR/XgVkhk1IIFA3W4q7P0gHdi1IcwXkvKL
bS4XUk6+MRVcQZzfbwyqRnAztqNaAaLXAaQrTx1V5fVbWd9MECcmHjNVE4vUSAk7
RdpdyBzb7HIddoP3BwjNVH4/itS5kiT/X8UOxwyOMtEoHluXtmrdxxz8P4u0Dylr
xrkiPA2ikWdj5xTUwmqhLYiyjcKjLJy2xVF1B4zy7QOFGKLdUXXyqi0nM6d0hHbY
wfPJDHET2lDToJF6HVjt2qRfRqKGUUY3jnymxPumhWpauSbnhWbCBjAGwhxiuzNs
ua8W5iU5c/DhGEfauyuRoAoSVbBIy23vfazmTvHYt9i6kCTTGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeJc1H21OS566LXDb1cquIbI+D1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYzJiNGJmMzQtMjBiNS0z
Njk4LWE1NWEtMzhkODBlMTIzNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMryANzlzYHS9ByTfdcYmQuNrB0BO8Ln6whHJ6KgvwPEna9psiA07a0
8gQsJnAwkbRWspE5UtMUzPF5npYXE0wO0Txn+7t24/iZ5JWsbWrLaX6uYd/vieHL
9Y6HmP2I+xQCNZIrRtZXxzJWkrMAvFuUMFjJb1YVGvwgxqMNjlULJYPIWBIgbUqb
Z6R+3GCLMYvAA+i+8JvSsdRWgsp7jDoH6uG/zVdtMpCEjiM/uyjuWzNQJZg7C+dt
rbLrMZE+hBeVIUD3/Z9/9i26Ia/1t5o4TirmZPh6fS/IkutkfrhCoV1D6tH2x5Al
WVnjOuUqb6xsCVFQdOMFLEtb9SsKZ/c=
-----END CERTIFICATE-----