Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d15b58d0-e9be-372d-baf3-e246a43e2993.roa
File:                     d15b58d0-e9be-372d-baf3-e246a43e2993.roa (raw, json)
Hash identifier:          kjxkSfgaRUjoEZ/WHmTqIjXcdWAoC0UKLxBydS8I51M=
Subject key identifier:   E6:96:8F:FD:4E:7C:4F:2B:B2:29:79:48:21:A8:5E:71:4B:FD:F6:D4
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A25974552655C4376189680
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d15b58d0-e9be-372d-baf3-e246a43e2993.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:25:97:45:52:65:5c:43:76:18:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=08cb2511-28bb-4e8c-b655-f44e3e92f2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:d5:44:2f:56:72:b5:a0:0d:94:55:97:2f:
                    83:3e:98:63:53:3f:d9:7a:d5:d2:44:f6:42:a6:80:
                    79:f3:9c:14:ff:fe:50:80:ce:2c:e8:6e:79:52:b8:
                    89:bc:8c:79:34:02:57:d5:35:9b:19:27:e2:66:5e:
                    a0:6a:a0:94:a5:50:c2:6c:b0:3c:86:c3:18:ff:b0:
                    00:4e:bb:60:99:82:a9:c1:ea:54:a5:b3:19:43:28:
                    33:1c:af:89:db:65:96:1a:b1:b2:52:48:08:a3:bb:
                    d1:4e:92:5f:fa:cc:3d:c9:45:d1:fa:f3:4e:6d:63:
                    4a:db:02:6a:de:c4:40:46:4d:8d:43:95:14:47:68:
                    27:3b:ee:7b:59:3e:7a:dc:64:9c:3a:62:e5:1b:6b:
                    a0:ce:98:01:76:e8:56:47:d8:76:0f:44:a5:b4:33:
                    ee:93:5b:2e:b0:75:42:99:1a:53:00:c5:2d:19:10:
                    1a:5e:b7:2d:8d:e7:df:81:10:57:6a:d5:24:ed:24:
                    fd:da:6d:ad:c3:e0:69:c2:7f:27:be:1c:3d:76:ec:
                    73:69:9c:b6:fb:fe:bf:83:23:61:ec:d1:b4:5c:a4:
                    61:7e:44:81:d9:4f:a3:52:f9:44:e2:b6:5e:4c:ff:
                    9c:d9:e7:cb:a3:d3:ff:ee:a2:0d:f4:5f:0a:8f:3d:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:96:8F:FD:4E:7C:4F:2B:B2:29:79:48:21:A8:5E:71:4B:FD:F6:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d15b58d0-e9be-372d-baf3-e246a43e2993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a7:7d:93:8b:6d:1b:02:e4:52:b2:84:05:34:f1:85:6a:da:
         f7:d5:9b:38:35:bf:dd:87:f1:de:cc:cd:8d:00:57:c4:80:13:
         c0:35:ac:b4:d4:5b:41:81:9d:d3:6f:fc:7a:64:7a:fc:0e:a2:
         a1:4f:9d:3b:c8:bd:75:2c:a3:f8:a8:69:08:64:09:5d:93:77:
         f9:4e:e7:0c:6c:0b:bb:7a:94:06:fe:22:bd:65:2c:63:45:06:
         b2:9d:4e:ef:28:e3:b0:a7:c4:b8:79:bf:c8:72:a6:05:47:9b:
         fd:a8:67:d4:30:8c:03:0a:fd:67:63:4f:0d:29:8e:92:57:25:
         8d:9f:ef:4e:f5:c5:5b:36:bc:21:a5:24:de:d6:3b:7e:8f:fd:
         98:ae:e3:34:27:d2:d4:46:0e:c6:da:b9:eb:2d:16:f3:c8:68:
         8a:19:22:94:5e:90:b8:d8:18:a2:6a:47:da:af:60:ef:5f:65:
         ab:19:8b:e9:2e:9e:f6:7d:f6:4b:00:90:da:7c:d9:d2:b6:b0:
         84:d2:b2:dd:e3:93:99:23:cf:e1:a9:58:48:14:27:71:b0:53:
         53:86:9c:f1:f1:19:26:19:52:4d:d6:74:db:e7:e0:6a:f0:31:
         0e:55:23:58:4f:d6:e9:ff:88:4c:cb:6d:a3:1c:f9:01:ee:1f:
         08:e5:69:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:02:44 2024 by rpki-client on console-ams.rpki-client.org