Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d1aca5e5-746d-35ed-9307-c3dae510d31a.roa
File:                     d1aca5e5-746d-35ed-9307-c3dae510d31a.roa (raw, json)
Hash identifier:          PtBZY7EaVGqPKu7o6Ic/+oqX58+LPO5Y8weWBbJ4KO4=
Subject key identifier:   B0:7C:F6:62:3D:CE:6C:7C:6A:AD:58:9E:13:72:BE:BC:36:10:F8:1B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A09EF35DDD8F0A1906C9B80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d1aca5e5-746d-35ed-9307-c3dae510d31a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:09:ef:35:dd:d8:f0:a1:90:6c:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=73944518-d9ff-4a22-87c7-a2481e5a5efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7e:38:78:4f:b0:f7:7a:c1:89:42:a7:43:9b:
                    45:36:a1:8e:5c:21:a4:38:1b:57:e5:65:e7:47:dc:
                    78:75:79:6d:b7:94:20:d1:f0:4e:c3:0b:1f:a4:79:
                    95:86:e2:62:8a:0a:eb:41:b9:52:bc:32:ad:1d:a4:
                    d6:6a:9e:75:87:bc:c5:33:44:dc:c4:dd:d2:5b:2e:
                    d3:8a:3e:8c:7c:5c:3e:a9:eb:35:b7:b5:5c:33:e4:
                    af:07:d7:16:b3:4d:92:19:70:e1:f3:a4:ef:38:e5:
                    30:e6:6f:7c:7f:ce:46:11:ec:42:ae:cb:e4:be:32:
                    be:e4:b1:9c:d1:b5:3e:cc:56:bf:d3:dc:fa:9c:03:
                    6f:1f:3b:8a:5d:79:72:8e:ba:80:1d:23:64:6e:ec:
                    a7:97:a7:54:a0:56:40:b2:89:ea:ef:c3:11:9c:f0:
                    3e:c4:7e:1a:d0:4a:9a:fa:ef:dc:24:c6:10:bb:6c:
                    82:14:dc:60:b9:6b:21:4d:1b:df:17:6b:c3:ce:fa:
                    7d:3b:87:ce:6a:83:ca:1b:51:b3:81:0b:7d:69:63:
                    51:3e:72:1b:91:23:52:10:32:d5:70:f8:7e:b9:24:
                    55:8c:1b:b1:9d:7e:e9:83:7f:1e:28:d4:d1:9c:e5:
                    ca:48:48:7a:e7:d9:4c:ee:cd:70:4c:6a:95:4b:ba:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7C:F6:62:3D:CE:6C:7C:6A:AD:58:9E:13:72:BE:BC:36:10:F8:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d1aca5e5-746d-35ed-9307-c3dae510d31a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:92:d4:06:cc:96:e8:f1:1f:7f:87:50:43:82:83:23:ce:87:
         5c:f9:fd:db:3c:0b:d5:53:a4:66:f9:8f:b7:ce:61:15:97:d8:
         95:b9:02:51:07:dd:36:31:41:6a:42:a9:cb:3f:18:96:f3:92:
         32:a5:6a:78:82:c0:fe:07:39:27:85:d4:8d:6a:77:aa:cf:fc:
         ba:cc:0e:4e:56:69:a0:fb:7e:f1:35:5d:5f:e1:89:50:f6:e6:
         5c:2a:f4:6d:e8:ed:04:4a:9e:7e:54:eb:ce:dc:83:a5:41:6a:
         3e:8b:e8:91:b0:01:ec:27:89:b3:b5:b2:e9:76:d3:7a:ef:7a:
         1a:d5:22:c5:d1:f2:98:2d:b5:24:c9:fe:03:8e:b1:de:84:15:
         f4:ed:78:5a:d8:78:bb:55:13:96:03:30:64:f1:1c:d3:f0:d5:
         08:1d:49:5b:77:9c:bf:27:28:e3:1d:87:fc:ad:a3:fd:06:50:
         58:61:1d:b5:86:64:31:85:89:94:f4:99:54:70:96:99:c5:18:
         2f:dc:0a:20:fe:e9:94:e1:f1:92:cc:9a:47:63:94:a3:4b:23:
         1a:d4:e4:25:63:7a:b2:21:5f:93:83:84:3a:20:f9:13:e6:e1:
         80:d6:7d:57:26:e4:f1:62:c7:6c:5d:c7:5d:2b:ce:36:f8:e1:
         c0:00:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org