Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d54b9a8c-feed-36f5-83f6-c1bb84fe0036.roa
File:                     d54b9a8c-feed-36f5-83f6-c1bb84fe0036.roa (raw, json)
Hash identifier:          x7k/VjfQme4uzZQPuYFYO2uAVgdmJyn9SDC0jNwM+hg=
Subject key identifier:   2E:1B:74:7B:19:0C:CA:80:D2:64:61:01:18:C4:CE:95:65:49:01:62
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A2430C3964B5B0EB3A40540
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d54b9a8c-feed-36f5-83f6-c1bb84fe0036.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.124.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:24:30:c3:96:4b:5b:0e:b3:a4:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f3077680-d303-4da1-8635-c5e753f5e284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d1:2f:23:7d:6b:2c:54:0a:6e:b4:54:61:b9:
                    eb:83:53:76:e9:f1:0b:87:b0:0f:28:7c:d9:35:9b:
                    c2:e8:1b:92:cf:16:28:45:66:3c:30:22:dc:e3:b0:
                    35:d7:a1:99:d2:6d:b2:52:82:e7:3f:74:b7:96:15:
                    d0:16:5b:e1:7a:c5:90:65:68:ef:d7:23:0b:76:79:
                    69:52:6e:6c:1e:0a:21:65:d5:92:05:b1:e1:d1:de:
                    be:e9:bc:74:d4:76:a8:13:7d:9e:fe:4d:7a:00:a0:
                    e6:63:ff:95:e9:01:b5:75:f9:98:34:4d:2d:7d:72:
                    70:9d:f8:86:f3:f7:67:ff:79:a5:6c:77:ae:ea:2f:
                    2f:1a:e8:8c:f1:be:a2:a7:db:ac:a4:09:76:17:02:
                    1b:a9:04:83:a0:32:b8:c0:15:fa:ff:80:3b:3d:c3:
                    dd:e6:84:7b:20:45:77:9f:50:0b:ff:fd:a6:4c:55:
                    82:46:b3:d4:5a:c3:97:09:95:75:68:82:74:4a:dd:
                    1c:14:3e:ea:00:3f:c3:36:3e:ff:e2:81:b8:78:d4:
                    ea:ea:aa:af:2a:18:a5:b2:11:d8:dc:3e:58:c1:a5:
                    02:59:f9:13:4b:88:44:72:46:10:dc:be:50:0a:23:
                    06:af:96:44:85:11:ef:82:53:1c:48:32:e9:2f:50:
                    72:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1B:74:7B:19:0C:CA:80:D2:64:61:01:18:C4:CE:95:65:49:01:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d54b9a8c-feed-36f5-83f6-c1bb84fe0036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:e2:93:f3:3f:22:61:77:79:e9:3b:b3:7d:3a:23:81:37:
         9d:d4:ca:81:c9:05:8d:64:1f:c9:57:db:4f:7b:66:12:e6:7c:
         a4:fc:c8:cf:07:65:77:dd:ba:31:c7:36:15:50:ae:23:f8:6e:
         85:8f:d7:9f:af:c7:c9:da:65:79:99:05:d0:03:bd:23:53:da:
         cf:9a:b4:5f:89:45:e0:eb:ec:b3:ea:3f:a5:34:da:e9:b9:ca:
         be:07:5d:00:48:af:f1:98:74:b9:d5:e3:84:c5:43:a2:24:53:
         93:42:cc:85:ce:7c:92:40:86:b2:d7:fc:cb:f6:02:b6:3d:5b:
         bb:6c:0c:3b:76:29:59:5c:de:39:16:5e:d2:f8:29:20:7d:10:
         c0:c0:8b:1a:a5:45:e2:09:72:d5:b9:bd:5f:e9:51:83:71:4e:
         65:ba:e6:9e:64:77:5b:a4:0f:b0:8b:4c:69:6b:97:00:a1:bf:
         33:d9:6f:91:b8:9a:16:03:fb:17:9a:e5:95:42:a6:39:ca:ba:
         7a:3f:49:63:8a:6a:23:41:09:44:a3:cb:53:a7:67:8d:0b:75:
         c4:7e:12:9e:3b:af:f4:b7:e1:bf:d4:e7:be:70:40:13:7e:3f:
         ba:07:e0:8d:f8:62:aa:f7:cb:1c:48:df:ca:21:73:dd:9d:f2:
         8e:a6:0a:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJDDDlktbDrOkBUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjMwNzc2ODAtZDMwMy00ZGExLTg2MzUtYzVlNzUzZjVlMjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtEvI31rLFQKbrRUYbnrg1N26fELh7APKHzZ
NZvC6BuSzxYoRWY8MCLc47A116GZ0m2yUoLnP3S3lhXQFlvhesWQZWjv1yMLdnlp
Um5sHgohZdWSBbHh0d6+6bx01HaoE32e/k16AKDmY/+V6QG1dfmYNE0tfXJwnfiG
8/dn/3mlbHeu6i8vGuiM8b6ip9uspAl2FwIbqQSDoDK4wBX6/4A7PcPd5oR7IEV3
n1AL//2mTFWCRrPUWsOXCZV1aIJ0St0cFD7qAD/DNj7/4oG4eNTq6qqvKhilshHY
3D5YwaUCWfkTS4hEckYQ3L5QCiMGr5ZEhRHvglMcSDLpL1ByxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4bdHsZDMqA0mRhARjEzpVlSQFiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZDU0YjlhOGMtZmVlZC0z
NmY1LTgzZjYtYzFiYjg0ZmUwMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhq4pPzPyJhd3npO7N9OiOBN53UyoHJBY1kH8lX2097ZhLmfKT8yM8H
ZXfdujHHNhVQriP4boWP15+vx8naZXmZBdADvSNT2s+atF+JReDr7LPqP6U02um5
yr4HXQBIr/GYdLnV44TFQ6IkU5NCzIXOfJJAhrLX/Mv2ArY9W7tsDDt2KVlc3jkW
XtL4KSB9EMDAixqlReIJctW5vV/pUYNxTmW65p5kd1ukD7CLTGlrlwChvzPZb5G4
mhYD+xea5ZVCpjnKuno/SWOKaiNBCUSjy1OnZ40LdcR+Ep47r/S34b/U575wQBN+
P7oH4I34Yqr3yxxI38ohc92d8o6mCig=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org