Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e4253fa1-63a7-3466-9714-dd0c850f953e.roa
File:                     e4253fa1-63a7-3466-9714-dd0c850f953e.roa (raw, json)
Hash identifier:          Fmd9lBVT/0bIP2hnrsTaNb6dst6p2ax79fs9lr7rzQA=
Subject key identifier:   CE:ED:23:84:A7:24:A1:77:BE:13:1C:35:48:4D:C9:DF:E6:74:37:47
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309EE2E7009249CA111E52E10
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e4253fa1-63a7-3466-9714-dd0c850f953e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.110.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ee:2e:70:09:24:9c:a1:11:e5:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8abf98a4-ca45-4097-8004-276066aae92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:c5:ee:8b:bc:40:ba:1a:fb:f1:36:8d:a5:
                    a0:8c:d6:f9:23:79:a0:1e:7c:12:7b:76:80:cd:35:
                    4f:6d:54:bc:36:c6:c3:7b:28:fd:2e:ea:e4:e2:b7:
                    8c:8e:7e:7d:d2:2d:de:23:52:05:6b:6e:75:ac:ea:
                    71:e2:88:14:49:f2:ee:08:13:af:2d:46:a0:c0:a0:
                    da:b9:87:d3:21:3a:eb:6e:b9:12:90:c7:21:07:ed:
                    01:58:ea:f0:72:e9:a7:20:3f:ba:6c:cc:55:12:36:
                    fe:79:9d:a8:fb:81:5e:91:dc:42:c5:8d:84:5a:3d:
                    7d:05:3e:11:7a:b3:d4:9e:37:aa:ce:cd:c9:6c:8d:
                    cf:84:ad:25:0a:74:7f:b9:48:d1:4b:82:55:5b:9f:
                    c2:45:ac:e6:99:11:eb:3e:8d:9c:41:3e:35:f8:d1:
                    60:fc:3e:3d:51:d3:91:98:05:81:80:3b:10:de:b6:
                    72:d6:17:68:b5:6c:f8:80:e4:5f:41:e0:a4:c4:41:
                    90:13:b3:6f:0c:4c:fa:79:2f:33:ae:fc:d4:bb:31:
                    e6:ef:2c:26:b0:d4:1e:80:c5:b5:db:cd:b0:6a:43:
                    6b:17:d9:90:f0:e1:07:ab:ae:9b:29:e5:6e:2f:ec:
                    b2:9d:84:88:ba:f6:d7:04:c7:19:25:64:f3:fa:f5:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:ED:23:84:A7:24:A1:77:BE:13:1C:35:48:4D:C9:DF:E6:74:37:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e4253fa1-63a7-3466-9714-dd0c850f953e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:95:4f:d7:34:b5:4d:53:ff:05:4c:75:6c:22:6e:96:7c:18:
         09:84:11:8a:df:e6:03:b6:2d:53:d4:0c:7e:96:79:a0:49:b0:
         53:26:ae:68:fe:58:98:a7:e3:b1:a1:65:17:30:91:95:d1:98:
         a2:09:e0:32:a0:73:22:18:aa:92:65:ce:4f:3f:f9:87:b2:f2:
         ff:a9:b6:74:75:10:9b:46:08:f4:1b:fe:a2:48:55:fe:8c:09:
         9e:e6:26:21:6f:3f:cc:af:4d:5b:24:7d:2e:71:b1:55:7d:36:
         92:41:fb:c5:4b:71:d1:8e:41:86:f4:2f:30:bb:39:98:f8:f8:
         00:23:26:01:fc:6b:09:dc:6c:7e:fa:f7:b4:fc:28:7a:8e:1f:
         76:45:d2:10:e9:d9:63:7b:56:e4:57:a5:8c:38:cd:0d:3f:5a:
         bf:f0:53:e8:6b:e7:21:9b:50:6d:2e:90:ac:b9:6b:fe:c9:9b:
         59:e9:b9:4d:b5:6c:67:55:78:02:a1:42:9c:09:24:f5:6e:ca:
         ca:01:f2:d5:5f:31:60:e1:1b:15:68:3c:fb:4f:7a:37:81:01:
         0a:d5:85:a0:f2:c8:ef:a8:de:f1:ca:35:6a:8e:f9:c2:c3:59:
         13:96:03:1b:39:32:09:cc:a2:64:53:6e:ea:7c:e3:b3:77:3c:
         9b:f7:8e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----