Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fbd10e1d-3103-30e1-81d1-f71cceeea485.roa
File:                     fbd10e1d-3103-30e1-81d1-f71cceeea485.roa (raw, json)
Hash identifier:          KFP3vNfQQBD82yOtCjxMRklrIPWI/XwIlYYtvEnfwmQ=
Subject key identifier:   E9:D7:70:03:94:67:CB:B5:9B:31:7A:E4:05:A2:AA:80:1B:34:96:10
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309F5654985280D3F15EA9940
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fbd10e1d-3103-30e1-81d1-f71cceeea485.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f5:65:49:85:28:0d:3f:15:ea:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6de3473d-7b1a-4c17-9bfc-6e792c85a300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:da:8f:48:30:63:52:39:52:9e:56:e1:6c:e0:
                    d8:d0:dd:12:64:87:40:23:96:5f:8e:af:ad:2b:6c:
                    0a:68:2f:10:3f:55:04:79:62:61:fe:68:4d:4b:c4:
                    9d:eb:c7:bf:5a:2d:79:f3:26:ec:20:8a:da:0a:0e:
                    64:1c:e7:01:25:b2:e7:da:af:7b:0b:b9:ef:38:be:
                    6c:aa:41:e7:8b:3c:12:27:2d:b5:07:c6:2c:f8:88:
                    fd:2b:5a:5c:4c:22:09:14:58:f0:6d:69:4e:90:04:
                    06:5a:b5:03:0c:4e:ab:76:49:ec:3f:4b:52:10:87:
                    00:e9:03:29:dc:10:0a:cb:7f:63:d3:17:2f:6b:01:
                    6a:3c:57:64:56:e1:36:eb:18:87:46:86:86:09:8c:
                    e3:e9:58:84:67:6a:94:d7:38:fc:c0:64:78:98:9b:
                    26:01:c9:b5:ad:8c:3e:88:e2:2e:48:a0:34:2b:66:
                    a3:6b:f4:45:ce:09:ad:f6:b1:8d:2e:78:44:3d:b1:
                    03:f4:20:27:5d:84:20:d4:be:4a:7c:03:86:c0:dc:
                    5e:e6:90:12:d6:b2:be:56:65:9f:46:03:54:05:de:
                    52:c0:3e:36:4b:b5:94:f9:b0:e0:73:dc:38:85:78:
                    ba:48:8e:4d:9e:ac:03:49:f6:24:75:aa:4e:40:c1:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D7:70:03:94:67:CB:B5:9B:31:7A:E4:05:A2:AA:80:1B:34:96:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fbd10e1d-3103-30e1-81d1-f71cceeea485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:4a:df:5f:c9:4a:7a:ab:78:91:26:70:dd:1e:e0:00:8d:83:
         4e:01:8f:1c:aa:79:20:cf:03:0c:61:d6:e9:89:b3:3e:b3:00:
         ad:df:3c:6d:9f:2e:26:8b:cb:86:fa:a2:87:19:51:8a:fd:17:
         a4:e5:1a:db:21:56:1a:75:fb:3a:5e:db:f9:d1:26:d3:5c:d8:
         8e:8e:56:a7:e5:22:2f:98:02:55:81:58:dc:12:04:95:7f:42:
         55:88:1d:1c:43:5a:62:05:58:d4:02:50:07:5c:d0:ef:b3:a7:
         a2:b0:9c:b4:26:5e:47:66:7c:86:b9:53:8f:0e:86:e3:9c:85:
         6b:90:67:3b:e1:57:c7:ec:e0:77:83:27:f0:ae:91:19:ed:1d:
         9e:2d:88:0b:37:f3:10:94:16:a7:78:3a:da:02:0b:f0:eb:32:
         e0:71:73:67:76:b6:18:24:19:9d:16:6c:50:56:51:b5:ba:d8:
         7c:c1:65:79:59:3c:25:90:a1:8c:77:3a:d1:c5:d6:2c:5d:f5:
         ed:cb:fb:7c:39:7e:ab:77:b0:64:98:65:a2:f6:7d:75:17:02:
         ac:6e:c0:b9:c4:3e:af:b3:1b:a7:7d:70:3e:5e:03:9e:13:d3:
         7f:f9:97:9b:04:f9:a8:47:2a:5f:5b:3a:a3:39:e9:5d:88:82:
         43:9f:f7:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ9WVJhSgNPxXqmUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NmRlMzQ3M2QtN2IxYS00YzE3LTliZmMtNmU3OTJjODVhMzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNqPSDBjUjlSnlbhbODY0N0SZIdAI5Zfjq+t
K2wKaC8QP1UEeWJh/mhNS8Sd68e/Wi158ybsIIraCg5kHOcBJbLn2q97C7nvOL5s
qkHnizwSJy21B8Ys+Ij9K1pcTCIJFFjwbWlOkAQGWrUDDE6rdknsP0tSEIcA6QMp
3BAKy39j0xcvawFqPFdkVuE26xiHRoaGCYzj6ViEZ2qU1zj8wGR4mJsmAcm1rYw+
iOIuSKA0K2aja/RFzgmt9rGNLnhEPbED9CAnXYQg1L5KfAOGwNxe5pAS1rK+VmWf
RgNUBd5SwD42S7WU+bDgc9w4hXi6SI5NnqwDSfYkdapOQMHeBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOnXcAOUZ8u1mzF65AWiqoAbNJYQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZmJkMTBlMWQtMzEwMy0z
MGUxLTgxZDEtZjcxY2NlZWVhNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBb/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1K31/JSnqreJEmcN0e4ACNg04BjxyqeSDPAwxh1umJsz6zAK3fPG2f
LiaLy4b6oocZUYr9F6TlGtshVhp1+zpe2/nRJtNc2I6OVqflIi+YAlWBWNwSBJV/
QlWIHRxDWmIFWNQCUAdc0O+zp6KwnLQmXkdmfIa5U48OhuOchWuQZzvhV8fs4HeD
J/CukRntHZ4tiAs38xCUFqd4OtoCC/DrMuBxc2d2thgkGZ0WbFBWUbW62HzBZXlZ
PCWQoYx3OtHF1ixd9e3L+3w5fqt3sGSYZaL2fXUXAqxuwLnEPq+zG6d9cD5eA54T
03/5l5sE+ahHKl9bOqM56V2IgkOf91Y=
-----END CERTIFICATE-----