Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/51bdc394-ffc8-3882-ad11-86c4754f2d85.roa
File:                     51bdc394-ffc8-3882-ad11-86c4754f2d85.roa (raw, json)
Hash identifier:          DzjqsBU4uvvoc2LtZMDR3gJQrPXh4zt5leSE5s9mLBw=
Subject key identifier:   2F:1B:4F:7D:17:CB:6A:95:66:66:43:2C:22:90:75:86:77:EC:F4:4B
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584309FD1882BD1716F315461B00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/51bdc394-ffc8-3882-ad11-86c4754f2d85.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.146.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fd:18:82:bd:17:16:f3:15:46:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=85288ef3-3420-48e7-9480-b6f9f64fe8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:3d:8d:69:0b:c4:f8:6e:bd:1f:ff:8f:9d:
                    91:99:1d:1b:a7:ae:37:0d:b3:c8:d9:18:2f:03:82:
                    45:98:22:a3:02:bb:ca:1a:5c:61:38:dc:1d:26:bb:
                    d2:7e:53:52:58:65:78:90:54:56:34:bf:c2:92:0e:
                    ec:1d:ec:87:9a:12:a4:a4:ad:84:84:6e:31:fc:a2:
                    1c:87:82:7f:43:4f:8a:cb:4e:a9:26:41:68:2f:45:
                    34:f2:98:a5:a8:33:10:92:3a:6f:c8:16:4e:4f:95:
                    2a:6e:0c:80:93:d9:4d:fc:3f:c9:c2:04:2a:8d:79:
                    1e:28:b8:ec:ea:41:3a:b3:6a:83:14:fa:41:85:90:
                    b5:dc:f6:59:5f:06:f5:5b:a4:74:1d:ba:91:93:f4:
                    55:f0:bf:83:68:ea:b4:ef:b1:af:1a:08:10:49:a4:
                    11:7f:72:c5:35:6c:dd:97:e3:63:c4:a4:eb:87:f2:
                    9e:c5:f1:22:c7:77:d3:ac:6f:65:3a:0e:4a:df:4c:
                    7f:e5:97:35:15:d4:b2:6e:54:63:73:01:fd:a5:af:
                    d5:b5:48:37:27:ab:97:4f:a5:60:c1:1c:d8:2d:65:
                    52:15:71:dd:58:c6:82:1b:57:5f:70:d4:95:99:6b:
                    8b:0e:5a:34:f9:38:9c:1b:7e:a2:c0:a1:ec:f3:21:
                    4d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1B:4F:7D:17:CB:6A:95:66:66:43:2C:22:90:75:86:77:EC:F4:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/51bdc394-ffc8-3882-ad11-86c4754f2d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:93:2e:d8:3b:c8:32:c8:f0:d6:4e:2f:49:56:b5:a3:2f:
         3e:4c:e8:8d:d6:8a:d6:26:bd:5d:42:75:74:5b:6f:64:02:5b:
         63:d5:eb:41:2b:b9:b3:8c:05:96:17:60:ff:c5:53:f9:ff:b9:
         2f:29:ee:97:1a:17:f2:aa:ef:1b:f3:6c:d1:c2:a4:fb:bc:1e:
         a1:5c:d6:ac:b0:bb:be:bb:64:6e:6d:75:a4:d8:10:88:e7:39:
         24:7a:5f:af:7c:96:53:51:ad:c0:30:16:26:25:df:03:24:b1:
         24:3e:3d:46:b8:8e:25:c2:97:fd:fc:0b:e6:dc:2e:a1:37:8e:
         a6:59:e6:dc:87:32:60:2f:2c:44:24:a2:82:a9:99:6b:86:3f:
         09:34:14:37:02:57:99:cf:07:32:ec:65:52:35:27:3d:bd:68:
         21:6b:dd:97:59:5b:83:7c:e6:cb:53:88:14:0d:64:c6:c8:32:
         1b:fb:f6:57:a5:60:6a:52:c0:b3:41:3e:21:06:01:cc:10:ce:
         2c:10:80:ee:8c:92:4e:f7:2c:c4:d8:9f:ef:b0:b7:eb:c3:43:
         17:d5:b3:ff:bc:92:27:c4:04:c8:58:93:07:6e:a3:e5:6f:73:
         d7:eb:f1:68:aa:5a:0d:54:23:d2:30:13:68:0f:e3:59:dc:42:
         3c:88:d3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----