Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7278ce1f-fcf9-3d2d-9559-c74af1ad8105.roa
File:                     7278ce1f-fcf9-3d2d-9559-c74af1ad8105.roa (raw, json)
Hash identifier:          68SOCq5mlMw66CXg91/JJXWqM0JO5XWdrVL9pONavrM=
Subject key identifier:   B5:C4:16:2B:84:7F:C3:51:E5:8A:85:D8:D3:A6:C9:AA:50:DA:F2:44
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858430A115BC97F2D47FE753E01C0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7278ce1f-fcf9-3d2d-9559-c74af1ad8105.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:11:5b:c9:7f:2d:47:fe:75:3e:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5f33b5cb-7b0d-4591-b780-ebe950ee1475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d2:fa:a0:50:60:dd:d3:0b:34:7c:28:c3:9d:
                    e6:34:c6:0c:70:ad:16:3f:2d:e2:de:9e:b9:81:1a:
                    12:f4:b1:80:c5:65:9b:b1:4d:92:45:03:c4:a3:d8:
                    0e:ba:34:2c:bc:a6:b0:63:56:6c:7b:67:12:3f:14:
                    52:4e:89:fb:1c:ba:9c:f0:24:d7:6a:15:ff:87:57:
                    5c:5c:ad:69:b5:38:df:92:47:66:53:b5:24:69:4b:
                    5b:5a:1f:3a:f1:8b:d9:fb:18:8a:7a:2f:a2:31:6f:
                    4e:3a:8c:9c:a8:d2:fa:2e:71:8b:c5:c0:05:a1:3b:
                    27:2f:7f:d4:83:ab:dd:d9:40:59:f1:07:69:79:07:
                    12:96:9e:e2:e5:3a:57:ec:29:43:93:fa:50:1c:52:
                    0d:fb:65:76:ca:92:e0:93:1f:0d:d5:5b:8c:7a:1b:
                    b9:5b:81:35:34:03:f1:dc:b7:80:61:a4:53:73:19:
                    b9:89:87:1c:9e:d2:9f:90:c5:4d:92:cc:0b:e3:2a:
                    3a:5b:66:9c:e1:03:ff:06:a8:e7:91:7a:1a:d7:86:
                    d9:bf:f0:a9:f5:ab:48:45:c5:74:b9:a9:c6:a9:e6:
                    92:77:f0:99:f8:f1:ef:bf:5d:6d:23:2a:b1:6a:26:
                    a7:ab:08:2d:59:8f:4f:cc:d8:4c:02:23:ec:04:ff:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C4:16:2B:84:7F:C3:51:E5:8A:85:D8:D3:A6:C9:AA:50:DA:F2:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7278ce1f-fcf9-3d2d-9559-c74af1ad8105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:37:09:54:d9:fa:8c:85:7f:dd:d1:54:d2:85:d3:24:9f:fc:
         31:40:c7:c3:cd:fa:c9:69:dd:a6:8b:7e:cf:13:ec:f9:a5:79:
         fd:78:45:03:c9:d5:f1:7f:36:c8:7e:f0:15:1f:b1:ac:4f:c1:
         a7:1c:6a:f5:f1:6b:ae:0c:cd:90:c2:55:44:7b:f5:98:bd:c1:
         ec:15:ac:7e:28:95:1b:44:8e:4c:87:0b:b3:8e:84:85:ff:2a:
         17:0c:c4:dc:43:ea:a0:7d:7f:18:34:61:1b:fb:79:73:bd:7b:
         6e:b7:aa:ce:7f:fe:07:07:17:2e:11:79:cd:68:99:fa:56:c4:
         a1:6f:dd:ce:80:7c:1d:c6:d8:b7:31:f8:99:67:c2:f3:69:0d:
         6a:6e:3e:b7:12:86:19:9b:9e:4b:01:58:12:37:37:3c:21:93:
         64:3f:3b:15:40:42:60:0e:89:8a:1b:10:ba:2e:86:44:cc:f8:
         fb:ad:8d:ca:07:3e:b9:4b:1f:0e:e5:59:56:19:13:49:50:a5:
         2c:aa:57:b9:d9:02:b2:b4:08:2b:ce:e5:e7:85:58:89:b1:5e:
         0e:5e:37:3a:a9:93:c5:a1:3d:7b:4d:04:c2:a5:63:8e:e9:8f:
         f4:b2:60:02:85:ab:05:67:88:40:8e:a5:b7:76:e6:ee:39:3c:
         25:ef:e6:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKEVvJfy1H/nU+AcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NWYzM2I1Y2ItN2IwZC00NTkxLWI3ODAtZWJlOTUwZWUxNDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09L6oFBg3dMLNHwow53mNMYMcK0WPy3i3p65
gRoS9LGAxWWbsU2SRQPEo9gOujQsvKawY1Zse2cSPxRSTon7HLqc8CTXahX/h1dc
XK1ptTjfkkdmU7UkaUtbWh868YvZ+xiKei+iMW9OOoycqNL6LnGLxcAFoTsnL3/U
g6vd2UBZ8QdpeQcSlp7i5TpX7ClDk/pQHFIN+2V2ypLgkx8N1VuMehu5W4E1NAPx
3LeAYaRTcxm5iYccntKfkMVNkswL4yo6W2ac4QP/BqjnkXoa14bZv/Cp9atIRcV0
uanGqeaSd/CZ+PHvv11tIyqxaianqwgtWY9PzNhMAiPsBP8NxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXEFiuEf8NR5YqF2NOmyapQ2vJEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNzI3OGNlMWYtZmNmOS0z
ZDJkLTk1NTktYzc0YWYxYWQ4MTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACw3CVTZ+oyFf93RVNKF0ySf/DFAx8PN+slp3aaLfs8T7Pmlef14RQPJ
1fF/Nsh+8BUfsaxPwaccavXxa64MzZDCVUR79Zi9wewVrH4olRtEjkyHC7OOhIX/
KhcMxNxD6qB9fxg0YRv7eXO9e263qs5//gcHFy4Rec1omfpWxKFv3c6AfB3G2Lcx
+JlnwvNpDWpuPrcShhmbnksBWBI3Nzwhk2Q/OxVAQmAOiYobELouhkTM+PutjcoH
PrlLHw7lWVYZE0lQpSyqV7nZArK0CCvO5eeFWImxXg5eNzqpk8WhPXtNBMKlY47p
j/SyYAKFqwVniECOpbd25u45PCXv5jo=
-----END CERTIFICATE-----