Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c0d553bf-63de-34f8-a7a5-84350bcb3013.roa
File:                     c0d553bf-63de-34f8-a7a5-84350bcb3013.roa (raw, json)
Hash identifier:          Yz1U9i0WBJy/m80jUHHUFfpJ5fmQRc/iiONRSnsnRaA=
Subject key identifier:   8E:FE:5C:DB:85:C4:C2:E1:44:11:7B:40:01:6D:A0:92:7D:D0:6C:61
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584309FC9E95200A0A888401C180
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c0d553bf-63de-34f8-a7a5-84350bcb3013.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.132.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fc:9e:95:20:0a:0a:88:84:01:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=280cda24-6dfd-4e6b-a960-6d9345af9c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:35:b3:02:b4:c7:ed:89:7d:d8:90:d3:ef:
                    92:e2:80:0a:eb:f9:41:8c:a5:27:b5:d1:1e:5d:de:
                    27:6c:23:af:71:b1:67:3a:92:fd:34:cb:23:d3:7c:
                    0c:bb:2e:c0:54:67:47:57:4e:de:8b:1c:7e:da:0a:
                    a1:ba:18:8c:7d:02:e3:7f:2e:e8:78:a9:b4:a9:0c:
                    7f:48:3a:f9:a6:e9:3b:ce:db:81:06:0c:33:d8:6d:
                    1e:24:79:56:db:98:50:51:61:18:1b:d2:dd:c8:c3:
                    05:dd:cb:b7:d8:e1:cf:e4:9d:69:ac:47:70:52:ad:
                    cb:5b:89:21:14:25:bf:f1:26:e6:d7:90:d6:64:56:
                    67:7b:a9:ef:6b:6c:32:49:54:f3:b0:c2:e6:fa:94:
                    47:31:0a:20:41:4f:83:62:8a:e6:d6:69:4b:aa:1c:
                    d3:49:36:b9:44:64:74:b5:be:52:eb:2e:b1:61:fc:
                    db:ef:5e:1f:de:0e:87:06:a0:8b:57:49:ba:0f:37:
                    7c:b5:be:ae:dd:ce:aa:37:f4:5d:84:39:a1:74:5e:
                    2b:b6:f1:40:20:7b:17:ca:36:6b:88:63:2e:a7:1d:
                    09:96:aa:30:e7:f2:8a:43:69:b5:77:58:71:f0:68:
                    db:0a:f5:f0:11:df:7d:3b:f3:be:1d:24:8a:49:5d:
                    ec:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FE:5C:DB:85:C4:C2:E1:44:11:7B:40:01:6D:A0:92:7D:D0:6C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c0d553bf-63de-34f8-a7a5-84350bcb3013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:59:3a:1e:87:32:71:c6:d2:56:84:f6:b4:da:10:55:2a:b9:
         7b:47:12:c8:ad:52:29:04:13:97:2b:c5:0b:85:15:17:23:56:
         c4:ff:c1:91:46:52:64:93:9e:e4:7d:00:25:15:75:a4:df:d9:
         8f:e2:6c:05:ab:5e:4b:49:4d:7a:0b:92:bd:a3:f2:66:d9:85:
         b0:ef:a1:2b:96:7e:3a:1c:23:15:14:56:77:6f:0e:04:14:e6:
         65:77:52:d0:b1:90:9b:e1:46:5f:a8:37:3f:e2:55:b2:14:96:
         0c:ae:21:c7:48:f4:54:5b:b6:ef:be:56:60:af:79:18:ba:f4:
         2e:63:96:d9:5e:64:40:1a:4c:46:aa:20:aa:0a:03:7b:6d:75:
         1e:46:23:3f:05:80:0e:31:0f:d3:e5:09:07:3d:d7:b8:ee:bf:
         c8:ab:1f:59:b4:b7:a8:ea:4e:47:c6:d0:ea:75:df:bd:d1:c3:
         5b:bb:b5:f9:92:1c:f3:a4:cc:c8:7f:42:b0:38:b3:17:da:df:
         93:08:b2:38:d4:c0:f4:1f:a2:24:46:e4:0c:73:ff:a5:5c:51:
         f6:c5:5f:12:d1:f1:67:31:a5:de:71:79:96:b6:be:c7:ec:18:
         fd:db:3c:f0:9e:81:aa:46:a8:0e:c8:93:6f:a9:a2:a0:67:15:
         b3:98:42:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ/J6VIAoKiIQBwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MjgwY2RhMjQtNmRmZC00ZTZiLWE5NjAtNmQ5MzQ1YWY5YzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfg1swK0x+2JfdiQ0++S4oAK6/lBjKUntdEe
Xd4nbCOvcbFnOpL9NMsj03wMuy7AVGdHV07eixx+2gqhuhiMfQLjfy7oeKm0qQx/
SDr5puk7ztuBBgwz2G0eJHlW25hQUWEYG9LdyMMF3cu32OHP5J1prEdwUq3LW4kh
FCW/8Sbm15DWZFZne6nva2wySVTzsMLm+pRHMQogQU+DYorm1mlLqhzTSTa5RGR0
tb5S6y6xYfzb714f3g6HBqCLV0m6Dzd8tb6u3c6qN/RdhDmhdF4rtvFAIHsXyjZr
iGMupx0Jlqow5/KKQ2m1d1hx8GjbCvXwEd99O/O+HSSKSV3sdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7+XNuFxMLhRBF7QAFtoJJ90GxhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYzBkNTUzYmYtNjNkZS0z
NGY4LWE3YTUtODQzNTBiY2IzMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBZOh6HMnHG0laE9rTaEFUquXtHEsitUikEE5crxQuFFRcjVsT/wZFG
UmSTnuR9ACUVdaTf2Y/ibAWrXktJTXoLkr2j8mbZhbDvoSuWfjocIxUUVndvDgQU
5mV3UtCxkJvhRl+oNz/iVbIUlgyuIcdI9FRbtu++VmCveRi69C5jltleZEAaTEaq
IKoKA3ttdR5GIz8FgA4xD9PlCQc917juv8irH1m0t6jqTkfG0Op1373Rw1u7tfmS
HPOkzMh/QrA4sxfa35MIsjjUwPQfoiRG5Axz/6VcUfbFXxLR8Wcxpd5xeZa2vsfs
GP3bPPCegapGqA7Ik2+poqBnFbOYQgA=
-----END CERTIFICATE-----