Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f5c3aa83-422b-33f0-b2ef-56ea4be1e08e.roa
File:                     f5c3aa83-422b-33f0-b2ef-56ea4be1e08e.roa (raw, json)
Hash identifier:          RqfHMUevP6UGQ473K1FMTxAXdDl8spLITWUtJiqRUus=
Subject key identifier:   62:C7:F1:C3:42:DE:52:80:DD:23:31:8F:6D:9E:6D:88:9E:90:DA:7E
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584309FA2A1AF00F3461CFF3D180
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f5c3aa83-422b-33f0-b2ef-56ea4be1e08e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fa:2a:1a:f0:0f:34:61:cf:f3:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=97b0a106-0b87-47f6-b89c-b393e8b00284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:73:51:39:1f:c7:1e:65:7c:d1:91:af:7f:
                    aa:f5:3a:a2:55:2c:f8:6e:09:99:f3:ca:d3:d2:5c:
                    0f:35:ff:ae:c7:1b:d3:92:69:07:0a:7d:b3:c1:3c:
                    ae:55:42:3f:b8:54:47:7a:46:83:ca:e2:40:f5:c8:
                    fd:6d:ac:3b:84:91:30:7a:6d:14:1f:90:1f:3c:a1:
                    ec:81:10:b3:93:9d:cb:32:56:11:8c:62:f8:54:39:
                    41:7d:bb:c2:e2:d0:3f:e9:89:7d:00:1a:88:c8:eb:
                    11:78:3e:ae:0b:3a:19:c9:bd:cd:42:5d:87:0a:bb:
                    99:5d:ce:19:95:b7:70:6c:11:fc:1a:ee:1a:e9:b5:
                    98:a0:e0:e0:50:fb:96:34:fb:6b:af:40:f1:fc:91:
                    d5:b4:08:c5:4a:6f:fe:dc:e9:e2:d6:d5:1e:63:8f:
                    87:87:69:97:1b:25:a4:d8:da:88:f2:7e:ea:22:a8:
                    9f:9f:d1:dc:e3:5e:ca:f0:07:b7:3d:eb:2b:1e:12:
                    a5:c2:11:2f:fb:0b:8a:96:e6:f2:9a:17:b7:5a:ff:
                    99:14:78:2b:be:0a:6e:63:7c:87:ca:2e:d6:0b:1b:
                    5a:a9:1f:30:c5:32:0f:06:0a:73:d1:a4:43:82:2b:
                    99:aa:21:96:c6:19:4b:78:1b:6e:b8:4c:b6:df:ca:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C7:F1:C3:42:DE:52:80:DD:23:31:8F:6D:9E:6D:88:9E:90:DA:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f5c3aa83-422b-33f0-b2ef-56ea4be1e08e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:28:bc:df:b0:1d:c1:35:c5:96:bb:53:60:42:a4:52:47:
         54:38:3b:c5:6a:98:26:0f:dc:3b:71:ed:20:94:0c:3a:47:c3:
         e2:12:79:4f:55:26:c4:97:0b:ed:f7:58:f7:3c:7d:ec:6b:b2:
         3e:c4:b4:ac:79:52:c4:11:b8:af:b4:45:27:66:c6:5c:27:7b:
         1d:fb:af:0f:40:74:bc:34:1f:ff:c5:a1:c1:ae:70:67:9a:7b:
         8e:b2:b3:e3:8d:c9:53:bd:82:5b:96:90:d8:e3:59:3f:ad:b2:
         99:88:73:04:2d:8f:84:4a:3f:e0:15:52:41:21:69:26:8f:7b:
         fd:99:71:0d:87:0d:24:35:b6:4a:b6:09:36:73:e7:35:f8:a9:
         50:d1:c5:b7:96:c7:13:b3:e6:f3:5a:0c:9a:86:9a:80:2b:3b:
         0b:8f:c8:51:01:99:92:67:a9:d4:37:05:75:6c:94:9a:4a:39:
         5d:95:fc:28:df:05:6c:78:84:fd:c2:a3:fd:7e:65:39:9d:5e:
         eb:4e:6e:10:5f:71:0a:dd:bb:7f:53:47:73:7f:46:4c:e1:ff:
         0c:89:26:6a:6f:49:21:f7:24:cb:5c:e8:17:f0:83:02:36:86:
         cb:79:ac:0d:c9:0e:a4:fc:b7:7c:cd:69:82:76:9b:0f:37:3d:
         f6:32:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----