Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/03ea3de0-056d-3af3-adb9-34487bdf186d.roa
File:                     03ea3de0-056d-3af3-adb9-34487bdf186d.roa (raw, json)
Hash identifier:          QdGQBlutjnwnw/rUFJmK07Uk9y3gZzvy48SlmX18/6Q=
Subject key identifier:   25:A3:BC:7D:98:4E:C6:7E:3D:D4:7E:A5:CC:0D:D7:66:2D:D6:7F:58
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584137877E658F82F10CA7A96D00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/03ea3de0-056d-3af3-adb9-34487bdf186d.roa
Signing time:             Mon 13 Mar 2023 12:00:00 +0000
ROA not before:           Mon 13 Mar 2023 12:00:00 +0000
ROA not after:            Sun 15 Jun 2025 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:37:87:7e:65:8f:82:f1:0c:a7:a9:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 13 12:00:00 2023 GMT
            Not After : Jun 15 04:00:00 2025 GMT
        Subject: CN=65e93296-d2bb-46b8-93dd-7cb74bf59456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e2:10:d6:14:7e:53:4d:56:15:10:ea:1a:f4:
                    ea:e8:dd:88:9c:41:80:0c:f0:01:30:1a:31:9c:48:
                    57:ab:b8:9d:c4:5a:a2:a1:c7:d0:d2:ae:63:8f:21:
                    3f:9f:77:da:f6:d6:7e:aa:d4:7c:76:a2:a1:d1:0d:
                    f5:c8:24:5e:48:50:09:ad:f6:61:05:d3:68:1a:69:
                    da:c0:95:e3:81:7b:c5:2a:fd:03:84:9c:98:0a:8d:
                    b5:03:4e:ad:59:5f:10:02:bb:39:a0:a8:65:28:c2:
                    8f:38:0d:56:5a:0d:9b:92:4d:7f:4a:5a:d3:2e:f5:
                    88:e1:12:6f:5c:61:45:63:52:18:c4:63:aa:2c:31:
                    dc:48:90:8b:91:de:67:b4:3c:d2:08:f2:59:24:75:
                    37:02:e2:d2:0e:ef:51:75:e1:de:d9:6b:2e:02:0a:
                    17:ad:32:f2:d4:e5:c2:8d:79:85:62:0c:fa:84:65:
                    24:f6:0f:1c:34:0b:ab:0b:94:9d:78:84:88:66:b2:
                    11:91:6f:31:16:68:eb:d6:34:c9:c7:18:14:22:4f:
                    dc:f2:a1:1c:e6:45:58:40:fc:dd:21:92:85:e6:d2:
                    02:3c:db:81:fa:a6:6a:a6:f5:91:4b:50:bc:03:ea:
                    5d:26:d7:ad:21:1a:57:7d:14:4f:d8:e9:5e:96:9f:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A3:BC:7D:98:4E:C6:7E:3D:D4:7E:A5:CC:0D:D7:66:2D:D6:7F:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/03ea3de0-056d-3af3-adb9-34487bdf186d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:84:96:fc:78:20:46:e5:4b:9b:5b:3e:52:cd:d1:6d:5e:
         53:89:3a:15:70:3d:54:46:c3:47:2c:88:32:b9:a7:ba:98:93:
         8c:e0:3e:fb:f1:31:e8:cd:eb:aa:30:3a:22:22:45:f5:35:3a:
         a5:73:06:6c:d1:9d:eb:ee:28:5f:e0:89:d1:7a:a1:ab:c5:19:
         0a:e7:64:01:8e:df:d0:52:d8:6c:18:6d:6e:1b:80:7e:65:a5:
         a2:60:9b:b3:32:45:7b:3c:53:d0:26:b8:3c:05:6d:c8:d3:4b:
         55:08:44:06:87:ad:15:2e:ac:72:7a:a8:bc:3a:d6:e1:0e:2f:
         e3:ff:68:61:25:27:eb:ec:c6:9a:6e:ee:ab:96:86:3e:ba:70:
         e2:13:f3:6d:43:7d:d1:32:a2:79:fd:a7:c2:1a:72:8b:e2:79:
         fa:78:5d:71:17:7e:2b:fc:10:d0:12:7b:78:3b:5f:b1:82:26:
         52:45:dc:51:ab:b6:15:52:7f:6e:58:7f:2b:8a:45:39:09:44:
         55:ce:4b:37:44:e8:df:81:db:59:e1:03:cb:39:5d:1a:ba:6b:
         8e:da:05:24:da:c8:e8:78:e7:94:4f:4f:72:7c:8a:fb:73:0a:
         00:93:ad:9a:6f:63:a5:18:5c:db:8f:00:18:f5:b9:e1:4a:59:
         48:56:bd:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEE3h35lj4LxDKepbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTIzMDMxMzEyMDAwMFoXDTI1MDYxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NjVlOTMyOTYtZDJiYi00NmI4LTkzZGQtN2NiNzRiZjU5NDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheIQ1hR+U01WFRDqGvTq6N2InEGADPABMBox
nEhXq7idxFqiocfQ0q5jjyE/n3fa9tZ+qtR8dqKh0Q31yCReSFAJrfZhBdNoGmna
wJXjgXvFKv0DhJyYCo21A06tWV8QArs5oKhlKMKPOA1WWg2bkk1/SlrTLvWI4RJv
XGFFY1IYxGOqLDHcSJCLkd5ntDzSCPJZJHU3AuLSDu9RdeHe2WsuAgoXrTLy1OXC
jXmFYgz6hGUk9g8cNAurC5SdeISIZrIRkW8xFmjr1jTJxxgUIk/c8qEc5kVYQPzd
IZKF5tICPNuB+qZqpvWRS1C8A+pdJtetIRpXfRRP2Olelp8wGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWjvH2YTsZ+PdR+pcwN12Yt1n9YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMDNlYTNkZTAtMDU2ZC0z
YWYzLWFkYjktMzQ0ODdiZGYxODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBYTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACzZhJb8eCBG5UubWz5SzdFtXlOJOhVwPVRGw0csiDK5p7qYk4zgPvvx
MejN66owOiIiRfU1OqVzBmzRnevuKF/gidF6oavFGQrnZAGO39BS2GwYbW4bgH5l
paJgm7MyRXs8U9AmuDwFbcjTS1UIRAaHrRUurHJ6qLw61uEOL+P/aGElJ+vsxppu
7quWhj66cOIT821DfdEyonn9p8Iacoviefp4XXEXfiv8ENASe3g7X7GCJlJF3FGr
thVSf25YfyuKRTkJRFXOSzdE6N+B21nhA8s5XRq6a47aBSTayOh455RPT3J8ivtz
CgCTrZpvY6UYXNuPABj1ueFKWUhWvdc=
-----END CERTIFICATE-----