Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1f804e31-dc31-3a84-8c54-0164b575bad9.roa
File:                     1f804e31-dc31-3a84-8c54-0164b575bad9.roa (raw, json)
Hash identifier:          5VXE9gjS9ORbq5Rm7/pdKNp9OMpp1LbwJBEsqzKyU3c=
Subject key identifier:   72:51:EB:F0:63:46:46:BC:8C:43:E4:B2:2C:4A:92:3A:4F:88:DE:D8
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858430A17DE48C1122707901CE380
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1f804e31-dc31-3a84-8c54-0164b575bad9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:17:de:48:c1:12:27:07:90:1c:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=050e9c2b-fd1d-4222-bdc1-8edf382b189a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:18:be:8d:7a:9a:3a:40:13:14:73:c5:95:
                    4c:a1:c3:02:cb:d0:39:17:01:9e:6e:32:2f:b1:42:
                    6f:5d:54:fa:b4:ea:e3:e9:43:0d:50:a9:5a:6f:90:
                    e4:a4:85:d4:79:39:62:2a:6f:08:43:ee:ee:91:52:
                    25:8f:6a:20:59:c5:d9:c5:ab:e3:f3:51:3d:83:de:
                    db:21:71:06:f8:87:8b:fa:bd:8f:e6:ca:a8:86:60:
                    01:0f:29:c0:d5:78:7b:87:24:30:7d:18:8b:56:d3:
                    de:66:7d:f4:07:3c:5e:8a:90:85:cb:a2:28:4f:42:
                    85:92:7d:12:92:d5:b6:09:fa:83:9f:34:82:59:32:
                    01:67:63:b0:ef:19:20:2b:5c:08:50:fa:86:a2:8f:
                    ea:78:6a:52:5a:59:27:84:49:ee:35:c1:53:bf:3c:
                    45:cf:3b:c7:63:59:c0:ba:5f:6f:4c:e6:9b:7e:6f:
                    52:76:8e:c4:02:b8:b4:73:aa:40:b0:21:f3:23:79:
                    cd:1e:5a:73:54:e6:e7:f0:80:63:5d:2b:9e:48:66:
                    f0:7b:62:c0:5c:73:67:aa:15:e8:5a:af:27:5f:b7:
                    94:34:66:bd:40:3a:46:d8:8e:15:b3:fd:ba:8e:75:
                    5a:6a:fe:da:62:15:47:2e:ff:3d:e2:dc:67:dd:4e:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:EB:F0:63:46:46:BC:8C:43:E4:B2:2C:4A:92:3A:4F:88:DE:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1f804e31-dc31-3a84-8c54-0164b575bad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:94:3a:4b:32:03:0a:7f:5b:b0:1c:f8:34:2d:e0:c9:2c:49:
         a1:2b:db:6a:b2:d0:5c:14:47:00:b5:55:a2:8d:f5:78:13:80:
         b6:7d:0a:7a:31:fa:76:10:83:cf:1d:00:3a:62:31:74:d0:35:
         62:1c:69:d6:19:9c:c6:f4:e2:69:d4:e6:55:b0:66:f4:6f:fb:
         dd:72:7e:92:97:d2:b6:17:ac:0f:05:71:7d:02:cf:a2:f6:70:
         72:e0:64:79:20:df:cf:b9:89:b0:18:75:82:2b:a6:95:0a:30:
         ac:cb:da:1e:67:04:c0:b8:83:db:1d:eb:0a:ca:b1:a4:b6:cc:
         6c:0e:be:ea:27:4d:6c:72:3e:21:c3:03:79:e7:b3:c9:ce:3c:
         3f:95:e3:fd:cb:76:2e:69:86:cf:7c:9e:c4:1d:cd:90:b9:ea:
         90:40:9f:89:89:09:48:bc:3e:fa:31:c8:33:36:52:16:d7:ad:
         19:7f:e7:db:4c:f7:f2:c3:5e:5c:61:73:fb:4f:92:d6:a2:73:
         b1:79:32:ef:d0:cb:6c:49:05:2b:55:f6:f2:65:9c:b7:37:1f:
         1e:05:03:c9:30:61:35:44:d6:b3:15:fc:58:d2:ae:ab:fb:05:
         fa:42:57:07:2a:f0:1c:d7:24:3b:87:13:ee:cd:2c:67:14:a5:
         83:ae:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----