Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/63f0f0e3-018c-3550-bcd6-3cc998d799ad.roa
File:                     63f0f0e3-018c-3550-bcd6-3cc998d799ad.roa (raw, json)
Hash identifier:          4XQwt9hlnINjSUkYoZiMfNJPF0X5IsOLLmcpe9kre+o=
Subject key identifier:   B3:90:C8:09:1E:71:01:B0:15:DA:C7:77:B9:17:5C:A7:23:64:0F:91
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285841378742B22701B4E14C46F680
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/63f0f0e3-018c-3550-bcd6-3cc998d799ad.roa
Signing time:             Mon 13 Mar 2023 12:00:00 +0000
ROA not before:           Mon 13 Mar 2023 12:00:00 +0000
ROA not after:            Sun 15 Jun 2025 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.24.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:37:87:42:b2:27:01:b4:e1:4c:46:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 13 12:00:00 2023 GMT
            Not After : Jun 15 04:00:00 2025 GMT
        Subject: CN=33fe28c0-b905-4ced-b62b-e459cc93063d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:31:1e:a9:f0:54:92:11:bd:6d:94:f7:e7:c3:
                    bd:a3:41:68:94:5a:49:27:00:e9:37:e5:2a:b8:e4:
                    c6:bf:08:08:c7:a9:12:c8:de:7c:86:93:b9:47:74:
                    ce:92:1a:a7:fa:7a:34:be:1b:6c:b8:2d:94:4e:de:
                    0a:8f:13:22:81:1f:dd:37:71:d8:f5:2f:df:df:4b:
                    03:cd:da:35:6c:0d:fb:bc:3b:e4:17:8e:8a:23:76:
                    55:17:56:90:c6:1f:15:99:71:c0:9f:07:41:a6:47:
                    d9:60:60:ae:87:b6:26:02:9c:28:af:67:75:e2:06:
                    78:aa:8c:24:76:63:ed:df:e1:b3:8b:35:41:4c:d4:
                    93:96:b8:18:3d:0b:40:86:61:f2:04:32:59:ff:6b:
                    92:e3:d4:a0:0b:5a:78:f1:65:97:7e:35:77:8c:86:
                    3b:a1:ef:7a:64:30:af:11:fd:fb:28:c5:56:ba:9f:
                    1f:b0:d0:cc:87:33:c8:ba:e4:77:98:ad:61:29:d4:
                    11:79:fa:a3:ef:fe:44:c7:5b:68:b8:a8:ae:82:43:
                    4e:33:38:3e:5e:90:b8:34:32:22:dd:26:00:e4:1c:
                    dc:0d:b4:2e:2f:a1:59:77:47:87:25:be:54:d2:47:
                    22:bc:32:25:68:e2:7d:10:28:2d:95:08:da:1d:0f:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:90:C8:09:1E:71:01:B0:15:DA:C7:77:B9:17:5C:A7:23:64:0F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/63f0f0e3-018c-3550-bcd6-3cc998d799ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:98:6e:96:af:66:69:da:a4:55:8d:03:ee:04:0e:68:81:a3:
         59:e5:e3:cd:3c:fe:d3:5c:ea:0d:c5:82:b8:73:5e:f4:dd:cf:
         05:ad:d1:9a:88:e4:85:86:d9:15:0a:ac:b8:80:ec:5e:31:b4:
         dc:bb:dd:b3:89:e8:03:ea:07:03:21:6a:9e:58:63:61:b9:9b:
         dc:b6:b2:0d:34:bc:df:f8:e5:b4:b9:bf:21:4a:e5:0d:50:86:
         c4:bc:7e:69:1f:03:dd:af:38:cf:a9:1f:8d:02:e0:85:d7:e9:
         6c:47:5c:1d:5c:fd:bb:c9:b8:43:8a:d0:27:54:23:dc:3a:80:
         76:57:d4:4d:ec:d0:77:0e:31:03:7c:3d:b6:5f:12:57:60:79:
         53:e3:5c:2e:76:4a:60:06:a0:a2:01:a0:1f:9a:fd:e5:83:62:
         ab:81:08:6c:00:87:3a:38:5d:66:19:d1:86:19:93:ce:8c:34:
         a4:cb:ba:00:9b:eb:5e:10:ae:08:2c:6f:08:43:19:f6:1e:35:
         3b:31:fc:cf:ea:44:64:4b:30:75:ee:59:d7:b4:9f:1b:12:30:
         09:a8:65:4a:4a:df:de:2f:b0:23:cb:d1:90:df:d9:06:25:99:
         0d:1f:48:44:76:1a:96:22:ff:f6:8d:47:47:15:e7:4a:4e:84:
         23:90:b2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----