Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7e9015ad-b4ba-35ba-a88a-37a3eaff1f60.roa
File:                     7e9015ad-b4ba-35ba-a88a-37a3eaff1f60.roa (raw, json)
Hash identifier:          cXWxA4QGbl8fjsQM3Rv7BhFDGygJIyv4FDg4GgchiIM=
Subject key identifier:   7B:38:F5:E8:64:5D:0A:8F:63:05:6E:12:6A:9B:48:70:AC:AC:E6:29
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584309ED1EC92DE9F1BF5A001C80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7e9015ad-b4ba-35ba-a88a-37a3eaff1f60.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.26.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ed:1e:c9:2d:e9:f1:bf:5a:00:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9b72a064-aad3-45d5-9c4e-59380f924121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:54:47:bc:96:0f:62:74:06:f0:35:48:b9:
                    f3:7b:e9:f5:7c:b9:6a:74:0e:ed:79:04:15:65:18:
                    46:fd:a2:31:2f:03:75:31:f6:8c:c4:34:7d:10:c4:
                    d1:43:c9:27:24:b0:a6:d4:ed:2d:38:9b:dd:a3:45:
                    61:db:50:7a:b0:2e:1f:62:ea:dc:7e:54:b2:6c:5b:
                    07:b0:43:14:61:a2:3e:9c:f5:c9:6a:25:36:53:b9:
                    7f:fd:20:d8:2e:ed:b6:67:ec:11:b3:98:e4:db:df:
                    87:f6:55:6b:05:69:0e:77:c5:b1:2a:56:ee:b4:30:
                    85:ae:a9:c2:55:59:24:95:97:f6:0e:f7:27:f0:89:
                    f3:11:e9:4c:48:b7:4e:22:dc:d9:e7:44:c1:d5:9c:
                    14:b1:e1:74:14:03:2e:ea:3c:b0:84:48:0a:b1:5e:
                    0a:c8:38:61:23:b2:18:5c:4f:4a:8d:c2:aa:36:97:
                    92:cd:20:3d:9e:00:9f:f3:fa:80:77:b3:0d:e3:94:
                    c2:55:ec:a1:d7:72:ef:7f:2b:35:46:0c:b5:ce:d8:
                    69:df:25:9b:54:e2:db:0a:43:f2:72:ad:bc:e2:0d:
                    b7:b7:83:df:e6:f8:fb:90:5c:5a:5c:5e:78:94:59:
                    21:e9:8d:e6:95:19:4f:ff:e3:8f:5c:e8:5a:ef:d8:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:38:F5:E8:64:5D:0A:8F:63:05:6E:12:6A:9B:48:70:AC:AC:E6:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7e9015ad-b4ba-35ba-a88a-37a3eaff1f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:9d:12:88:f3:82:a2:8b:3c:9c:ee:6e:eb:e9:72:39:90:ee:
         28:de:23:12:b8:5c:cd:97:1d:8b:d4:35:22:89:fd:26:91:d4:
         c7:17:dc:b8:f0:fa:3b:6f:7c:eb:ca:eb:91:23:22:89:00:7b:
         3a:ce:56:c5:e7:6d:06:78:6b:20:0d:bb:81:3b:3c:4d:0f:ba:
         93:33:43:69:1d:8a:f6:4c:b9:c0:3a:20:12:98:ef:c8:a3:d4:
         1d:8e:58:86:64:13:53:e9:b4:a8:27:21:ed:98:2d:e7:f7:04:
         70:ff:63:f8:00:29:81:d1:54:5c:77:d1:de:58:82:bd:43:e8:
         d2:4a:fb:42:4f:0b:4a:cc:64:03:06:60:43:fc:f8:d2:54:47:
         8d:e5:cb:b3:d6:eb:0d:b4:30:eb:29:a2:26:e0:0a:83:94:22:
         56:18:0b:f2:87:c9:21:0a:d8:8e:cc:21:91:34:8a:d8:f8:6d:
         44:d3:dc:f0:3e:50:dd:93:f5:4d:55:29:65:e8:b0:c5:38:58:
         c4:6f:0c:5a:6d:78:11:5f:28:ed:20:9e:06:b6:ba:d7:21:17:
         81:73:35:85:a3:9a:e3:43:2b:00:5a:f3:8d:1d:b7:3f:70:ac:
         13:98:94:ab:09:94:14:fd:0f:d8:a5:6c:47:0e:c8:60:0e:27:
         5f:36:06:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ7R7JLenxv1oAHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OWI3MmEwNjQtYWFkMy00NWQ1LTljNGUtNTkzODBmOTI0MTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07RUR7yWD2J0BvA1SLnze+n1fLlqdA7teQQV
ZRhG/aIxLwN1MfaMxDR9EMTRQ8knJLCm1O0tOJvdo0Vh21B6sC4fYurcflSybFsH
sEMUYaI+nPXJaiU2U7l//SDYLu22Z+wRs5jk29+H9lVrBWkOd8WxKlbutDCFrqnC
VVkklZf2Dvcn8InzEelMSLdOItzZ50TB1ZwUseF0FAMu6jywhEgKsV4KyDhhI7IY
XE9KjcKqNpeSzSA9ngCf8/qAd7MN45TCVeyh13Lvfys1Rgy1zthp3yWbVOLbCkPy
cq284g23t4Pf5vj7kFxaXF54lFkh6Y3mlRlP/+OPXOha79gHPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHs49ehkXQqPYwVuEmqbSHCsrOYpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvN2U5MDE1YWQtYjRiYS0z
NWJhLWE4OGEtMzdhM2VhZmYxZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBcaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSdEojzgqKLPJzubuvpcjmQ7ijeIxK4XM2XHYvUNSKJ/SaR1McX3Ljw
+jtvfOvK65EjIokAezrOVsXnbQZ4ayANu4E7PE0PupMzQ2kdivZMucA6IBKY78ij
1B2OWIZkE1PptKgnIe2YLef3BHD/Y/gAKYHRVFx30d5Ygr1D6NJK+0JPC0rMZAMG
YEP8+NJUR43ly7PW6w20MOspoibgCoOUIlYYC/KHySEK2I7MIZE0itj4bUTT3PA+
UN2T9U1VKWXosMU4WMRvDFpteBFfKO0gnga2utchF4FzNYWjmuNDKwBa840dtz9w
rBOYlKsJlBT9D9ilbEcOyGAOJ182Btk=
-----END CERTIFICATE-----