Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/8f7605af-ea96-3dcb-8c11-c1eb7013b5ea.roa
File:                     8f7605af-ea96-3dcb-8c11-c1eb7013b5ea.roa (raw, json)
Hash identifier:          maoh8d6SYkk2fxfxU461GRym5XI2WrUk33VxTwk9+Zc=
Subject key identifier:   90:36:53:17:76:A8:29:E7:C4:AE:62:13:6F:49:AE:7D:1D:CA:08:7C
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328583D7D731F0D42354D9522CB2900
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/8f7605af-ea96-3dcb-8c11-c1eb7013b5ea.roa
Signing time:             Wed 06 Apr 2022 04:00:00 +0000
ROA not before:           Wed 06 Apr 2022 04:00:00 +0000
ROA not after:            Mon 08 Jul 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7d:73:1f:0d:42:35:4d:95:22:cb:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr  6 04:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2024 GMT
        Subject: CN=e69ed840-9063-4f6c-921b-69e687ebdbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:43:d8:c0:0e:68:43:12:08:5e:85:1f:1f:
                    c0:46:17:5e:77:ff:eb:f3:5b:d5:7c:2e:3b:9a:be:
                    ed:78:7e:41:06:0b:ff:cb:0c:f7:63:7b:9c:c5:6c:
                    f6:35:57:19:52:4f:54:8a:68:13:ac:47:58:43:5a:
                    b8:bf:b9:56:90:f7:bd:7c:61:aa:08:12:0f:f5:92:
                    e4:03:6f:6f:fc:bf:90:86:2c:5f:2f:df:19:31:fa:
                    10:0b:b9:9a:87:19:c8:31:84:a6:db:1c:7c:c1:03:
                    64:cc:e1:b6:e3:08:20:d3:57:b6:84:ca:65:c5:21:
                    3e:48:b2:64:f4:eb:f7:dd:e1:7a:84:d4:96:33:f5:
                    f6:6d:bc:e6:f4:59:38:64:48:8e:05:82:eb:a3:64:
                    6b:5c:24:af:38:d5:6b:e6:0c:e6:6e:be:bc:99:fc:
                    65:34:cb:b7:d7:53:5a:69:59:65:6c:20:d8:d1:08:
                    23:1a:0e:d1:89:48:72:a1:40:ed:89:63:96:46:33:
                    14:db:10:c8:e8:46:46:07:c9:f7:1a:fd:fd:f0:59:
                    82:76:82:5e:dd:ed:7b:54:1b:f8:f6:f5:00:e0:db:
                    f1:ca:5b:1d:4a:9c:49:be:ab:6e:b4:e7:95:64:92:
                    d9:f4:dd:76:86:7f:5a:a1:fb:af:80:bc:c7:a6:c0:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:36:53:17:76:A8:29:E7:C4:AE:62:13:6F:49:AE:7D:1D:CA:08:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/8f7605af-ea96-3dcb-8c11-c1eb7013b5ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b2:c6:5d:ac:f8:21:3b:19:d7:17:f2:a7:8d:e2:ac:8e:5a:
         5c:86:0e:b6:a6:ab:ec:8d:7c:36:a2:9e:ac:7a:f7:b6:44:c4:
         35:bd:80:7d:4f:62:66:b8:32:14:6b:ad:ec:2c:19:a4:bd:4d:
         dc:45:38:5a:c0:9b:67:e7:99:40:3e:6f:e5:4b:b3:5f:79:55:
         97:ba:37:28:28:4e:8e:ae:dd:46:c4:97:c4:08:20:1c:ba:a0:
         0a:f3:71:82:2f:e7:77:ed:a7:d2:e0:42:6e:d3:47:6f:c7:38:
         c7:0b:0c:cd:a7:b3:dd:af:4d:f1:40:6d:96:61:fc:5a:dd:a3:
         32:2b:0b:d3:c5:14:eb:95:a7:e0:60:00:80:0a:36:21:d0:8a:
         69:56:3f:39:b6:81:ca:5f:a1:b2:59:32:aa:04:9d:75:6c:85:
         0b:db:12:d1:77:a9:2e:cd:ec:6e:ae:c1:d6:59:f6:4b:4a:7a:
         dd:9a:5a:00:74:c9:4b:d2:5d:3a:db:6e:ea:93:e4:e0:2a:a9:
         58:54:1c:cf:fe:bc:0f:8b:15:cf:3e:9c:5f:f6:cf:92:5b:f7:
         ce:c9:a5:6a:89:7f:8a:49:26:2c:73:07:88:73:36:ca:b2:cc:
         0d:ef:2a:24:6e:19:2f:95:c9:21:2d:49:ea:59:12:e7:90:14:
         2c:06:a3:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD19cx8NQjVNlSLLKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTIyMDQwNjA0MDAwMFoXDTI0MDcwODA0MDAwMFowLzEtMCsGA1UEAxMk
ZTY5ZWQ4NDAtOTA2My00ZjZjLTkyMWItNjllNjg3ZWJkYmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFBD2MAOaEMSCF6FHx/ARhded//r81vVfC47
mr7teH5BBgv/ywz3Y3ucxWz2NVcZUk9UimgTrEdYQ1q4v7lWkPe9fGGqCBIP9ZLk
A29v/L+QhixfL98ZMfoQC7mahxnIMYSm2xx8wQNkzOG24wgg01e2hMplxSE+SLJk
9Ov33eF6hNSWM/X2bbzm9Fk4ZEiOBYLro2RrXCSvONVr5gzmbr68mfxlNMu311Na
aVllbCDY0QgjGg7RiUhyoUDtiWOWRjMU2xDI6EZGB8n3Gv398FmCdoJe3e17VBv4
9vUA4NvxylsdSpxJvqtutOeVZJLZ9N12hn9aofuvgLzHpsC9xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJA2Uxd2qCnnxK5iE29Jrn0dygh8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvOGY3NjA1YWYtZWE5Ni0z
ZGNiLThjMTEtYzFlYjcwMTNiNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2yxl2s+CE7GdcX8qeN4qyOWlyGDramq+yNfDainqx697ZExDW9gH1P
Yma4MhRrrewsGaS9TdxFOFrAm2fnmUA+b+VLs195VZe6NygoTo6u3UbEl8QIIBy6
oArzcYIv53ftp9LgQm7TR2/HOMcLDM2ns92vTfFAbZZh/FrdozIrC9PFFOuVp+Bg
AIAKNiHQimlWPzm2gcpfobJZMqoEnXVshQvbEtF3qS7N7G6uwdZZ9ktKet2aWgB0
yUvSXTrbbuqT5OAqqVhUHM/+vA+LFc8+nF/2z5Jb987JpWqJf4pJJixzB4hzNsqy
zA3vKiRuGS+VySEtSepZEueQFCwGo3E=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:23 2024 by rpki-client on console-fra.rpki-client.org