Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a00c3625-e1d9-325f-afe2-6bc89be9ff74.roa
File:                     a00c3625-e1d9-325f-afe2-6bc89be9ff74.roa (raw, json)
Hash identifier:          /Ow6my2a1zu9Cz/uJH3TKsfP80nhw+Wduz7UjurLYWU=
Subject key identifier:   1F:F7:6B:43:57:A3:B3:11:CB:38:45:5A:BF:AE:B5:F7:B7:8A:FE:3B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328583D7D7323851CABDF6A09F74780
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a00c3625-e1d9-325f-afe2-6bc89be9ff74.roa
Signing time:             Wed 06 Apr 2022 04:00:00 +0000
ROA not before:           Wed 06 Apr 2022 04:00:00 +0000
ROA not after:            Mon 08 Jul 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7d:73:23:85:1c:ab:df:6a:09:f7:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr  6 04:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2024 GMT
        Subject: CN=33ea941c-cc79-4e4a-904c-d04d52ab4780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0c:cb:cc:ad:4a:7c:90:c6:0c:04:eb:bf:05:
                    2e:ec:53:14:d5:0a:1f:47:49:ab:c3:97:3f:ee:92:
                    91:20:83:53:b6:85:66:9e:8c:a6:63:5a:3a:55:21:
                    f0:26:20:be:0d:2f:82:8e:85:75:55:0c:0e:8c:50:
                    c5:9b:74:1d:4e:01:2f:d3:eb:ba:a6:a9:66:d4:d7:
                    4a:16:60:5f:27:94:18:0f:e8:b9:b4:0e:79:c0:82:
                    9b:cf:e3:98:52:73:f9:11:ba:79:f3:06:9f:44:45:
                    b2:4c:ad:9c:7e:6c:1e:99:0f:4f:15:eb:f6:c0:78:
                    d2:06:cf:8c:04:d2:09:8d:40:24:89:50:00:1e:70:
                    72:3a:5d:6a:25:37:16:27:36:49:25:6e:10:89:49:
                    0d:04:dc:42:b7:ff:08:ab:fc:19:36:72:3e:57:a2:
                    51:40:59:7a:2b:f5:6f:88:82:5d:f8:67:3e:ec:80:
                    71:47:50:29:87:57:8d:8a:8e:9d:87:92:8e:c6:9b:
                    4d:db:24:c7:9d:1d:1b:11:09:d7:68:fc:4f:71:03:
                    25:e5:a1:d2:74:b0:10:3f:6a:7f:e6:36:6d:6f:66:
                    bc:be:98:d6:69:14:04:68:4d:48:d5:00:a3:0d:dc:
                    be:08:7e:9b:d4:85:9c:97:9e:04:1d:ac:70:2f:70:
                    6a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F7:6B:43:57:A3:B3:11:CB:38:45:5A:BF:AE:B5:F7:B7:8A:FE:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a00c3625-e1d9-325f-afe2-6bc89be9ff74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:9d:f2:d1:04:fc:da:b4:08:57:7b:98:d5:b5:1c:58:fc:89:
         d2:8d:e5:22:eb:88:e3:42:af:0e:e6:30:f5:ca:ae:d8:92:94:
         61:e4:93:92:c6:b6:1b:37:1c:a1:34:b2:75:5f:a6:9c:8d:59:
         a9:a5:f2:c6:5c:5e:b2:ce:27:79:90:71:ad:4b:38:d3:58:bc:
         2b:bf:3e:2d:6a:73:b1:0f:d2:96:9e:9a:db:7b:46:9b:97:a4:
         5c:ad:f9:be:44:4c:07:c7:70:71:a0:08:d4:c4:cf:37:58:a0:
         83:b7:d1:a8:41:df:7a:45:df:64:47:60:04:60:c9:6b:83:1f:
         9b:01:97:03:50:b8:dc:d3:ff:ac:6f:7c:9b:46:17:cd:16:2f:
         1d:46:cf:6a:df:49:51:bc:47:43:a0:a7:2c:2a:4f:00:f5:9f:
         63:b7:02:96:c6:e8:0f:13:ac:20:35:b4:25:10:f7:1e:3d:00:
         4d:63:c9:19:70:b8:9b:39:cb:dc:bc:8b:e4:57:3f:1a:de:29:
         d5:c6:7b:ae:0c:23:19:4b:39:17:4b:94:98:fa:cf:35:c9:81:
         4e:1f:ca:95:8b:70:ac:83:8c:2c:18:25:4c:d9:7a:11:97:4a:
         fa:c2:c6:14:c4:c6:f9:8a:37:9e:11:0d:01:ca:fc:cc:a5:0b:
         f7:f2:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:26 2024 by rpki-client on console-ams.rpki-client.org