Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a0e91428-a22b-3315-b03e-1286ae0ff9fe.roa
File:                     a0e91428-a22b-3315-b03e-1286ae0ff9fe.roa (raw, json)
Hash identifier:          rz8RZl46hsyi6FZYgpWjDoJxC2NXVhxDCZgIPUDCt9U=
Subject key identifier:   9C:2E:29:86:96:92:E3:33:F5:19:10:6F:80:46:44:95:DD:22:EC:03
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328583D7D72D0A4E12799A89117CA00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a0e91428-a22b-3315-b03e-1286ae0ff9fe.roa
Signing time:             Wed 06 Apr 2022 04:00:00 +0000
ROA not before:           Wed 06 Apr 2022 04:00:00 +0000
ROA not after:            Mon 08 Jul 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7d:72:d0:a4:e1:27:99:a8:91:17:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr  6 04:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2024 GMT
        Subject: CN=ebcceea5-bcc7-4909-aae0-d762deaac470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:fa:dd:bc:62:43:d0:b3:56:18:25:58:50:
                    30:e5:f1:c1:da:51:0c:b4:a8:e9:bb:08:75:4d:4f:
                    42:af:9c:3a:f4:91:4d:bd:2b:dc:9e:0a:de:2d:f2:
                    9d:6b:d2:f3:1e:0f:97:96:ed:30:ec:24:b3:2c:0d:
                    6f:59:65:6b:6c:f6:9a:c6:08:fe:15:44:b4:ff:60:
                    a7:a6:30:a3:f2:3c:48:01:74:23:0b:c0:68:7f:57:
                    69:d8:3b:cc:28:b2:f8:e7:7b:09:65:d8:8e:ae:d4:
                    0a:c9:00:f4:9d:a1:26:11:b9:fa:e7:28:8f:bf:c3:
                    3b:f2:65:4b:02:b1:98:e3:e2:3e:8c:a8:ae:52:9c:
                    a3:f3:a7:ca:84:98:e1:70:97:a6:c8:4d:4e:aa:8d:
                    02:db:7b:85:8c:09:6e:c4:3a:ba:5f:50:7b:3e:3f:
                    e9:38:f4:21:1b:10:43:f4:bf:0c:9f:63:4f:ad:c2:
                    02:87:87:d0:80:34:00:4d:86:b5:af:14:3a:29:76:
                    1e:89:ed:f9:27:b1:6c:7e:7c:ba:63:17:5e:78:6a:
                    26:62:ac:98:5d:52:d6:8c:2f:40:11:0b:26:d6:ff:
                    3c:60:9b:77:81:be:50:52:37:a5:21:3f:5f:d3:e6:
                    55:68:cc:76:79:15:ca:ef:cd:78:15:a7:bc:d3:8d:
                    96:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2E:29:86:96:92:E3:33:F5:19:10:6F:80:46:44:95:DD:22:EC:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a0e91428-a22b-3315-b03e-1286ae0ff9fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9b:bb:78:76:68:af:02:41:eb:ec:41:bc:4c:8d:f1:f3:5e:
         69:ea:92:dc:b9:6e:e3:13:f1:0c:de:3b:30:c6:e1:df:49:2e:
         d5:0e:33:57:64:ac:07:f8:0a:d5:83:5c:92:ed:f5:23:40:38:
         cc:a7:dd:ed:b4:ec:f6:48:37:f7:f6:ec:89:29:bc:f9:e6:6f:
         74:43:72:3a:b7:43:c3:6e:70:3a:bf:5c:e1:7c:24:46:09:4c:
         5b:b9:e7:3e:42:41:2b:93:98:5e:d0:ae:cb:8e:bd:72:3f:4b:
         6a:2d:1c:00:92:90:14:b7:58:63:a5:de:d3:f2:aa:04:d5:86:
         f2:3e:ea:c9:6d:f3:6a:43:6b:b6:64:ea:35:71:ea:07:4b:d0:
         b8:8c:26:f3:7c:91:6e:29:43:8d:99:b9:d6:9a:f4:09:3a:44:
         98:e1:7f:04:67:e2:04:8d:97:80:6f:d8:1e:c3:0b:dd:42:8f:
         e6:e0:53:7e:65:87:a0:6b:f5:68:fb:e8:19:86:6f:ca:86:ee:
         9f:47:09:c3:f4:68:4a:04:0c:a7:3b:17:57:c9:67:4a:ef:3c:
         73:5d:9e:1d:61:90:9f:01:17:a8:0e:4e:0b:ed:7f:4d:f9:08:
         04:6f:ab:ce:91:dc:c1:39:54:59:bf:ba:61:b6:0d:f8:f6:f3:
         08:83:6e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----