Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b29b208c-cd93-3561-9c59-352e225dc61a.roa
File:                     b29b208c-cd93-3561-9c59-352e225dc61a.roa (raw, json)
Hash identifier:          J3iK0GAzyqQLIkwXtkjscYNqn9/nBDHLdy8A9oY+1Q4=
Subject key identifier:   1F:F6:1B:E7:79:C9:17:6D:60:44:58:74:12:FB:01:AB:A1:2C:22:EC
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858430A229A0677E4E2CA2E530D00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b29b208c-cd93-3561-9c59-352e225dc61a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:22:9a:06:77:e4:e2:ca:2e:53:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9bbae67b-9c57-489f-bd80-292ebb1dab1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:f4:fc:1b:06:5d:bf:62:21:d6:83:b0:10:
                    b4:ba:66:56:28:bd:cb:78:73:8f:7e:ed:1a:e7:b0:
                    84:55:ed:b4:51:80:5c:fe:2f:d0:cb:96:81:c7:b8:
                    dc:30:72:8e:1e:b8:b9:ad:58:0f:cb:c2:a0:14:88:
                    87:ea:d0:36:df:18:bf:59:34:8d:3d:a1:6c:42:62:
                    11:39:f9:6c:e4:83:c8:af:76:f5:e9:d2:c4:b1:1d:
                    30:c1:1f:52:ff:ca:b7:10:1b:36:8f:63:1f:77:e0:
                    25:1a:95:36:db:0c:d6:22:5b:f3:ef:f8:3c:76:20:
                    f1:6a:e9:6a:ca:e9:99:a1:ba:32:fa:86:de:69:b0:
                    52:cb:06:57:88:67:25:18:52:2c:a1:9c:7d:35:cd:
                    3f:db:1f:06:6d:55:bb:26:e5:4f:d8:18:9d:2f:fb:
                    cb:e2:ec:e6:79:9d:44:1d:f2:20:56:45:c0:9d:66:
                    7d:67:b2:62:67:68:dc:26:72:41:73:90:c1:b8:98:
                    dc:91:47:9a:70:2e:50:1c:a1:3c:35:f1:d2:27:c3:
                    36:b5:8a:56:68:dc:9b:fc:6f:eb:ad:72:83:2b:be:
                    31:bd:90:42:14:aa:7a:bb:00:6e:40:3b:7d:4d:5e:
                    9d:7b:e0:a6:7a:3d:45:6d:22:41:20:ff:5d:13:30:
                    f8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F6:1B:E7:79:C9:17:6D:60:44:58:74:12:FB:01:AB:A1:2C:22:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b29b208c-cd93-3561-9c59-352e225dc61a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ea:0c:0c:1f:66:ef:9e:05:b1:11:99:b1:92:e5:8e:24:ad:1b:
         78:70:9e:77:2e:b9:70:6a:8e:f1:12:5c:02:2a:df:7c:06:77:
         4d:8a:5f:8e:a4:b8:81:b5:04:95:dd:f1:fd:d8:7a:72:06:e0:
         92:f9:1d:9f:ac:d5:64:2f:06:e5:bd:68:99:8b:cc:f8:c7:cd:
         fe:89:81:91:b3:0b:a6:6f:f1:46:d6:dd:a7:96:b6:d1:eb:8b:
         df:d7:39:17:08:65:f9:11:02:9b:16:8d:18:a5:7e:21:73:76:
         c4:f9:39:9d:d4:ca:e9:54:5a:a1:e4:8a:db:6f:42:a7:95:0b:
         93:34:82:a8:90:12:01:e4:aa:8b:07:63:51:7b:05:7b:2b:e7:
         fb:f2:76:d6:f9:7c:87:34:e7:50:4c:81:3d:5d:af:ab:a9:60:
         21:fc:d7:ac:bf:51:50:d5:03:2c:5f:ed:43:a2:90:83:d9:86:
         cd:9c:6b:d0:9c:6b:7d:f7:73:46:23:aa:54:b0:19:fd:d0:2e:
         0c:85:cc:e0:07:29:82:c3:bb:3d:bf:f6:b9:6b:00:a8:b6:d0:
         3f:17:8e:c3:e3:31:7f:42:b0:0d:c8:1b:bb:4f:17:cf:55:90:
         cd:1a:20:96:9c:39:bf:a9:45:88:6c:81:96:80:1c:06:ce:b8:
         d3:0a:45:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----