Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f86046d1-89f0-3a3b-bc85-fb58801a939c.roa
File:                     f86046d1-89f0-3a3b-bc85-fb58801a939c.roa (raw, json)
Hash identifier:          GavnMvuhVbKnORKsCEQMsq6neLtJVd7/8ReWRTfgL10=
Subject key identifier:   AD:B5:EF:49:F4:78:A3:17:50:3F:91:19:F4:D5:58:F3:B8:EA:39:08
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584138EB434697C3AC86FAC4F180
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f86046d1-89f0-3a3b-bc85-fb58801a939c.roa
Signing time:             Tue 14 Mar 2023 12:00:00 +0000
ROA not before:           Tue 14 Mar 2023 12:00:00 +0000
ROA not after:            Mon 16 Jun 2025 04:00:00 +0000
asID:                     36492
IP address blocks:        162.120.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:38:eb:43:46:97:c3:ac:86:fa:c4:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 14 12:00:00 2023 GMT
            Not After : Jun 16 04:00:00 2025 GMT
        Subject: CN=603855e3-b32e-4648-a55b-aae191182804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:c7:ca:1d:aa:94:54:75:65:46:9f:b7:d6:
                    58:6f:bb:f4:ed:c4:d0:e7:5a:f4:9b:14:98:69:72:
                    cd:8b:b1:30:aa:b9:ff:8c:84:bb:d7:89:30:ed:43:
                    56:5b:41:ab:ff:a2:37:fe:83:77:b7:e0:bc:a6:c3:
                    4c:54:04:80:a9:63:1a:7a:e4:8a:b6:f5:f1:cf:ee:
                    60:5e:94:12:31:4c:5f:1b:68:88:07:1a:96:37:9f:
                    9b:5e:ca:82:de:d9:09:37:c4:21:af:7a:27:26:39:
                    a5:ef:d4:de:f5:af:95:c2:6f:59:cb:92:d4:33:20:
                    45:19:1b:3b:3c:bd:af:dc:9c:29:98:d4:eb:d9:cc:
                    e6:2e:cd:fd:e1:e2:28:2d:3f:44:2e:0a:87:84:b1:
                    4c:62:db:0d:b6:d4:8e:0a:f6:3b:6c:32:05:a6:a5:
                    8d:e2:93:cc:af:18:7d:31:8c:05:8c:a3:43:f7:d7:
                    46:77:16:43:1a:66:fa:a3:a5:3a:3e:92:32:60:70:
                    b5:50:a6:d5:f4:63:4a:29:3e:0d:c3:e4:aa:67:18:
                    b2:da:03:f1:e8:d0:c2:eb:b8:ef:43:db:8e:ce:4c:
                    05:09:6d:f7:6f:cb:ba:1b:49:8a:71:92:4d:db:ce:
                    95:d2:93:a0:c8:7d:5f:61:a5:a7:57:6f:f6:e0:10:
                    c3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B5:EF:49:F4:78:A3:17:50:3F:91:19:F4:D5:58:F3:B8:EA:39:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f86046d1-89f0-3a3b-bc85-fb58801a939c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:dd:28:66:c6:2c:3f:01:9d:b6:d9:48:56:57:d7:b9:b5:2f:
         2f:1b:d5:18:22:05:f7:ee:a0:5e:62:16:bd:7b:1f:98:b0:34:
         b9:48:e1:73:83:74:e2:bc:18:9a:a1:da:c6:fe:33:09:ed:1c:
         a2:f4:84:e6:dd:23:25:71:1c:ea:06:ec:d4:63:31:95:eb:c0:
         06:16:03:ed:b4:b2:e5:b4:7d:d5:f8:0b:71:58:7b:29:c8:01:
         e4:b5:ad:31:df:ca:c7:28:83:94:b8:07:71:dd:3d:d1:a2:9b:
         5d:e0:ae:e3:11:db:36:b3:5e:be:9c:9b:12:54:6b:be:93:ce:
         3b:e6:5e:1c:1e:00:8d:8d:80:4c:de:8d:55:de:53:f3:3f:0e:
         f9:f8:07:b4:96:21:58:0f:9a:9c:a4:81:3b:26:07:18:b4:50:
         98:bf:59:50:4f:1f:b6:57:63:d8:ca:ed:cd:6a:fa:63:d2:21:
         7d:80:d3:00:c3:91:6a:7d:5c:e4:08:52:80:50:db:82:22:0d:
         c8:d8:93:13:d9:13:0e:3a:ac:5f:be:bc:00:6c:86:74:bc:2b:
         c5:93:ed:11:41:ca:5c:25:8e:bc:9b:f5:d1:d5:b0:87:d5:87:
         58:aa:e1:fd:9b:f7:81:75:13:18:8c:38:23:e1:e1:16:d6:d9:
         e0:68:da:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----