Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ff7a5adb-936f-35f1-b50a-133fce027868.roa
File:                     ff7a5adb-936f-35f1-b50a-133fce027868.roa (raw, json)
Hash identifier:          i8I1AXNpiJw0peUBErh7QVdBor6yJwxtA5YzM5jNuSo=
Subject key identifier:   41:FD:61:A7:67:89:9D:20:EF:F5:7E:2C:DF:99:E0:CF:A5:6E:00:2B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584309F3CE71CE31332E199D1600
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ff7a5adb-936f-35f1-b50a-133fce027868.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.0.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f3:ce:71:ce:31:33:2e:19:9d:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8aeba280-1e6d-4fba-8353-854d03734c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:f4:d1:32:9f:ad:e5:ba:8d:dd:84:69:07:
                    dc:0d:fc:61:c7:9a:ab:76:bb:d8:81:ed:33:1e:85:
                    7f:60:15:76:73:97:a5:e2:c7:ba:20:79:00:0d:ed:
                    06:f4:44:88:a1:47:d6:8b:04:79:16:b6:a3:9f:5d:
                    be:fb:41:0d:a2:3d:89:2f:cd:da:ec:f1:5c:2a:50:
                    37:33:87:19:c6:c5:72:e3:0f:ce:a5:40:54:51:75:
                    c6:eb:9a:f7:3a:af:2a:74:56:93:c6:f3:dd:61:9e:
                    90:15:9d:bd:7a:5f:17:16:a1:d4:de:c1:75:4c:41:
                    2e:35:61:26:f2:65:0a:4c:d4:bc:45:c0:5b:ff:07:
                    24:04:9c:51:79:31:95:7e:30:ad:95:47:9a:61:4b:
                    6f:47:92:37:e5:ee:f5:cc:c1:c0:e5:1d:1a:12:98:
                    16:b1:d0:20:a8:a5:ef:88:43:f1:f1:d1:e7:4b:7e:
                    9b:1c:8a:23:5b:59:18:1e:fd:56:20:a8:8e:d1:03:
                    ee:0d:54:58:90:92:fd:f9:e1:10:ff:57:37:f7:dc:
                    62:5a:c3:1b:e9:f4:17:9a:6d:01:27:b1:7d:fd:90:
                    74:c6:2e:25:06:2e:84:c8:4b:64:72:d4:0a:2b:12:
                    b6:b6:f8:d7:c4:10:be:a0:9e:5b:3c:86:4c:cf:61:
                    6d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FD:61:A7:67:89:9D:20:EF:F5:7E:2C:DF:99:E0:CF:A5:6E:00:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ff7a5adb-936f-35f1-b50a-133fce027868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:24:47:62:7b:90:20:0e:3c:35:fc:49:31:15:29:66:4f:18:
         34:79:77:31:f2:d6:09:67:f0:95:37:db:39:8d:d2:49:f7:c9:
         f9:23:9e:29:9c:71:0a:cb:bb:08:3e:5d:cb:84:2b:f4:13:52:
         32:5f:7e:30:94:bf:b5:02:a5:b6:5c:b9:a6:de:e2:2e:79:5f:
         be:86:57:32:32:62:2c:81:3f:2c:be:63:3e:89:18:03:0a:46:
         de:0a:d5:c3:b4:55:5d:4e:27:91:16:52:2c:d2:7e:4c:ba:2a:
         b8:84:cc:fc:8d:7a:47:1a:a0:c6:9f:5c:bd:4a:50:dc:f2:08:
         6b:29:81:13:66:d5:19:86:47:17:74:e7:33:86:73:30:26:ee:
         d9:42:59:f1:e7:10:d0:79:d9:ae:e7:f8:65:4c:7a:b6:1f:5c:
         df:2f:cd:38:3d:73:c7:8e:a2:ae:c9:64:a9:3d:53:6b:97:8d:
         c8:8c:df:91:03:97:14:82:c5:28:86:ce:b1:93:43:0d:9e:e8:
         34:6a:c7:b5:8b:9a:5f:03:0e:b7:34:7f:27:d9:03:58:d1:e5:
         1c:06:24:d2:bf:11:2d:92:88:b4:b4:08:bd:f6:31:38:57:e7:
         9b:43:7e:56:51:42:3a:f9:69:c9:08:fa:a1:b3:20:96:ea:a5:
         54:66:98:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:26 2024 by rpki-client on console-ams.rpki-client.org