Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/30bdbd0c-94a3-3b0b-917c-ccba80fb6e7e.roa
File:                     30bdbd0c-94a3-3b0b-917c-ccba80fb6e7e.roa (raw, json)
Hash identifier:          ISlu0u8B8IkJuC1Bx5A6nZ1iAVP7v4JikYvHj5ZgiYc=
Subject key identifier:   B2:9E:28:C5:44:F6:0D:E7:54:7F:D0:2C:27:D4:72:49:15:06:F3:D9
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858430A10616207396BDD9610D240
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/30bdbd0c-94a3-3b0b-917c-ccba80fb6e7e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.156.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:10:61:62:07:39:6b:dd:96:10:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=933bb522-5667-4ffd-ab79-5da04158e2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:00:50:9b:fa:d5:8b:da:1f:39:57:1e:b0:
                    19:f6:9f:be:71:ab:85:1b:48:54:7f:09:3c:ca:ff:
                    8d:77:bc:80:b0:41:b1:98:91:75:bc:73:16:6b:31:
                    7c:18:2b:16:f6:96:44:d3:04:55:3b:6e:ee:fa:34:
                    2b:da:ec:79:c0:fd:a3:b9:f8:bd:4a:7b:d7:49:47:
                    05:85:f9:b8:d0:1c:3f:cf:d9:8b:67:55:b6:c8:05:
                    3e:aa:7e:e2:45:e4:f5:97:4c:b4:81:45:46:4f:32:
                    91:57:c8:74:d1:08:a4:33:3b:c0:aa:68:1e:2e:d2:
                    27:2c:4f:5c:fe:8a:07:44:7b:40:9c:82:10:a3:d4:
                    35:75:f4:45:6d:d7:ad:43:84:e5:9e:e5:17:aa:80:
                    45:9e:b5:1e:03:61:86:13:c0:6e:d1:ba:83:6f:ed:
                    b8:30:d0:20:1a:a8:36:af:4b:14:8c:a4:78:d0:f9:
                    d2:9e:bd:f3:9d:ba:22:4c:6f:b4:6f:e4:90:8e:6f:
                    2f:85:02:25:96:2f:35:8a:78:6b:68:ca:04:1b:37:
                    f8:bc:2d:47:db:1f:71:8b:2c:f1:b8:4f:73:db:54:
                    40:4d:03:03:44:9f:5c:6a:57:ca:c0:0e:ff:df:52:
                    f6:ce:74:7a:34:28:7e:17:b3:fa:34:da:ed:9a:c9:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9E:28:C5:44:F6:0D:E7:54:7F:D0:2C:27:D4:72:49:15:06:F3:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/30bdbd0c-94a3-3b0b-917c-ccba80fb6e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:8d:37:79:09:10:4b:13:c5:d4:7e:99:53:93:5e:70:4b:05:
         61:90:4d:d3:5f:87:71:5e:c4:d6:a1:21:30:e4:13:f1:9e:be:
         0b:a8:f2:b5:02:21:d8:a9:99:1d:7f:fa:f9:b3:6a:93:99:cf:
         be:53:9c:70:80:2e:f3:60:55:33:39:8d:74:10:80:c2:c6:b9:
         52:c9:9c:61:dc:9f:72:26:59:3c:9d:a1:06:31:be:e0:b7:5b:
         dc:98:5c:8b:93:a9:48:94:11:00:c0:38:7a:11:4e:cc:04:b9:
         8a:b2:87:26:bf:0f:ba:28:19:43:cd:1e:8b:cd:95:25:8b:0f:
         2f:a9:ae:90:2a:7f:e7:6b:00:fd:65:d5:15:f2:fa:c7:49:5b:
         42:88:03:e9:b1:56:f6:d7:54:02:07:90:db:fc:c5:f9:cb:43:
         a9:88:c1:81:a2:3e:7e:37:d5:2b:3f:49:0d:22:fc:9e:0e:50:
         f2:40:f2:53:67:cf:ae:2f:8e:4b:b7:37:95:33:b3:47:a5:bb:
         51:67:87:b5:6d:bc:82:75:7c:5c:dc:dc:10:b1:e3:e0:06:26:
         73:1f:2e:90:5c:d5:ad:79:25:37:7e:1a:11:3c:5e:45:5b:1d:
         d5:b7:2d:79:67:fc:d9:15:c0:75:6f:77:03:67:c7:12:8d:71:
         11:e6:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----