Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/34dec543-c318-311b-9599-6a18d31436d3.roa
File:                     34dec543-c318-311b-9599-6a18d31436d3.roa (raw, json)
Hash identifier:          Li98isuDQwPvvDo0FYskphvYJ4V3RMCaSyZ8mOLK87c=
Subject key identifier:   D6:84:5C:93:1C:2A:A7:E6:18:EB:3F:2E:B4:5D:0A:AA:CB:7F:38:5F
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858430A1963DD45489960C88B6200
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/34dec543-c318-311b-9599-6a18d31436d3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.134.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:19:63:dd:45:48:99:60:c8:8b:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=eeff0a67-b1a5-40f5-9a67-655a2d2f9f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1f:3e:a2:84:e8:a6:ab:ec:73:f4:5d:38:14:
                    a9:a8:dd:a9:61:a2:69:28:cb:74:ee:4e:9e:7c:36:
                    3a:58:74:99:b5:17:12:d3:a9:48:0b:d4:6d:af:36:
                    db:49:77:7c:1d:b1:13:ed:83:09:a7:b9:d6:63:3c:
                    e6:f0:ca:3b:40:6a:32:62:d8:7b:52:93:e5:bb:0f:
                    a0:8f:bf:0a:45:2f:c8:2d:39:45:b5:4b:3b:4f:65:
                    3c:a8:c3:e8:1f:34:84:ec:23:c0:1a:eb:34:f7:87:
                    6e:5b:33:c0:20:ba:07:64:ba:51:75:b1:e6:e3:36:
                    31:d7:22:a2:7c:24:48:b8:84:4d:58:4b:0c:f6:f5:
                    73:a0:7a:18:ca:ee:fa:bf:e9:a6:33:c4:2d:6a:2f:
                    57:c0:66:51:23:bc:63:c5:95:24:c6:b2:75:0f:f7:
                    bb:3b:2a:57:6a:b3:96:53:19:45:7c:15:1f:7c:69:
                    c5:26:95:01:e1:8c:78:ef:fd:57:b2:88:74:a5:be:
                    e4:69:84:5a:e4:79:ad:3f:d1:73:41:76:c2:ed:33:
                    48:83:c2:c6:dd:e7:eb:86:e2:90:c5:06:8d:fc:a0:
                    35:fb:85:7d:8b:38:63:e1:02:24:52:2c:79:2c:67:
                    f0:08:58:3f:c9:14:69:00:b0:37:7e:21:85:d0:cb:
                    66:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:84:5C:93:1C:2A:A7:E6:18:EB:3F:2E:B4:5D:0A:AA:CB:7F:38:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/34dec543-c318-311b-9599-6a18d31436d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e6:db:73:00:94:d1:14:f4:cf:58:e9:03:f2:3a:45:c2:26:
         79:9b:f5:24:3d:cf:af:81:44:d8:6c:86:0a:3d:0a:66:e8:33:
         8f:70:14:64:f7:af:ca:9b:4c:25:14:97:b0:6f:15:04:93:a0:
         8e:11:c3:60:8b:75:0e:a0:14:6d:5e:91:19:08:3a:08:96:a1:
         a5:32:4e:22:9b:00:13:fe:53:ba:21:b7:8a:62:59:46:23:21:
         45:44:85:b1:0a:44:72:a6:a0:94:2d:5e:97:67:3f:27:0b:7f:
         47:79:2f:9a:66:9a:13:33:80:d9:ca:ed:73:f5:45:45:a8:a2:
         23:4e:62:a1:4f:7b:eb:4a:d9:e4:eb:83:8e:0e:80:f2:83:2d:
         9f:f7:88:14:b9:d2:f1:de:f1:a0:b2:20:43:2c:68:28:ee:93:
         b8:28:b7:ab:e3:1d:df:84:7e:4d:5e:ca:54:ae:34:ab:d6:17:
         37:66:45:0e:9a:c4:ad:cb:aa:c4:ae:e7:17:56:3d:fe:d1:66:
         e7:53:78:04:04:f1:8c:08:00:a0:74:3e:17:08:da:4b:b5:ea:
         ec:ea:27:7f:d4:18:b1:1b:5c:b5:c0:45:05:b3:f8:5a:04:86:
         70:fe:1f:f7:df:10:a1:d7:b9:84:a3:8c:1b:ac:07:0c:0a:18:
         85:4a:04:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----