Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3e155eb4-34bf-373e-994a-246b0a25c9b4.roa
File:                     3e155eb4-34bf-373e-994a-246b0a25c9b4.roa (raw, json)
Hash identifier:          gdVzy1D5CDmmvD74FG98a5z79b5I7TukGhPGnkeGShg=
Subject key identifier:   3B:AA:5B:D0:B1:52:CD:88:AC:5B:E6:D0:53:45:E2:C1:7F:21:39:77
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584309EDD5890AA6A8F85A231200
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3e155eb4-34bf-373e-994a-246b0a25c9b4.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ed:d5:89:0a:a6:a8:f8:5a:23:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d2bdb879-af79-4e22-b849-136821aac932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:cf:d3:fd:bd:6b:7d:46:b0:d8:41:89:ea:
                    57:54:ad:4b:ed:82:71:99:8f:84:e1:ef:63:be:31:
                    e7:98:96:39:44:da:62:25:f5:ee:80:1e:9c:c8:e2:
                    5e:e8:63:5c:c3:9e:d4:e0:cd:fb:27:24:b5:6d:da:
                    a0:e0:22:ee:15:22:d4:36:fa:82:ca:92:12:fe:26:
                    f9:34:bc:a8:8e:f4:6e:b8:e9:59:ea:d1:16:29:5d:
                    c6:2c:ea:83:1b:e8:86:85:8d:e4:35:3e:ee:87:be:
                    68:3e:dc:e6:46:e2:fc:41:75:53:5c:96:5a:b0:df:
                    60:5d:e5:61:e8:b1:5c:9b:28:cd:2c:fb:41:4d:64:
                    65:00:b4:08:2d:cd:e0:c8:fd:d9:7c:5c:e5:52:b8:
                    ce:dc:93:ac:6f:68:dc:2e:3a:6f:96:c4:88:e0:5b:
                    21:bc:99:50:38:07:ae:6c:d5:02:e7:83:5e:0d:11:
                    26:4f:a8:ff:00:28:b1:f9:c7:5b:21:3a:39:ba:64:
                    8b:0e:2d:bc:a9:b5:76:e2:78:d7:b6:43:62:b7:55:
                    e1:ee:1b:5f:23:3b:39:a1:a8:c1:9b:8b:84:df:f5:
                    66:89:75:c6:84:fe:ce:53:f9:18:90:cf:ed:1b:0a:
                    f9:e9:64:55:59:a7:ce:4d:ff:b3:17:5e:a3:01:fe:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AA:5B:D0:B1:52:CD:88:AC:5B:E6:D0:53:45:E2:C1:7F:21:39:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3e155eb4-34bf-373e-994a-246b0a25c9b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d8:e8:e6:d3:cd:c6:6b:99:c5:bb:4a:30:f5:f6:43:ca:58:
         ce:16:bf:71:4f:f5:81:36:8d:06:de:fa:0f:34:82:b7:e8:11:
         f5:29:bb:5b:d5:8e:23:62:3e:e4:0e:b3:ae:ff:1d:c9:af:86:
         d4:3d:60:55:33:53:00:2a:8d:d0:9e:15:78:79:8f:9c:30:fa:
         bf:2b:fa:fa:f0:9c:c0:82:f1:04:1b:8c:03:33:52:b3:73:d8:
         e2:7f:53:2f:cb:e6:59:ef:b8:f9:22:54:60:c5:cc:cc:d5:07:
         97:f2:c2:82:5e:84:eb:d1:66:43:55:c5:39:9a:6e:64:1b:cd:
         bf:50:26:d0:b3:ec:b0:7d:c4:f9:2e:28:f6:ef:6d:e7:ac:5e:
         d8:7b:e2:8a:43:22:45:a0:d7:51:15:88:d6:72:19:6a:be:3f:
         82:33:23:8a:5f:47:75:9a:e5:c3:17:c8:9e:38:4d:07:83:86:
         df:ac:f8:d1:5f:21:5f:d5:3d:14:5e:d0:36:10:43:6e:f0:0e:
         9f:94:04:66:3b:d1:ee:4e:a7:ec:be:3a:13:ff:fe:75:10:10:
         f9:30:92:de:53:ee:22:e6:a9:f9:10:bb:83:ac:50:2c:8e:94:
         8f:e1:c9:ee:0f:3a:d3:c0:cd:82:86:76:94:8e:88:cc:ad:21:
         9e:57:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----