Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3fa8e534-2987-3f4a-8c31-f0ba62a3f40d.roa
File:                     3fa8e534-2987-3f4a-8c31-f0ba62a3f40d.roa (raw, json)
Hash identifier:          0JNYe6PWVhyrpBAsaOq7aOhxq0HFzs4nkeRvASPsPYU=
Subject key identifier:   73:7B:CC:66:4C:17:E7:89:5B:6A:90:30:50:7C:83:8F:9B:1A:87:51
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858430A118483B64C475CFEC35780
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3fa8e534-2987-3f4a-8c31-f0ba62a3f40d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.128.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:11:84:83:b6:4c:47:5c:fe:c3:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b1429515-abc6-4191-ab68-da946b0c61ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:0b:15:f9:bf:0d:c5:ce:66:a3:73:52:ac:
                    7d:d3:f3:bd:bc:92:b3:0d:3e:6f:74:a3:ea:80:c7:
                    1b:59:d4:00:63:c4:ac:21:21:f2:4e:63:20:0e:a9:
                    7c:e3:9c:6c:ee:9a:56:12:db:50:de:f0:e4:5d:72:
                    80:8f:cc:00:6a:a5:d3:f3:1d:ab:db:4c:7f:f2:82:
                    1f:a8:a4:8c:1a:4d:c1:71:6e:28:e9:f8:a5:e2:e9:
                    33:98:69:15:87:73:d1:41:82:4c:76:6e:3a:fa:7d:
                    4b:cb:c1:95:01:c2:a5:34:41:36:f1:9c:b0:9a:2e:
                    58:15:0e:77:77:b3:df:38:d5:20:03:62:ae:15:ab:
                    3c:51:00:ed:8b:69:d2:da:24:0a:c9:03:46:e2:0f:
                    f3:84:e0:b6:23:bd:00:28:c7:38:6e:86:9d:b6:6a:
                    ab:b2:4d:9f:3d:48:e6:62:f8:21:a1:1b:a5:00:28:
                    a8:ed:e8:f4:c4:01:34:b8:34:64:00:9b:e6:7a:7f:
                    2d:c7:90:e9:b7:ff:20:59:b0:49:76:11:a0:3f:07:
                    b8:88:a8:18:2f:42:25:2e:0d:8f:05:a5:f3:9f:d3:
                    5a:ad:ed:e2:05:2e:8e:fa:20:1a:23:4c:8d:2d:89:
                    45:fb:e8:b3:ad:64:22:e1:3d:a7:48:d1:1f:fb:20:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7B:CC:66:4C:17:E7:89:5B:6A:90:30:50:7C:83:8F:9B:1A:87:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3fa8e534-2987-3f4a-8c31-f0ba62a3f40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c6:e1:24:4e:6a:21:4a:b6:cb:da:70:9d:fe:e8:37:e6:bc:
         80:e9:58:14:af:53:0a:b0:49:f4:d0:e5:7f:f1:90:02:84:55:
         47:81:2b:c0:54:16:4f:87:ba:2d:c2:16:e4:17:95:8c:51:56:
         6f:6c:dd:9c:1c:58:85:7c:79:1c:22:3e:ad:38:e6:61:a3:d9:
         ce:d0:2a:66:0f:2d:d5:60:ce:82:40:8b:92:ee:bb:06:c8:38:
         c8:ca:80:5b:c8:4d:6e:b2:74:72:d4:e3:a2:92:9c:2a:88:1c:
         7c:72:27:db:33:fd:89:ba:db:7f:df:a2:52:26:0e:d4:3c:38:
         0c:d3:e5:20:4f:15:04:bb:da:4f:02:ac:54:1f:0c:66:72:c0:
         7a:8d:0e:4f:9c:e8:48:a7:42:1d:60:dc:d0:d1:c5:04:57:c6:
         95:08:eb:c9:e1:3c:35:df:e3:a0:1b:16:d6:99:5f:54:f9:e9:
         80:94:67:18:8e:04:7f:71:21:b6:f0:64:8c:ad:12:3c:0f:b8:
         b4:5d:33:0c:0b:7b:79:cc:a5:6b:44:72:75:34:e7:04:1c:80:
         03:3f:75:5b:32:d7:74:d5:32:c6:4e:64:05:83:17:df:fd:18:
         23:12:26:4e:2b:22:bd:20:a7:24:c3:15:91:2e:c4:d2:51:25:
         85:04:ce:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----