Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4c66d9ea-6ef8-383d-8037-a62c8374c01c.roa
File:                     4c66d9ea-6ef8-383d-8037-a62c8374c01c.roa (raw, json)
Hash identifier:          ZeX6wi2wsc0F0nWQip8p6bFMO0VbRNCdxiRqNU68w5Y=
Subject key identifier:   87:5C:69:9C:68:5A:DF:14:82:7B:DA:A7:61:4D:F3:54:79:C2:84:66
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858430A1722CDDA4282588FA94F80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4c66d9ea-6ef8-383d-8037-a62c8374c01c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.128.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:17:22:cd:da:42:82:58:8f:a9:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d1d36414-8105-49a3-b3f7-ec0335d8e4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:3f:38:ce:fd:77:36:6d:5e:33:ce:cc:d8:
                    38:24:95:91:96:03:3b:a9:16:96:d5:d3:40:a6:dd:
                    73:d4:c5:78:63:12:e3:65:98:48:7f:bb:7f:b2:d2:
                    40:97:48:63:c9:c4:13:70:d3:65:61:75:07:5d:99:
                    74:36:af:2e:44:b3:41:f3:0a:34:7e:ba:44:bd:a9:
                    43:d7:78:3a:bf:d7:f3:23:54:c8:d6:d2:1e:75:55:
                    09:a9:9a:63:74:b8:4a:31:41:10:ad:8a:28:75:6e:
                    f6:20:57:7e:7b:32:25:ac:56:9e:93:2f:f8:e8:9f:
                    23:81:1d:d6:57:3b:96:be:22:fd:7b:b4:69:64:15:
                    1f:a2:18:8b:e4:0c:4f:36:5b:c8:50:6b:68:33:4b:
                    b3:7d:06:c7:3a:e8:b9:36:74:d3:3d:3d:40:34:d5:
                    62:45:6f:10:ae:d3:20:e9:f0:bf:5e:53:f2:95:d9:
                    ab:fa:70:8d:50:23:d4:ae:63:b2:59:3f:ed:36:87:
                    07:e7:2f:50:1d:7d:c5:50:60:a4:25:4d:14:f4:84:
                    29:a8:68:cb:dd:60:2f:f9:4c:ff:a6:8c:b3:da:ac:
                    d3:bb:e8:cc:3d:d7:df:35:c4:a7:20:1d:5c:dc:d1:
                    b6:75:53:19:47:a7:2b:41:49:cf:de:7c:09:61:6f:
                    97:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5C:69:9C:68:5A:DF:14:82:7B:DA:A7:61:4D:F3:54:79:C2:84:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4c66d9ea-6ef8-383d-8037-a62c8374c01c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:47:84:ce:eb:c9:ca:3b:40:71:0a:f9:62:5b:b3:89:6a:7d:
         25:59:17:54:81:af:d2:29:dd:a8:96:6f:6d:cc:53:df:92:8a:
         d1:14:79:d0:7f:98:34:a3:6d:b1:63:2b:40:fa:cf:cb:5c:98:
         eb:fa:d6:2b:1d:64:9f:cd:2f:b3:f2:02:8a:03:80:6b:01:7c:
         7c:e4:ec:46:97:71:cf:be:e3:7f:2a:1d:f0:f8:fe:b9:23:fe:
         de:df:46:bb:1c:93:00:3c:0c:5f:a6:b6:a6:62:05:b4:7f:3e:
         76:bc:46:d9:5d:77:f4:4e:f5:7c:e7:94:a3:2d:11:83:57:6f:
         d0:40:52:50:01:5f:c5:88:de:25:76:b7:b9:4b:4a:9c:a3:dd:
         e6:93:14:69:55:fa:7b:d6:c5:65:2c:bf:6b:61:3c:80:95:83:
         00:7d:95:6e:62:48:ad:67:63:ed:ba:d4:3b:6d:58:2f:05:7b:
         91:c4:6e:ae:ef:1a:6e:d7:39:07:48:2d:dd:93:0d:d1:b4:a5:
         30:24:db:10:b1:af:40:3b:1d:9a:af:c0:85:57:2e:05:be:18:
         63:5f:28:46:72:16:04:37:b8:3c:23:68:4b:f3:f1:60:e8:42:
         2c:3f:54:b6:61:51:cd:89:8e:89:70:51:05:ec:0c:be:6c:c4:
         c1:d7:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----