Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0bdcb73d-2056-3957-8ee5-08958d2ec555.roa
File:                     0bdcb73d-2056-3957-8ee5-08958d2ec555.roa (raw, json)
Hash identifier:          ShNh93jqSLJ/jR+hiULHkcyF9xe155DE2fPZ2H0NAos=
Subject key identifier:   82:98:60:56:8C:FA:B9:E0:E2:FF:48:B8:42:52:A3:6A:AB:80:69:A6
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A0BAC019FD2C16129408080
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0bdcb73d-2056-3957-8ee5-08958d2ec555.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.244.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0b:ac:01:9f:d2:c1:61:29:40:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5318e8af-1ec2-4d9d-b394-9c2bad987227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:10:31:2e:14:ed:52:82:b5:af:f5:09:d0:bc:
                    4d:5e:5d:90:ed:f0:f4:13:e8:51:91:9f:ac:b8:71:
                    0f:86:fe:51:ed:b3:61:ea:94:d0:4b:1c:cd:bd:6e:
                    5e:18:17:88:28:e6:af:2b:89:89:7e:86:6a:c8:b0:
                    fc:49:25:94:5a:d2:91:62:f3:32:82:56:13:91:0f:
                    5f:c4:85:df:97:24:52:3d:dd:66:1d:62:f9:1e:d2:
                    49:66:d5:65:9c:9b:43:9a:4a:18:b9:a2:8f:5b:b1:
                    54:42:d7:47:ec:f1:37:73:93:95:06:4d:16:67:51:
                    49:de:4b:ab:87:35:21:43:e5:c1:58:52:46:4e:58:
                    5c:8c:2b:29:34:0e:13:09:0c:b4:d9:c1:c1:4b:9a:
                    ec:cb:37:c0:82:52:2b:1c:30:0c:83:98:aa:32:bf:
                    0b:ae:2f:90:16:64:f3:ec:f0:b5:ce:3c:93:a3:15:
                    21:78:fa:98:5f:33:7f:30:ff:b5:62:a2:77:5c:88:
                    2b:95:b2:e3:ea:84:e4:ed:79:c6:3b:62:c6:d2:93:
                    3c:e2:1c:7a:ff:72:50:2c:22:72:63:8e:de:86:fa:
                    da:1e:24:a7:fb:0c:27:19:bc:6e:f5:c2:d9:8c:ea:
                    0e:73:43:da:73:6d:c0:07:a0:8f:d1:e7:47:59:15:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:98:60:56:8C:FA:B9:E0:E2:FF:48:B8:42:52:A3:6A:AB:80:69:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0bdcb73d-2056-3957-8ee5-08958d2ec555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:67:a6:c1:fd:99:03:a2:69:ee:02:80:8c:74:3f:a9:1d:c7:
         b5:9d:76:79:f6:aa:1b:5e:0e:28:6a:57:9f:ea:e8:bd:bd:6a:
         be:e8:9e:86:f4:99:24:a8:04:c8:95:f2:5e:be:1f:d0:29:a8:
         fd:78:1c:0d:80:ba:a5:e8:eb:f6:03:0a:25:53:28:fb:ca:70:
         ed:66:b2:c7:8f:3a:3a:16:52:a6:0c:e0:99:8a:87:e7:48:28:
         fe:cf:82:c8:8b:a1:61:c0:bf:ff:f3:b4:9b:dd:41:fc:71:7c:
         66:9c:e7:03:da:15:7f:ad:57:bd:c0:d0:08:ee:22:17:20:7c:
         bf:0b:42:2e:41:5a:67:ff:2b:22:db:39:26:97:e0:4d:37:a3:
         58:54:3b:5f:3c:65:15:05:71:10:67:99:7b:6f:15:88:5f:c1:
         c2:22:b8:a5:32:f9:9c:39:2b:2a:65:bc:7a:aa:69:40:a0:b7:
         27:e3:e5:c9:0d:a7:80:b0:e3:f7:c9:d2:12:88:e1:fe:06:ec:
         88:a8:94:11:05:77:2f:52:c0:12:15:d5:dc:fd:5f:b1:bd:d7:
         f4:01:4a:dc:83:7f:95:57:0f:c9:78:3b:88:94:58:f8:d2:bb:
         f3:2b:5b:00:7d:e8:82:c3:72:d9:aa:82:4a:81:af:cc:7f:5e:
         fa:ac:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----