Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0be66825-1a99-307e-b663-b1d9e08334f3.roa
File:                     0be66825-1a99-307e-b663-b1d9e08334f3.roa (raw, json)
Hash identifier:          MBATwcFelG5x13kYCJZ15OJMIdWEhBEa/3/cKaJGqJo=
Subject key identifier:   B7:1C:6B:FC:10:06:11:8A:77:64:B8:F7:2E:DA:EA:1A:D8:E6:CB:90
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A0B4879CCAB656C92782FC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0be66825-1a99-307e-b663-b1d9e08334f3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.252.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0b:48:79:cc:ab:65:6c:92:78:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b1a9d882-7eac-4eca-a6a6-7816c779994e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:14:90:2b:fb:64:cf:51:53:42:08:fa:ca:
                    8c:99:92:88:ed:ce:e2:85:e1:45:4a:81:ef:72:89:
                    03:e8:40:15:4b:bb:08:13:a5:ce:5f:b5:10:5c:9b:
                    45:35:f8:17:84:38:73:c2:b5:1c:19:f1:1d:e2:71:
                    ba:29:6d:88:9f:e2:6d:43:13:4b:d8:d7:e3:97:01:
                    cd:63:16:cd:a8:8d:f9:46:e9:40:ec:92:0a:f2:d6:
                    89:b8:42:fd:69:32:27:94:79:2d:ca:aa:32:3d:f7:
                    3b:1d:1b:dc:aa:dd:5d:1c:51:47:be:e9:38:9b:2a:
                    5c:a6:27:76:02:89:72:3f:d5:ba:49:1e:65:f2:03:
                    19:9a:d5:67:04:ca:7e:32:09:83:1e:95:b7:88:7a:
                    ec:50:c3:59:c6:bf:7f:a9:f8:90:cc:80:1d:6f:e9:
                    46:7e:a8:bb:22:d2:a7:3d:ed:f9:ac:21:7a:61:a5:
                    92:e6:24:60:6d:c7:f0:a7:e9:85:2b:9e:b8:b8:d7:
                    e2:d9:0c:65:3f:1d:68:ed:8d:79:74:fa:b7:bf:2b:
                    60:99:b9:c8:bf:0a:78:83:0e:8b:ee:ae:3b:aa:df:
                    1e:61:13:bc:42:27:dc:8f:b1:d6:b4:57:ec:db:ae:
                    0e:33:6e:9c:6e:f9:c2:21:98:a7:41:3f:6e:b4:64:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1C:6B:FC:10:06:11:8A:77:64:B8:F7:2E:DA:EA:1A:D8:E6:CB:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0be66825-1a99-307e-b663-b1d9e08334f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:fe:4f:82:b0:e1:6f:28:b4:e3:d5:d8:89:38:af:95:f5:a6:
         78:14:ed:f7:35:fa:91:93:85:61:3b:05:b3:c1:05:0d:e2:a7:
         c8:69:20:58:04:2c:7c:94:b5:19:da:78:17:5e:34:06:80:7f:
         65:1d:3f:fa:c3:f9:92:cc:53:ad:5a:e4:81:c2:83:79:e7:81:
         d4:76:f7:cd:63:fb:03:4e:d1:31:30:d0:da:2d:23:2e:b5:e9:
         ac:ab:d3:64:25:36:43:38:b2:0d:5c:42:2f:5d:f3:31:49:fa:
         45:08:d5:f9:da:fc:3f:c2:d6:88:b0:96:5b:bf:3f:8a:2c:2d:
         c3:e2:e7:1e:38:81:c6:16:8b:80:06:3b:b0:00:9e:c7:7b:35:
         bb:c9:20:2a:aa:90:1a:62:41:2f:fe:13:cf:63:52:d4:cb:66:
         91:dd:d4:49:98:47:25:a2:b2:a4:85:42:b8:10:b1:73:5d:7a:
         c2:1a:68:cd:db:f3:ca:fc:28:5b:9c:b7:15:dc:d3:bf:b3:cf:
         e5:91:a2:cb:6c:76:eb:ee:de:e6:34:ac:49:bc:51:66:8f:32:
         87:22:44:57:a7:ea:2e:f8:59:37:8c:70:9e:3f:bd:eb:70:61:
         78:66:27:5d:68:6c:45:60:c7:9f:85:54:53:c1:10:e9:f5:ce:
         4b:86:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----