Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17828fe0-50a9-353b-95b9-7b9846c37dd9.roa
File:                     17828fe0-50a9-353b-95b9-7b9846c37dd9.roa (raw, json)
Hash identifier:          Z/MqgzhHx14FxcWzTUjOIWZudRZaVpIk6gQ1JtN6O48=
Subject key identifier:   B9:D4:F2:35:52:E8:94:BA:06:4E:B5:79:6C:59:A0:97:EE:6B:05:D4
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A1006EAEE3BB73719F67640
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17828fe0-50a9-353b-95b9-7b9846c37dd9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:10:06:ea:ee:3b:b7:37:19:f6:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=16aa2716-0801-4f03-8142-9ea97880de6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:72:04:d1:55:0b:6d:6f:d8:33:4f:04:27:
                    69:20:ed:9d:5a:6e:74:43:24:a8:4f:e2:2c:60:ac:
                    80:e3:d8:7d:f4:43:ff:fb:71:db:3a:b9:07:4b:57:
                    b9:52:bb:61:29:6b:c8:cd:97:8f:8b:73:84:62:0b:
                    14:4e:a3:af:55:55:be:da:9f:f4:a8:12:ff:83:c7:
                    a9:66:20:61:6e:3d:d4:4f:ec:f6:8b:c9:91:67:3f:
                    3b:b0:bb:5b:76:d9:65:96:dd:da:f3:18:93:89:a5:
                    2a:38:4b:75:ee:16:06:b3:1b:87:9b:24:ca:e7:09:
                    38:01:ec:ef:26:c0:c2:c8:17:45:e2:be:77:81:0a:
                    5b:76:10:79:0f:d9:ab:0e:36:c0:ae:74:90:85:8c:
                    23:15:a1:08:4c:96:3e:ab:72:5e:ea:c8:89:67:63:
                    8c:70:f5:2a:d5:63:fe:13:f0:2e:9f:8e:36:1a:2f:
                    47:8c:5e:0d:29:9d:07:17:e9:b2:e4:6b:8e:e3:3b:
                    00:4d:44:86:4c:a1:ef:61:1a:77:a8:9a:7b:f2:4c:
                    8d:eb:04:3e:a2:41:8b:44:01:e9:fe:e3:46:59:11:
                    3d:f0:f7:aa:0c:7a:a4:a1:7d:ad:6d:c8:5e:18:a5:
                    31:59:32:f7:1d:8b:64:e2:1c:63:15:a5:3c:e0:77:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D4:F2:35:52:E8:94:BA:06:4E:B5:79:6C:59:A0:97:EE:6B:05:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17828fe0-50a9-353b-95b9-7b9846c37dd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:08:53:85:14:cc:8e:8f:d9:d8:4b:b6:f8:6a:91:87:37:bd:
         ec:bc:ac:a7:ff:74:af:4b:3e:28:0b:ba:fe:69:8a:7e:0a:9b:
         59:eb:d7:59:57:a7:17:68:6f:9f:14:1e:ac:bf:bb:b8:6d:5b:
         03:3b:2a:23:e1:08:7f:08:f3:12:06:e6:40:c9:b8:a1:0b:18:
         4b:59:40:03:37:f1:9d:f1:85:60:3e:5b:12:43:85:07:ae:1a:
         7f:ab:77:c4:24:07:f6:c5:3b:2f:57:65:f4:92:26:18:36:20:
         65:7d:f3:70:b3:7b:bb:b4:15:a7:a1:2f:61:46:54:a7:24:94:
         f4:28:27:d1:50:80:22:ba:bb:73:75:47:c5:d3:bb:90:04:81:
         bb:3c:68:59:db:0b:0d:cc:f1:4a:ef:6f:21:4e:b5:de:c3:84:
         fe:b8:e4:66:b7:31:a8:3e:9e:fc:c5:4e:4b:bb:af:d0:2f:1c:
         a4:82:f8:77:5f:64:82:36:9b:d7:d4:03:a1:77:1d:34:f4:7d:
         ea:1a:18:c1:6c:0f:ce:6c:3d:74:08:c3:6e:75:60:96:50:9f:
         8a:0b:1e:51:53:07:5f:0f:24:64:b0:be:db:01:b3:de:01:d7:
         46:8d:52:94:61:72:7b:1e:cb:1d:ba:5c:f0:77:e4:c3:88:3a:
         a2:e5:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----