Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3cf22bce-86b9-3f9c-8bea-4089a0ccbd82.roa
File:                     3cf22bce-86b9-3f9c-8bea-4089a0ccbd82.roa (raw, json)
Hash identifier:          pRV9kv7akFwjqhuH0EhNn2bxpCLVS74nn29DcE8JwGs=
Subject key identifier:   1D:8C:BB:9E:25:C7:56:54:7D:77:13:83:1A:4F:6D:E3:AF:73:A4:B8
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A1A58B634F6016A13182150
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3cf22bce-86b9-3f9c-8bea-4089a0ccbd82.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.100.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1a:58:b6:34:f6:01:6a:13:18:21:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ed750ef2-3743-4785-bd00-a8329561f7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:e4:ac:37:f9:88:69:d7:4d:9a:e4:d1:16:
                    d3:f6:83:14:47:a7:09:3b:99:fc:81:be:f0:69:6d:
                    60:2b:3e:b9:11:95:ba:7d:d6:fa:73:1f:8d:13:33:
                    05:fa:a0:ea:09:6c:1c:60:60:07:71:a8:ac:ee:b3:
                    5d:e9:ef:55:d0:9f:c2:71:48:32:20:ff:28:fc:f9:
                    1d:33:82:3e:ca:55:eb:ba:18:5d:c5:1c:b4:66:c9:
                    e5:6e:9e:a1:8f:07:5f:a7:2a:a5:52:b6:d0:d5:d7:
                    3b:d8:2c:5b:17:7c:c7:fd:ec:39:59:58:73:cd:6b:
                    ff:d5:59:38:c4:77:cd:0d:80:7c:40:47:4a:7a:69:
                    8d:50:fa:9c:d8:38:34:f1:2e:8c:f9:d1:e5:c6:01:
                    f7:f7:12:09:93:86:0f:71:bb:96:6f:f5:1d:39:4e:
                    70:eb:0b:77:97:97:a3:23:1e:82:81:df:45:24:47:
                    c6:a6:03:d7:29:2b:51:17:2d:8f:0c:76:d0:5f:27:
                    1d:81:ef:a4:ab:a3:bb:ed:4e:6a:c0:55:1f:b0:5a:
                    30:f4:9e:b9:41:c1:54:93:d7:1f:f1:e7:f0:06:62:
                    20:68:70:27:23:df:76:7c:05:ec:8f:4f:cc:d0:f0:
                    90:ca:b0:62:b6:c6:70:99:ab:5f:0f:b7:e4:f5:0d:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8C:BB:9E:25:C7:56:54:7D:77:13:83:1A:4F:6D:E3:AF:73:A4:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3cf22bce-86b9-3f9c-8bea-4089a0ccbd82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:96:70:20:ad:46:66:b2:45:9b:d9:b8:b4:67:41:8f:95:2d:
         fe:04:68:05:9e:1c:47:5e:a2:31:77:8b:40:54:7b:b0:5b:7d:
         39:68:07:94:62:b6:77:84:48:00:db:f7:2d:50:3d:bb:fe:cb:
         18:87:17:77:03:d1:54:20:5b:73:c3:a7:50:ab:65:8a:65:b4:
         77:ec:a3:e2:45:13:54:19:79:c8:90:43:be:0f:95:d5:26:71:
         08:4d:12:64:db:de:5b:dc:26:35:fc:df:38:f6:a0:a3:67:21:
         43:19:9a:88:95:17:e7:f7:9f:92:47:18:53:d1:01:a6:f9:ef:
         e5:be:ce:89:3a:71:cc:83:25:1c:84:da:53:5a:c0:41:f2:28:
         07:bf:df:a5:e6:24:1c:f2:f0:fe:cf:b9:35:fa:4b:d9:a8:dd:
         86:80:41:24:90:00:ae:e0:63:0e:e1:f7:c7:0f:a3:12:eb:3c:
         ac:fa:1c:61:72:ae:fc:be:8e:60:58:68:49:f3:99:8c:43:92:
         36:6c:4a:2d:f1:d2:2c:22:52:5a:45:b0:38:55:7e:5b:71:9d:
         14:c4:98:48:b3:69:88:a2:64:ea:6b:f7:02:ba:82:bc:97:cd:
         45:5c:a6:12:a8:47:9e:23:68:0f:21:24:c9:e2:81:d2:5b:c4:
         08:7f:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----