Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/497ddbc8-7ef2-3622-9f3a-41d801842f14.roa
File:                     497ddbc8-7ef2-3622-9f3a-41d801842f14.roa (raw, json)
Hash identifier:          f68XRXvSUXJG2l/Igu3zBGV19LdmWqtnNxc5nRsRUd4=
Subject key identifier:   6A:0F:38:8F:BF:6E:CA:03:58:6F:F0:FE:9A:11:7C:B0:6A:74:D3:17
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309F5062124EBFDE06108D600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/497ddbc8-7ef2-3622-9f3a-41d801842f14.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f5:06:21:24:eb:fd:e0:61:08:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=becb9ee3-d9ff-4647-9b8c-6f7772245dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:4e:d2:76:8d:8c:57:f4:e3:60:84:d3:49:
                    ac:82:87:36:cf:17:95:a8:15:85:78:b5:1e:59:50:
                    88:4d:86:f2:32:ea:99:38:32:d7:b7:10:9b:89:52:
                    22:c2:03:20:a7:52:4b:24:1f:e2:e8:4f:f2:23:46:
                    06:e5:d4:fe:74:64:0a:c3:55:dd:ea:5d:8c:e7:6c:
                    47:33:1c:ba:03:3e:45:3e:4e:c4:fd:3a:df:b3:0d:
                    25:9c:4a:f5:30:8a:22:62:c1:a5:0d:a7:32:61:ba:
                    15:fd:e9:81:73:10:f3:64:91:2e:12:89:13:11:89:
                    9e:65:27:be:93:e6:8e:18:f8:48:70:c8:fb:31:89:
                    2a:d6:48:25:0d:7e:c5:0b:a3:b9:a8:48:65:03:4c:
                    5a:d7:0d:07:9c:4c:b5:93:16:f1:dd:2e:da:7a:4d:
                    79:25:67:56:87:f1:7f:f6:32:15:0f:ed:d2:40:26:
                    76:56:47:1d:72:01:2e:a1:4d:48:d6:a3:1d:c9:b8:
                    dc:4b:65:31:0a:fc:93:40:8f:7f:a8:87:8b:79:4c:
                    b3:be:2a:f6:85:3c:b6:2b:79:59:a2:73:1e:f4:43:
                    71:4b:60:79:e9:f3:56:d5:d9:c1:b3:94:b6:0d:99:
                    e6:60:35:f7:43:4e:e2:30:f2:47:ce:70:08:6c:51:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0F:38:8F:BF:6E:CA:03:58:6F:F0:FE:9A:11:7C:B0:6A:74:D3:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/497ddbc8-7ef2-3622-9f3a-41d801842f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:85:cd:c7:70:36:fb:d3:2e:60:78:c9:b1:50:d6:d9:4c:
         e0:2a:63:da:e8:b6:f0:aa:94:4d:b6:d7:90:0f:7f:a4:b2:c8:
         5b:c8:ca:2e:39:86:e2:2c:e0:bc:62:e9:5a:b4:a0:e4:21:9d:
         70:8e:75:8c:4c:7a:68:46:e8:d2:0e:ec:59:ca:45:af:dd:84:
         03:b9:71:a8:05:43:ff:12:ad:76:7b:5f:ec:86:77:b5:bb:56:
         73:c5:75:da:79:55:49:17:01:8b:3b:86:ec:4b:01:a8:17:87:
         31:a2:e5:69:70:b2:db:a4:81:87:a6:db:4c:09:a9:89:a6:75:
         63:f8:62:31:81:0c:27:3c:80:d5:c7:02:6a:e8:c6:c6:02:99:
         eb:69:08:df:69:93:2f:a7:7a:79:2e:30:bf:96:2f:23:3f:6b:
         4b:92:97:93:01:20:f9:a9:cf:e8:36:14:44:3d:84:34:f1:8d:
         27:9b:61:68:e5:b0:30:3a:f3:e2:a7:b3:9c:36:fd:bd:68:82:
         10:ac:cc:1a:52:2f:d6:ba:51:1e:e9:c3:7a:f9:76:8d:28:de:
         52:6d:98:6d:3c:31:4c:ec:71:79:95:ed:3a:13:e0:c0:a7:f0:
         ce:5d:b7:d8:c3:00:b6:77:0e:e7:b0:9e:fd:7a:ef:a1:fd:11:
         97:07:a8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----