Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/51c688f0-029f-3f8f-b2a3-bec97a9a2c16.roa
File:                     51c688f0-029f-3f8f-b2a3-bec97a9a2c16.roa (raw, json)
Hash identifier:          hB3LkGw3OldED++/lDVuQr5yW0fBfrMdxU9x/ctppX4=
Subject key identifier:   99:FA:58:03:C1:4A:E0:7D:C5:2F:0A:1E:75:16:91:4A:44:F1:26:21
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309F9C66E40CE3427FECCA680
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/51c688f0-029f-3f8f-b2a3-bec97a9a2c16.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.222.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f9:c6:6e:40:ce:34:27:fe:cc:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=23cda034-15c3-4107-b515-3d1174803c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:92:73:a4:a0:6a:6f:df:49:33:81:14:9d:58:
                    3a:e9:97:77:eb:36:63:e5:13:83:87:49:46:eb:f8:
                    f9:b4:25:58:9b:2b:5a:43:7e:d1:2b:b8:7d:62:03:
                    2f:6d:cb:32:34:dc:df:ae:18:6c:a2:34:f6:8f:d9:
                    53:58:77:44:7e:a9:78:d2:93:d8:0f:a1:26:d1:c3:
                    84:60:86:af:ce:3a:c1:ba:43:eb:f0:25:39:7b:87:
                    05:24:a5:34:d1:bb:b5:a7:4d:73:b6:c3:6c:eb:c2:
                    8b:dd:13:93:12:c5:31:51:f3:bd:09:94:0c:f9:c0:
                    c5:f3:4a:f2:cc:c3:d6:25:9b:73:fd:81:71:90:23:
                    51:d6:e1:c9:8e:dc:ba:9d:c0:f9:81:11:98:28:4a:
                    ad:b1:7a:d5:61:93:24:d1:cc:4e:68:fd:48:45:e5:
                    a6:ed:cd:f6:c9:df:78:2f:d8:03:de:f0:cd:0d:17:
                    2c:9f:d3:34:64:9c:a0:7c:5b:3f:7d:4c:c0:64:fd:
                    9a:26:db:d6:37:39:57:5f:52:1e:0f:a2:07:05:f6:
                    f2:04:43:7f:e5:9e:51:00:f3:6f:97:fe:23:07:dd:
                    ef:d2:e3:03:58:bc:86:ca:2d:e3:cc:1f:bb:96:d3:
                    68:e9:ef:a9:be:73:8f:7b:ac:1c:de:31:ac:57:25:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FA:58:03:C1:4A:E0:7D:C5:2F:0A:1E:75:16:91:4A:44:F1:26:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/51c688f0-029f-3f8f-b2a3-bec97a9a2c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a9:f4:20:f5:ec:bd:74:74:3d:33:2d:a4:b5:c3:93:ef:8d:
         83:35:d2:37:2a:aa:7d:77:f7:11:55:ee:a3:b3:48:1f:c3:90:
         50:06:14:0d:3a:0d:69:be:cf:81:27:12:db:cd:bb:96:ae:7f:
         5c:a7:39:52:7e:e9:2f:44:67:ff:76:16:9d:fa:b0:ca:59:3c:
         30:13:59:af:66:99:ec:13:41:ab:69:af:2d:25:4b:da:ca:a8:
         f1:a8:b9:d8:14:72:ab:9f:90:7d:b2:2a:a2:6d:50:4d:7c:ec:
         9c:77:b8:a1:d6:e5:a0:2c:76:5b:76:99:85:d2:b0:50:a7:30:
         ff:52:c7:09:df:27:55:3d:18:ba:83:84:bd:db:d2:47:93:d1:
         fc:4c:71:c4:70:ea:d5:34:65:49:8c:72:a0:ec:04:cf:e4:1c:
         4d:8b:cc:ea:cf:6d:60:f4:1f:4b:d4:a5:93:42:fa:47:57:48:
         22:31:8c:35:36:84:fa:62:74:d3:79:c1:34:da:a3:3d:4b:33:
         9a:e9:be:03:f4:15:48:b4:19:db:6b:1b:98:e9:d2:e9:22:08:
         55:2a:36:2b:9a:40:87:0b:a5:d5:b5:51:11:2f:d0:61:73:4e:
         a9:b1:3c:b0:7f:64:f7:11:ed:e6:d9:60:a5:88:14:d2:5b:bf:
         10:a5:10:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----