Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6a5ef020-85ca-377b-9807-5715bfd76370.roa
File:                     6a5ef020-85ca-377b-9807-5715bfd76370.roa (raw, json)
Hash identifier:          ztBS867WDsM0iLFK0mu1pw2rIMr8a/BIbVqG2uaVgpw=
Subject key identifier:   5D:BC:56:E7:80:3C:E3:66:10:BD:B7:88:AD:88:1F:B0:6D:C6:41:AD
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A1F1E337BFF0EA26C6065C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6a5ef020-85ca-377b-9807-5715bfd76370.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1f:1e:33:7b:ff:0e:a2:6c:60:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=60e08f50-dd06-4090-9883-ac7ce9bfd7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:46:be:f8:76:94:8a:10:7b:89:d3:56:1a:
                    d5:14:2d:e3:37:09:12:04:0f:fb:28:f2:63:9b:b0:
                    76:01:3d:69:7b:18:ef:2b:fe:24:f4:79:25:75:0e:
                    4e:52:81:45:4d:63:49:01:c7:18:a2:4f:aa:cf:ce:
                    3f:c6:3d:9e:30:93:69:00:60:26:a0:d0:b8:ce:1b:
                    2e:6b:7b:7e:56:77:f0:e4:41:f0:03:63:95:f0:6a:
                    dd:01:25:8b:29:42:37:10:83:44:99:ff:18:b6:3d:
                    a1:e1:2e:bb:2c:e6:4b:05:13:56:f4:3b:7d:34:c6:
                    c4:78:8e:01:78:77:8e:c7:b8:49:3e:16:43:94:49:
                    66:fc:11:c1:14:e1:6a:5c:88:bc:b0:ff:07:72:3b:
                    84:36:18:c2:9a:7f:93:17:c4:76:1a:05:fa:61:49:
                    2d:a2:af:4a:a2:06:4f:86:ed:6e:b3:86:7d:ee:a3:
                    2d:78:12:51:68:f3:3e:4b:b9:5b:d1:4e:3b:c4:56:
                    3e:21:b2:c1:9d:30:7c:1c:77:8b:c5:19:63:72:0c:
                    4d:20:46:2b:3e:3c:68:29:5b:62:10:09:46:79:57:
                    d3:f5:96:29:70:c2:d9:59:71:9c:10:b0:44:c5:96:
                    62:ed:14:01:ca:de:8a:e2:f8:cd:b3:f7:7b:09:d5:
                    1d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BC:56:E7:80:3C:E3:66:10:BD:B7:88:AD:88:1F:B0:6D:C6:41:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6a5ef020-85ca-377b-9807-5715bfd76370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:fb:13:bb:bb:50:b4:0d:00:51:dd:70:87:b8:f7:5d:b1:dc:
         8b:d0:43:ae:e4:fc:f0:9a:75:67:0c:43:64:43:89:64:22:8c:
         c8:4c:bd:a9:38:05:5d:8f:cd:38:46:68:2a:ac:f5:04:0c:a0:
         ac:42:19:bd:ee:b3:15:56:b8:17:ea:5a:7e:7c:1e:a1:c4:f9:
         84:42:27:05:70:b9:e8:d8:74:d9:08:5b:e9:a3:80:dc:69:43:
         ba:66:37:4a:46:1a:e7:1d:a9:7a:1e:fd:ff:b5:55:f9:84:95:
         ac:59:7a:5c:fa:a5:c3:64:c8:b2:1b:ec:ca:fd:3d:2e:7b:36:
         a6:4f:9f:a5:a5:43:e3:e6:0a:8e:6e:a6:8b:cb:26:c3:6b:d5:
         95:c8:fd:75:42:a5:67:de:5b:fc:24:e0:c9:82:13:ae:be:65:
         d2:ac:bb:70:d6:a7:73:29:54:8f:ff:46:9e:08:26:53:09:28:
         08:9e:06:90:5a:d2:a4:23:ef:c3:b4:17:66:9b:c4:d6:29:06:
         41:e3:40:42:a2:1c:52:6a:cc:94:f4:7e:a4:85:e3:c7:40:68:
         4a:10:e3:ba:09:3b:87:cc:cc:72:cb:95:08:17:2c:20:c3:55:
         d7:3c:6f:52:fd:18:e6:81:c4:77:a9:fa:1d:5e:ff:b7:d1:9d:
         16:9c:56:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----