Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6b536047-b523-313d-b991-16dfb810d3a8.roa
File:                     6b536047-b523-313d-b991-16dfb810d3a8.roa (raw, json)
Hash identifier:          kdCLQSGTyATDNWzYBAL/TdgSrdaSrPuFPR+dg+G00r0=
Subject key identifier:   72:5F:F4:D2:53:C3:BC:C3:D7:B0:9A:70:BE:96:EC:2F:16:A0:44:FA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309F65058EA63C53AC4491500
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6b536047-b523-313d-b991-16dfb810d3a8.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f6:50:58:ea:63:c5:3a:c4:49:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=768d1b04-6ace-4725-9a5d-67af076bbbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3a:c9:13:e9:ff:e4:1a:5b:45:21:6a:62:bd:
                    be:84:e6:07:a2:9b:71:b5:4f:c4:c1:41:35:dd:65:
                    33:e1:d4:25:e1:37:c2:57:0f:3a:dc:04:c2:3c:42:
                    89:15:bf:cb:63:46:2e:68:6e:96:80:69:c6:6a:f1:
                    aa:7a:db:6e:cb:97:ba:f9:f7:bf:40:7a:a1:85:0d:
                    8f:ef:b7:fb:96:e5:e1:54:c4:23:05:62:4f:6c:46:
                    53:93:c8:ba:eb:b5:c2:f1:32:2b:f6:8c:5e:34:58:
                    1c:63:7b:cd:8a:a8:4f:64:8c:aa:f4:2e:eb:1b:d2:
                    8c:6c:56:6c:4d:95:0f:b8:9f:99:b4:61:e7:16:68:
                    c5:b1:48:0f:b4:98:dd:87:14:7d:a4:28:78:f4:30:
                    67:af:c9:4b:5d:a3:c8:1f:b8:7a:1b:b5:4b:5b:ff:
                    52:2a:a7:f9:95:0e:a4:eb:f9:57:4c:ee:45:c4:2c:
                    07:12:78:90:d4:50:b3:96:70:84:9d:8a:a9:ba:9a:
                    fc:81:42:05:58:ba:e3:50:92:f8:7a:1a:2f:b8:d5:
                    5f:b5:fc:93:1b:ea:2f:a3:08:65:42:1a:e8:55:90:
                    e3:86:80:14:68:fa:42:d8:c3:8e:3c:4d:ba:d3:6d:
                    82:c9:5e:d7:86:60:12:10:f7:39:9d:e2:22:d6:5a:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5F:F4:D2:53:C3:BC:C3:D7:B0:9A:70:BE:96:EC:2F:16:A0:44:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6b536047-b523-313d-b991-16dfb810d3a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:03:d6:56:b0:2a:c8:02:df:37:17:aa:9c:c8:00:58:68:2a:
         a8:d2:8d:97:6f:37:e3:ed:fa:7f:00:df:56:ed:7b:3a:48:46:
         08:91:32:d0:ba:2b:de:70:4e:ea:d4:c6:50:bb:3d:1e:5e:92:
         c7:23:71:b4:ce:ec:11:62:c1:14:d7:38:67:eb:98:1e:50:e7:
         0a:31:a0:18:81:5f:d9:8d:aa:e1:bf:84:27:8a:38:3b:f2:b3:
         2d:39:80:f0:32:f3:3f:92:b3:c0:2a:3c:c6:48:ea:e2:71:be:
         ea:50:a3:c4:d0:e0:48:e8:1e:70:16:18:22:6c:9d:fd:1d:bd:
         74:c0:93:79:4b:c2:0b:41:a6:72:44:e7:84:47:66:7e:7e:0f:
         4c:cd:b7:c5:ce:1a:1e:7b:7c:64:63:b8:21:2c:6f:0e:45:fc:
         ac:5a:77:39:ca:9f:43:97:3d:7d:f0:d3:db:3e:6b:b7:da:0a:
         7e:e0:95:65:4b:7e:80:93:8c:3e:89:c3:bd:29:e7:02:8a:95:
         d1:49:3a:ce:89:11:9e:1b:d4:2e:da:0d:93:ec:aa:e0:14:59:
         61:cc:9a:5c:6f:3a:50:9e:68:06:44:8a:78:83:53:a6:96:d6:
         43:97:15:30:f4:0f:5a:94:b0:06:aa:b4:c5:9e:19:cd:6f:49:
         8e:2e:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----