Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/73d399b6-4c9b-35f2-8422-dd68b9eecf13.roa
File:                     73d399b6-4c9b-35f2-8422-dd68b9eecf13.roa (raw, json)
Hash identifier:          8nU4lk76HZ5NruMoBT929SjJnio/LWLUPp7XxEbmrmU=
Subject key identifier:   6F:72:A8:24:36:6B:3E:F6:50:30:59:FE:49:74:63:39:D5:F6:61:23
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A2524E3B373246182FCF8A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/73d399b6-4c9b-35f2-8422-dd68b9eecf13.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:14:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:25:24:e3:b3:73:24:61:82:fc:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=06564d91-b144-4a9e-89b3-11c87179d70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:5d:ca:5c:2f:33:29:a6:8e:42:e0:b6:16:
                    94:bb:cb:6a:58:b7:97:df:80:c2:37:85:c1:96:7a:
                    d0:ba:bb:14:6a:b9:73:3f:72:03:19:a8:52:9c:ff:
                    2e:37:2a:68:89:60:71:27:05:bb:68:87:8a:72:db:
                    76:5b:b6:15:f6:cb:55:77:d2:c6:48:06:fe:bf:bf:
                    bb:98:81:3d:33:20:05:9f:1b:ea:a7:8f:a7:59:90:
                    fb:42:fd:63:c4:46:58:0d:02:ef:b1:bc:ba:62:f3:
                    b0:87:1d:1f:08:f9:45:4b:a5:67:c3:a4:78:2f:3a:
                    c4:d4:6d:dd:24:77:55:4d:1c:01:d5:f3:28:52:07:
                    b2:c3:01:64:d9:f9:0a:a2:cb:25:32:eb:88:3b:07:
                    c4:ef:9a:09:b6:6f:f4:a9:fe:8c:b7:d3:b8:6d:6c:
                    1d:47:23:21:a7:13:50:6b:17:99:9d:5b:6b:27:28:
                    c1:aa:30:06:db:63:4d:bd:1d:e6:8d:64:48:e8:86:
                    55:33:8d:2e:9e:de:ea:a9:33:6d:df:99:5c:c2:c2:
                    7a:85:83:61:35:6b:72:3c:03:33:ae:e1:9f:50:46:
                    b3:60:ef:ba:78:c7:8a:92:20:3f:d9:74:d7:e0:f8:
                    8d:4e:53:86:2f:04:32:cd:5a:3f:10:81:8c:76:12:
                    62:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:72:A8:24:36:6B:3E:F6:50:30:59:FE:49:74:63:39:D5:F6:61:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/73d399b6-4c9b-35f2-8422-dd68b9eecf13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:4e:8d:68:eb:ed:30:18:59:5b:70:25:4b:04:58:f9:dc:62:
         69:8a:4d:02:51:fb:f1:70:0b:cc:26:61:b1:59:8f:41:e9:9b:
         d8:99:6f:1a:23:b5:4d:98:3d:d8:27:f7:a5:bd:ce:78:56:d9:
         7f:b1:4d:8e:94:d7:fb:03:60:2d:82:78:ce:df:8d:0f:6e:65:
         82:5d:87:07:d7:cf:4f:65:c6:6f:5d:2f:6a:2a:78:fd:3e:e5:
         87:71:fd:67:4c:c3:e0:64:f4:a8:0c:21:14:53:d6:61:07:17:
         84:7c:51:ca:5c:e5:8a:25:9e:b6:4a:aa:27:16:96:4a:cc:c4:
         d3:72:ef:b3:18:c8:7a:b6:3d:2d:70:d8:ea:c4:b3:ef:d0:11:
         f7:06:eb:10:b4:9b:25:8a:83:b6:70:d5:4a:b5:aa:67:7e:ff:
         0e:71:16:f0:67:3f:6b:8f:59:ab:14:46:d1:c7:4c:b4:8f:27:
         4f:53:24:ad:cd:1b:d8:97:3a:80:33:69:b0:8e:97:9d:25:73:
         2d:92:86:da:b2:cd:8b:14:60:55:52:e2:aa:af:08:65:da:a4:
         03:08:f8:dd:4a:00:14:a0:37:9d:02:b4:57:1b:09:23:d3:25:
         78:c5:bd:ea:74:7f:6f:5e:1d:c9:39:fd:43:91:e6:70:2f:6e:
         f0:19:16:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----