Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/794d6017-f28d-3f83-a217-39b52222d4f3.roa
File:                     794d6017-f28d-3f83-a217-39b52222d4f3.roa (raw, json)
Hash identifier:          gQ1d8U1OL3suRyoz+HjGxs1TAonWWPYS9YBTB27MuJQ=
Subject key identifier:   BF:66:69:55:08:B4:EF:5F:E4:DA:A4:F5:C9:E3:AB:E9:C7:D3:10:8F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A07783348D11D14D95A54F0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/794d6017-f28d-3f83-a217-39b52222d4f3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:07:78:33:48:d1:1d:14:d9:5a:54:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=0d276bb7-8060-4ac3-beac-027f944c2b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:65:b1:c0:93:08:f3:cf:59:09:bb:49:32:
                    c3:e3:c9:07:55:c8:24:61:cd:40:c1:bc:3b:86:16:
                    36:e1:f3:b5:78:04:2d:d2:4a:24:57:b7:aa:16:21:
                    a2:24:d2:64:6c:01:7a:7f:91:a7:3e:b3:3b:32:6d:
                    93:0b:ac:a7:64:9a:32:6f:df:73:33:a6:23:fa:75:
                    2c:23:53:c8:5e:5f:e7:b3:f4:65:e4:45:e8:64:bf:
                    d3:52:58:10:56:7c:3d:28:f3:e8:ca:46:d0:f1:95:
                    09:11:d1:e1:0a:9c:55:49:84:59:c2:57:55:eb:a5:
                    43:7e:52:9e:56:70:e7:f5:df:03:53:24:77:a3:ce:
                    b8:9c:9a:e8:39:74:48:7e:58:2e:c8:4b:2f:e2:d6:
                    84:4c:24:b4:d1:bd:7f:3f:1f:6d:fb:6a:21:32:9b:
                    3d:e1:23:6a:4c:34:53:0c:c9:1b:6b:2c:20:dc:2c:
                    92:64:ff:46:d0:20:1b:ea:9c:b1:df:df:a5:77:ea:
                    8d:56:40:7a:8d:3d:88:a4:90:c6:f8:00:1c:f2:6c:
                    7e:e4:bd:30:50:ff:a7:6e:15:8c:80:53:88:c4:73:
                    b8:be:9a:44:3f:3e:cf:45:c8:e8:d9:d5:0c:e9:57:
                    66:12:70:24:f1:22:94:71:86:33:46:bf:ee:ce:2d:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:66:69:55:08:B4:EF:5F:E4:DA:A4:F5:C9:E3:AB:E9:C7:D3:10:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/794d6017-f28d-3f83-a217-39b52222d4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:b3:40:77:f7:c1:2d:c9:95:49:01:9f:21:09:bf:91:1a:f8:
         36:2b:46:3b:f3:eb:0d:a4:00:ad:39:fc:11:8f:37:42:bf:f6:
         81:e5:0e:56:4f:e1:57:88:c7:ff:4a:78:dd:24:29:0e:4d:db:
         03:f3:cb:bd:4d:c0:d9:04:ba:00:7d:bc:e4:ee:06:ce:b1:66:
         b7:e4:ba:e9:e0:a5:85:93:d7:5e:ab:a4:49:a3:11:78:ce:fe:
         ba:6f:34:62:2e:b0:cc:f7:0b:d0:c1:2a:2e:df:52:3b:8f:2c:
         3c:b7:4f:26:6b:8b:67:61:ca:74:21:c1:7d:58:db:d3:1e:1c:
         b8:dc:d7:0f:05:ae:77:19:3f:af:58:fa:78:40:b8:92:6f:ce:
         69:0d:dc:36:0f:6e:a3:d1:bf:37:67:61:0b:dd:b0:02:be:d5:
         0e:bf:80:75:5e:9b:2c:b1:bb:ef:8c:46:33:8e:09:b0:8c:11:
         f5:c3:33:ce:b9:4a:c2:09:60:20:32:a4:7e:c6:af:23:86:d6:
         6d:df:1c:6a:5c:4a:8e:04:ea:df:1e:83:f4:77:ab:ea:ec:3e:
         5a:52:c3:9f:ae:93:2f:52:32:51:51:08:df:eb:30:6f:5b:9f:
         1e:c0:4f:8d:a6:1b:6c:c0:d1:07:a1:6f:f8:fe:ea:93:7b:ef:
         3f:08:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----