Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8473b133-0962-3f37-accc-54567dc3d4f4.roa
File:                     8473b133-0962-3f37-accc-54567dc3d4f4.roa (raw, json)
Hash identifier:          xdBiwKczL+uyNg1ABynnbxg1BDE3a4lM0HShkxx6v+Y=
Subject key identifier:   14:84:0A:17:6E:78:6C:DD:85:6A:BA:72:A0:1C:CF:1E:12:46:C9:40
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A24817092A4CCE9D01CBE00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8473b133-0962-3f37-accc-54567dc3d4f4.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.232.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:24:81:70:92:a4:cc:e9:d0:1c:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6b62d12a-be73-4fb3-82ee-8456340e1e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:4d:63:54:90:c6:13:90:09:37:a2:6b:d4:
                    5d:36:0d:13:dd:db:9f:83:85:78:93:c4:99:86:2d:
                    75:f6:13:df:f4:b2:d7:49:1a:30:3f:b5:ac:10:f1:
                    97:09:20:43:97:94:25:13:46:9c:07:79:e5:9f:a5:
                    aa:8a:c1:98:b7:23:f9:26:e0:bc:e7:f0:21:7f:9c:
                    6b:fe:76:b9:64:82:df:24:f4:e9:7e:8a:94:77:45:
                    17:fd:47:1e:38:0b:f8:49:40:8c:75:54:ef:51:fb:
                    7b:c7:64:9b:49:24:85:1f:d1:29:bc:d0:be:e6:cc:
                    e6:79:ad:ff:29:c9:4b:fc:91:33:e3:3d:8d:7c:19:
                    1e:52:46:6c:50:07:e4:a2:e6:a4:48:8e:0a:43:ec:
                    42:3a:a3:94:74:fc:d1:32:0b:5a:51:43:08:38:a7:
                    cd:70:9b:b8:69:cc:64:42:e5:e3:c6:dd:eb:fb:f8:
                    c9:8e:9e:30:c6:92:4a:c2:05:9c:56:ff:e7:84:c1:
                    9e:96:20:47:75:a5:80:09:d2:f2:e6:fb:94:b0:b8:
                    eb:bc:26:99:e9:4d:03:62:43:b3:78:3f:fc:35:d4:
                    2c:b0:d6:86:96:aa:7a:8d:e6:90:da:d4:93:b6:fa:
                    fb:4a:38:8d:e2:cd:78:b5:3a:a7:81:fc:98:1c:18:
                    f0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:84:0A:17:6E:78:6C:DD:85:6A:BA:72:A0:1C:CF:1E:12:46:C9:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8473b133-0962-3f37-accc-54567dc3d4f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:df:b0:aa:21:d1:cd:b8:28:72:10:6b:b3:3e:d9:e0:16:34:
         6a:32:ab:70:06:2d:34:42:27:40:43:8f:98:cd:e1:63:0d:0e:
         fd:f7:68:ea:1a:7d:0a:3b:f6:92:0a:26:ac:4d:ee:8b:b9:9f:
         2b:8a:28:f5:da:d1:da:94:05:85:1b:ee:f8:fa:cd:12:aa:a5:
         ff:22:c3:87:95:88:08:ba:f2:91:8c:03:eb:46:e3:eb:52:9c:
         63:7a:0e:49:31:5e:c1:95:9b:fd:31:b9:79:2f:da:b9:4a:46:
         a3:b5:b2:fb:a2:37:46:62:d1:20:74:92:3e:d7:d4:5c:2b:58:
         c2:3b:43:73:4d:b5:3b:07:b0:2a:7f:6c:97:ba:4f:84:d8:e4:
         c8:ff:e8:91:53:9c:e8:58:b2:07:b0:fb:cb:c4:f5:56:54:06:
         51:06:25:bc:ea:e0:eb:52:d3:33:df:0d:5d:75:2f:80:85:71:
         17:c0:9f:6d:7b:a7:76:2f:eb:39:be:f0:df:4e:34:90:25:fb:
         e2:d7:ac:93:9a:03:af:5e:78:f6:4b:d4:da:66:95:1d:31:5e:
         92:6a:58:04:cb:bf:55:34:45:30:60:ce:21:a3:07:8b:05:9c:
         c5:33:44:c4:15:b9:4c:ee:56:a3:79:b5:3d:d1:f7:a6:b3:5d:
         f0:a8:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----