Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/88bb3297-179a-3652-a6ba-ca7be207f2a0.roa
File:                     88bb3297-179a-3652-a6ba-ca7be207f2a0.roa (raw, json)
Hash identifier:          oOgnTzV1hOug0us+7G+v9w3Jh+kpZOwJAcjb31CRUmQ=
Subject key identifier:   A0:69:AD:98:3A:36:C4:5A:6C:17:A9:24:36:BC:F6:93:8D:5E:7D:4B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A1CF2A037F51C8C2D1E1AC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/88bb3297-179a-3652-a6ba-ca7be207f2a0.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.232.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1c:f2:a0:37:f5:1c:8c:2d:1e:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=1358aa36-eab2-4946-a86a-3370739525ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e4:14:67:6f:d8:be:be:de:f8:c5:b6:6d:1c:
                    5f:71:8e:ab:17:fb:09:20:1f:27:9d:de:79:de:63:
                    d2:7d:9c:a4:11:42:a3:da:37:d3:0a:f7:8d:67:cc:
                    c0:bb:04:9b:ab:4e:a2:84:92:1b:08:aa:b3:47:17:
                    fd:0d:55:7e:9f:64:4b:11:3a:4d:35:04:4d:f8:87:
                    9b:73:e4:74:bf:90:57:71:c2:90:1f:1a:20:a1:7c:
                    1f:c2:50:05:1f:fe:f9:6b:11:42:a9:9f:9d:44:6a:
                    63:7c:6a:b7:c0:7b:a2:86:f4:35:53:9a:bb:d0:2d:
                    90:ae:4b:bf:df:eb:5e:2e:46:38:83:a6:e0:d8:a0:
                    58:ea:aa:b1:6d:7a:45:ef:a8:cb:b2:a8:89:61:5c:
                    a8:a8:97:54:9f:50:89:da:af:a8:ad:1d:e7:f5:42:
                    e2:6c:36:24:a1:3b:55:88:d8:6f:29:9a:8d:e2:2d:
                    db:21:73:89:af:04:5d:e5:41:2c:31:7e:92:d2:9d:
                    fb:61:8a:75:8d:04:5a:5f:f9:53:4a:8b:2b:76:4d:
                    85:92:6f:28:5b:ef:f6:33:7f:b2:ec:d6:ec:f3:83:
                    50:b4:71:0b:81:82:37:68:f7:ee:26:37:a5:1b:0e:
                    aa:04:f6:a4:90:0a:96:2e:b7:2b:0a:c9:38:b2:66:
                    8b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:69:AD:98:3A:36:C4:5A:6C:17:A9:24:36:BC:F6:93:8D:5E:7D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/88bb3297-179a-3652-a6ba-ca7be207f2a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:63:94:e4:ef:c4:4f:cd:ae:38:de:1a:35:4e:46:62:68:c7:
         52:f0:57:00:8a:13:93:7a:4f:b8:ad:5a:d1:b0:d1:7c:e4:30:
         f2:c7:78:9e:cc:e2:a6:47:82:26:b6:8d:94:d6:9c:ab:c3:f8:
         56:10:af:3b:f8:e6:31:0e:6a:3d:5e:8b:a1:5d:d8:a0:d3:a1:
         15:71:df:82:b8:7e:af:d8:1b:c1:67:30:bf:77:b8:38:f3:ec:
         fd:ec:51:f2:f4:29:1a:e5:d1:ca:f9:e1:f7:28:41:62:21:d5:
         7d:f5:02:39:95:e7:99:81:81:ae:8c:2a:13:e4:b2:80:3f:c4:
         b4:c1:0c:f5:4a:77:3c:c4:ea:e8:63:6d:af:8f:68:86:50:50:
         ca:50:2a:65:eb:70:8f:95:21:af:b2:d9:87:63:de:67:11:84:
         7f:f7:48:9e:3f:a7:5a:1d:07:6e:0e:9b:9a:d5:07:4b:7e:9f:
         00:74:90:79:93:08:c1:56:a5:38:8b:f1:4b:88:1b:a0:9c:15:
         b7:5f:1d:56:4a:e2:07:91:b0:9c:66:a9:85:dc:1a:ac:44:75:
         43:ea:33:36:89:f7:f9:af:eb:31:01:49:38:45:d9:c7:88:a9:
         e3:b6:77:f1:d1:a8:64:0f:f6:27:de:48:be:05:d7:db:73:6c:
         66:5b:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----