Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/931603e6-dde2-3a9b-b58b-1c87fb2b6de5.roa
File:                     931603e6-dde2-3a9b-b58b-1c87fb2b6de5.roa (raw, json)
Hash identifier:          2BUXt1WrjFYk0FvefzJDiYai2xtWfGZTpoDU2GnLmbs=
Subject key identifier:   90:1C:FC:47:CB:71:96:89:F1:F2:36:21:2B:8B:90:29:20:E2:D0:D3
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A00DFB4241382D06EA58448
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/931603e6-dde2-3a9b-b58b-1c87fb2b6de5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:00:df:b4:24:13:82:d0:6e:a5:84:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=afd8c874-f22e-455f-8f74-8246bcbd2395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:4f:3f:b8:e1:45:ce:cb:88:9f:37:9c:c1:
                    e1:9a:97:2b:30:3d:23:20:22:15:33:6d:2f:fe:66:
                    76:35:88:3f:1e:9a:85:e9:b0:24:e9:3b:2e:48:23:
                    e8:77:d5:32:2c:8f:f5:a3:da:6d:89:c8:0f:b6:c4:
                    09:30:d3:bb:d9:a3:fc:20:90:74:ad:79:ad:31:fa:
                    1a:d8:4f:d3:99:34:01:30:4f:c9:ad:70:fd:78:33:
                    e9:f5:67:3a:61:81:d9:67:43:15:95:86:51:ed:2d:
                    85:cb:22:71:c3:10:e8:0c:ca:d8:08:84:ee:49:be:
                    cd:e6:d5:7b:bd:ec:51:79:a2:41:07:1f:4c:5d:ed:
                    a1:9e:05:20:5b:71:94:23:95:5e:ef:73:a7:95:9a:
                    26:28:39:29:8f:c9:84:37:6a:7e:bc:c9:4d:a0:1d:
                    dc:7a:b7:f5:de:ec:1b:12:02:50:6b:f6:4a:16:dc:
                    33:9f:45:72:aa:4a:f8:32:bf:31:6a:34:5f:7a:7a:
                    ca:52:9f:38:0d:b7:19:2c:21:f7:59:4b:23:6f:00:
                    a6:0a:6c:b7:8b:01:c1:95:67:5b:58:8d:fd:dd:2e:
                    a3:69:d3:78:24:da:b0:0d:9a:a0:bd:1b:8a:40:44:
                    ba:e7:12:ca:d9:52:44:59:9e:a0:84:6d:c6:1b:0d:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1C:FC:47:CB:71:96:89:F1:F2:36:21:2B:8B:90:29:20:E2:D0:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/931603e6-dde2-3a9b-b58b-1c87fb2b6de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b1:c6:0e:42:1b:54:5f:23:b2:58:a3:8f:e3:45:d5:74:65:
         f8:82:41:4f:87:74:bf:7f:64:5c:55:63:79:ed:59:34:88:6e:
         df:3c:b3:26:9d:bc:21:2b:37:19:54:29:71:08:1e:d9:52:f4:
         4e:09:e3:c7:1a:c4:1a:2a:bc:5c:aa:e4:0a:a1:32:3b:46:0a:
         ae:c9:b4:fc:02:d9:a3:a9:ca:03:5f:1d:fb:4b:8a:cd:0f:26:
         1c:b0:f8:3d:4e:c3:60:e2:a7:b9:9e:12:3d:34:0f:55:00:37:
         06:f8:86:fd:40:c1:e5:ab:23:44:cb:2b:03:62:8d:fd:5d:88:
         a7:c5:79:fc:b5:44:02:ed:76:f0:09:ad:cd:b3:e1:c8:8e:4d:
         5c:a2:5b:34:cb:9c:9f:3d:d1:a9:c7:b5:40:ce:a9:61:2d:3c:
         7e:39:d7:39:94:42:38:04:e1:36:cb:ca:34:f9:3d:4c:85:94:
         a7:11:b0:30:12:8f:ab:87:b0:ec:c6:cf:77:87:b4:59:83:57:
         e8:73:57:c7:7c:74:be:c4:5a:5b:4f:c0:8c:c0:e4:1c:b4:62:
         8b:eb:0b:f8:3f:05:82:6c:a2:1d:37:99:a9:70:4e:89:8d:47:
         15:5a:02:bb:f1:ae:2f:e0:d2:04:4a:b2:de:74:3a:84:6d:45:
         a8:7f:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----