Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9a75e19e-3b7b-327f-8d02-634eaf228f66.roa
File:                     9a75e19e-3b7b-327f-8d02-634eaf228f66.roa (raw, json)
Hash identifier:          5B8+HHg+StaEwS7FDtNhmArKNZcsZxYDS+jsBUuYoms=
Subject key identifier:   65:68:8E:41:0E:75:2D:EB:A8:33:90:B2:DA:21:91:9E:17:CA:6D:32
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A03DD8C770D4008CBBB6580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9a75e19e-3b7b-327f-8d02-634eaf228f66.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:03:dd:8c:77:0d:40:08:cb:bb:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c319497f-90b0-4d9e-8931-dbc29299669e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:d4:02:74:bc:e5:2a:e4:73:1f:6f:03:01:
                    9a:0a:fa:0e:98:91:a3:4b:d5:a5:23:f1:a1:2b:bd:
                    72:da:ea:7b:a8:a9:a2:ca:fc:47:f9:96:12:67:98:
                    49:48:50:5a:51:2c:5c:50:4b:e4:a4:a0:1b:19:b6:
                    83:33:eb:91:dc:e5:32:02:c1:cd:2c:d6:8c:3e:91:
                    5e:f1:59:ca:a8:a7:9d:56:e1:1d:78:01:22:2b:0e:
                    c0:b1:8b:67:f3:db:a0:52:78:f6:04:ea:27:06:d0:
                    54:75:15:6e:e3:6d:b5:2a:06:81:ca:e6:8d:00:b6:
                    99:43:35:04:90:ae:30:5d:c3:21:46:0a:3b:05:f5:
                    3f:dd:c4:70:2a:9f:fa:b7:eb:98:93:08:91:a9:b4:
                    a5:13:a9:b0:25:96:94:67:5c:5a:d0:9e:12:e3:c8:
                    cb:9b:d9:ce:d7:f9:65:ad:bc:b3:76:b4:6e:aa:30:
                    c4:e8:4b:d3:7b:52:aa:bd:be:4a:58:7c:8d:27:d2:
                    ab:9f:dc:6f:e1:16:94:65:f8:15:29:eb:9c:f3:7d:
                    d4:6b:33:dc:ed:9d:97:78:1e:99:72:9f:d3:fb:c8:
                    f8:60:70:6e:00:f6:9f:4e:6c:05:b3:ce:dc:34:3d:
                    73:cd:48:f7:ad:b8:30:04:9b:23:78:72:72:be:6b:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:68:8E:41:0E:75:2D:EB:A8:33:90:B2:DA:21:91:9E:17:CA:6D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9a75e19e-3b7b-327f-8d02-634eaf228f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b8:9c:18:cd:ac:fe:fd:33:f4:24:96:0e:70:41:03:47:fe:
         88:47:9b:b3:30:45:37:0b:db:03:e1:99:2e:a2:01:3b:6f:2f:
         13:ee:dc:1a:a4:fc:b8:ed:d5:d1:bc:ae:fb:e6:17:d3:ae:81:
         52:1c:5d:8d:dc:2e:fb:f3:4b:fe:fc:8d:f1:85:02:cd:51:c2:
         92:a3:a7:17:6f:de:f9:aa:ea:f7:89:fc:fa:7a:24:71:a3:75:
         8b:6c:0b:52:25:6f:74:96:c6:58:54:1c:f2:e5:58:d3:3d:d4:
         67:fc:d0:29:85:52:71:18:37:b0:f2:7b:40:f5:51:a7:31:a5:
         a5:bc:ff:81:42:a6:3d:b3:95:44:f3:f9:9a:c1:28:4f:45:69:
         ba:b5:50:c1:48:62:65:57:84:82:6b:f1:82:5b:a8:fe:48:69:
         ea:3f:8b:29:b8:be:84:a4:d6:bb:59:74:2b:3f:e0:cd:7e:e2:
         ce:ce:0b:80:00:1e:ba:85:13:ba:23:62:73:fa:5e:b0:96:f6:
         ad:04:11:cc:4c:9e:23:a1:f8:0c:62:0f:4d:7f:48:50:ef:c5:
         47:37:1f:f7:19:31:79:63:d7:b7:72:be:4e:26:49:3f:24:9a:
         4d:1d:14:3c:15:87:8f:69:7a:b6:c2:70:27:16:8b:a5:d8:ab:
         5a:39:6c:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKA92Mdw1ACMu7ZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzMxOTQ5N2YtOTBiMC00ZDllLTg5MzEtZGJjMjkyOTk2NjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou/UAnS85Srkcx9vAwGaCvoOmJGjS9WlI/Gh
K71y2up7qKmiyvxH+ZYSZ5hJSFBaUSxcUEvkpKAbGbaDM+uR3OUyAsHNLNaMPpFe
8VnKqKedVuEdeAEiKw7AsYtn89ugUnj2BOonBtBUdRVu4221KgaByuaNALaZQzUE
kK4wXcMhRgo7BfU/3cRwKp/6t+uYkwiRqbSlE6mwJZaUZ1xa0J4S48jLm9nO1/ll
rbyzdrRuqjDE6EvTe1Kqvb5KWHyNJ9Krn9xv4RaUZfgVKeuc833UazPc7Z2XeB6Z
cp/T+8j4YHBuAPafTmwFs87cND1zzUj3rbgwBJsjeHJyvmsa2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGVojkEOdS3rqDOQstohkZ4Xym0yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvOWE3NWUxOWUtM2I3Yi0z
MjdmLThkMDItNjM0ZWFmMjI4ZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACO4nBjNrP79M/Qklg5wQQNH/ohHm7MwRTcL2wPhmS6iATtvLxPu3Bqk
/Ljt1dG8rvvmF9OugVIcXY3cLvvzS/78jfGFAs1RwpKjpxdv3vmq6veJ/Pp6JHGj
dYtsC1Ilb3SWxlhUHPLlWNM91Gf80CmFUnEYN7Dye0D1UacxpaW8/4FCpj2zlUTz
+ZrBKE9Fabq1UMFIYmVXhIJr8YJbqP5Iaeo/iym4voSk1rtZdCs/4M1+4s7OC4AA
HrqFE7ojYnP6XrCW9q0EEcxMniOh+AxiD01/SFDvxUc3H/cZMXlj17dyvk4mST8k
mk0dFDwVh49perbCcCcWi6XYq1o5bG8=
-----END CERTIFICATE-----