Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9dc559b4-ebaf-3a0c-8329-23f9eb86d78d.roa
File:                     9dc559b4-ebaf-3a0c-8329-23f9eb86d78d.roa (raw, json)
Hash identifier:          HrmNQilbZqsY78UXHcIh/UTsDw/E67J3IL44y/vt9Pk=
Subject key identifier:   28:C4:E3:2A:BC:A8:B4:36:6A:36:89:25:0C:02:88:DC:C1:16:32:D0
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A17DA187D73B4A29076D100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9dc559b4-ebaf-3a0c-8329-23f9eb86d78d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.240.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:17:da:18:7d:73:b4:a2:90:76:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9cc78ad0-6293-4886-8092-5bb2b9e267f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f9:50:e6:21:45:45:a2:bd:30:4d:a4:3e:60:
                    a6:c5:20:fc:15:dc:f2:46:39:0f:a6:a9:a6:0c:87:
                    da:d8:d9:9a:26:04:e6:b2:3f:46:cf:94:c4:25:f7:
                    5c:fc:8e:0a:fa:ab:24:06:9d:d6:cb:d5:a6:36:3d:
                    b0:2f:69:d5:76:e1:c8:e1:a2:70:e4:63:a8:ea:7a:
                    33:42:7e:c3:a4:d4:b2:63:19:b0:25:2a:f6:57:09:
                    3a:17:50:0b:4f:7e:48:aa:44:92:bb:bb:f0:aa:50:
                    d1:8d:d9:6a:c8:44:4c:7f:ec:59:71:e0:94:04:bd:
                    d5:7e:dd:d2:fc:f4:59:85:00:9f:38:49:e9:bc:a3:
                    6a:ed:d9:7f:7e:d3:47:93:75:44:ca:9d:dc:a7:4d:
                    20:d7:99:d4:5c:5e:af:3b:b0:a3:38:00:6c:fe:42:
                    3a:f5:07:60:a4:0a:e1:40:01:5d:0b:fb:fe:24:5b:
                    b2:7a:68:0c:3b:0f:e2:d2:ea:cd:2a:ff:32:15:1a:
                    80:84:5b:c2:39:96:c9:77:cd:a3:67:c4:30:a9:96:
                    f4:7d:16:d9:a5:d1:b4:34:6b:c7:db:f8:3d:99:1f:
                    85:c6:34:3c:51:b0:dd:9d:00:3a:78:40:6b:ef:b1:
                    3a:4d:78:b4:9c:50:2d:63:83:96:5c:6a:12:36:12:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C4:E3:2A:BC:A8:B4:36:6A:36:89:25:0C:02:88:DC:C1:16:32:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9dc559b4-ebaf-3a0c-8329-23f9eb86d78d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e5:5e:85:7d:08:57:95:78:36:80:8d:f3:87:38:c4:cf:ff:
         8a:7b:19:30:96:1b:96:96:23:14:13:9c:e6:9c:d1:98:99:70:
         65:43:97:3d:0d:76:49:cc:45:2c:a8:6d:d8:95:f7:70:6c:e9:
         7a:82:51:e7:4b:81:be:19:1e:f2:c4:ff:88:ab:51:4b:5b:4c:
         df:d9:01:6b:5c:31:01:77:a4:5c:d9:57:51:6e:bd:34:c0:dd:
         e0:2b:a4:11:05:43:4b:6a:a9:a8:ac:9e:51:84:f1:7d:9a:d5:
         db:13:bf:a7:f3:3c:5a:b9:f8:cc:ff:a2:2c:fd:e7:2f:21:72:
         26:7a:86:fc:d0:d6:06:13:86:ac:55:a3:b3:d9:27:ed:2a:be:
         32:29:c7:a4:5b:33:20:41:eb:5f:00:46:73:a3:53:bc:16:05:
         e1:5b:99:e2:6e:87:4a:c3:e0:30:59:2c:aa:e8:e9:9d:b3:71:
         78:4c:18:6e:7a:6e:a0:1d:fd:8a:09:76:52:7f:ea:7c:70:53:
         89:d3:75:36:fc:7e:1f:ff:83:2a:30:56:89:4c:89:41:1a:84:
         83:51:a7:ba:b6:f1:6c:c8:d1:78:24:06:19:e8:05:c5:88:4e:
         0d:01:45:c2:23:68:88:d2:1c:5b:3d:d0:5f:29:07:61:1d:15:
         7d:9e:e2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----