Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9ed90f24-ce6c-3391-8178-f95fd054245f.roa
File:                     9ed90f24-ce6c-3391-8178-f95fd054245f.roa (raw, json)
Hash identifier:          UbUDoAv7V6yrfXc4OG/NEe2PmzVEaBgeEv3DB9vuFeo=
Subject key identifier:   06:6E:6A:59:08:FF:95:28:BC:D0:C4:ED:9B:B0:83:EE:CB:35:2D:8D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A24CBE33BD625095A906600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9ed90f24-ce6c-3391-8178-f95fd054245f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:24:cb:e3:3b:d6:25:09:5a:90:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=275833ca-ec2e-45e7-af82-d287e594a264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:a7:96:87:fd:01:36:af:62:c6:02:20:3b:
                    c5:1d:dc:d1:e9:c3:14:81:16:10:0b:69:12:e8:a3:
                    3c:f6:40:53:56:78:c6:60:e3:e3:73:12:5c:cb:58:
                    6c:e5:53:d8:e2:91:a4:6a:26:19:4d:4e:10:ed:52:
                    8d:be:be:b4:56:80:33:71:69:47:b7:22:3f:f5:90:
                    e2:67:1f:ad:06:85:7f:c1:88:f5:44:55:ec:30:d0:
                    3f:61:8a:5d:5c:2a:51:4e:6e:ad:93:5d:7e:18:d3:
                    b2:80:e3:5d:84:6b:6b:18:5b:1e:1d:03:7f:ca:84:
                    ec:6c:00:17:ff:b4:cc:df:87:e6:17:f7:d3:11:d4:
                    58:69:9c:68:03:74:74:fb:75:5d:91:7f:a7:31:64:
                    40:b0:8f:64:b7:b8:64:99:d7:41:b3:30:f7:6b:2b:
                    d1:11:ab:49:a1:63:fb:37:50:0b:e7:70:80:c9:ba:
                    31:32:12:71:85:62:91:bf:df:ac:71:c9:d7:40:f4:
                    17:3a:1b:50:7d:d2:1f:ed:22:22:67:c7:da:83:fb:
                    7a:ab:7b:0c:60:b6:8f:e5:a2:d0:55:0d:c0:01:71:
                    54:33:0d:a8:1d:9d:e4:17:75:a1:5a:e8:b0:6f:53:
                    c8:61:3a:27:5a:f0:a4:a9:71:d2:f4:7c:1d:92:13:
                    55:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6E:6A:59:08:FF:95:28:BC:D0:C4:ED:9B:B0:83:EE:CB:35:2D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9ed90f24-ce6c-3391-8178-f95fd054245f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:26:cd:8d:48:e3:e9:39:11:b6:7e:78:52:20:82:9c:e7:30:
         f0:07:25:b0:c7:e4:6a:ee:6e:9a:67:f4:3f:86:64:52:10:97:
         7a:5c:0e:f0:7a:6b:49:33:7f:bc:09:48:52:a7:ba:e3:05:e6:
         89:b1:dc:cc:2e:f4:33:bb:cb:d7:3b:cf:64:0e:07:4d:88:a5:
         21:e9:74:fa:05:c5:0f:35:2d:f7:bc:ec:96:c0:70:90:8e:42:
         8b:0f:8f:f1:4e:6f:93:be:6e:00:6c:70:d3:91:1c:c7:23:68:
         98:48:a7:8f:15:6c:5c:68:c3:77:85:3f:c9:16:d7:eb:66:0e:
         79:f7:82:b7:75:41:f6:a6:63:c2:9c:08:ab:90:d8:a8:bf:8b:
         88:5b:bd:a1:44:49:e3:e8:9b:da:66:90:52:0b:cb:eb:a2:1b:
         2b:00:1e:25:fc:61:9b:51:50:21:b8:7b:a1:4e:2f:5d:e8:31:
         36:0f:40:8c:60:c2:09:d4:ae:ec:49:16:0f:ee:3c:76:7d:ae:
         0c:f7:e7:c5:0a:cc:d0:c1:b6:57:91:22:35:a5:a3:4d:03:5d:
         fc:e7:11:4a:86:94:0a:77:b5:35:be:f0:25:01:ca:27:84:6b:
         85:75:62:98:dd:3b:c3:f2:5f:da:06:ff:8d:c8:80:f8:76:b8:
         17:f6:97:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----