Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b79bad8d-1e0d-3b21-aebd-6939951f9d4d.roa
File:                     b79bad8d-1e0d-3b21-aebd-6939951f9d4d.roa (raw, json)
Hash identifier:          14vDuRB6OtdBMIq4hH9RQTwBAt5h4LjZPE6J2vMmD3Y=
Subject key identifier:   AD:65:4F:AA:6B:91:63:D2:B2:EB:F1:06:F9:19:50:CD:F8:91:B8:C3
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A220E3FF73BAADC7BE28E20
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b79bad8d-1e0d-3b21-aebd-6939951f9d4d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.252.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:22:0e:3f:f7:3b:aa:dc:7b:e2:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=fcb65870-5cfa-4664-86bf-73a45b28e833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:bc:56:92:9f:04:b6:5c:6b:80:db:29:75:
                    5c:44:e4:7d:cb:db:2e:f4:73:9a:97:f9:b1:b4:88:
                    e8:fc:4f:2e:19:13:db:ec:d2:c3:07:4b:9e:56:73:
                    ef:d5:c1:a8:58:3e:53:20:15:1d:2f:b9:09:cf:6e:
                    d3:0b:47:85:1b:a0:c6:20:5f:93:f1:14:8c:8b:9b:
                    1b:4e:b2:e9:2e:a8:db:de:69:a2:76:79:a7:d2:e8:
                    38:ea:33:d5:0c:10:78:a1:d4:be:f0:e9:fd:0b:6d:
                    d8:f4:11:b1:67:82:40:39:79:6a:5e:e6:1f:9a:55:
                    e6:92:2a:1d:e5:5c:fc:7b:86:8d:73:42:1f:b6:9d:
                    ac:59:e4:4a:0f:31:f2:9f:da:62:41:fa:7e:e4:9e:
                    ea:2e:76:a8:da:c7:4a:e2:99:46:86:92:6f:89:6f:
                    97:c8:e4:c8:cf:cb:0c:b0:31:8a:fc:2b:94:77:bf:
                    2f:20:66:ce:02:c5:70:d0:0b:45:2b:1c:4c:0b:2e:
                    9e:ee:fa:59:13:d5:f6:b4:1d:0e:29:af:92:b6:97:
                    e6:b7:36:d9:db:02:26:00:fd:0d:68:37:73:05:e5:
                    c9:e8:76:b7:2a:09:f8:e8:3c:a2:b8:70:ee:7c:f2:
                    a6:7b:34:26:02:c4:ec:fa:4e:20:1e:d0:da:ef:44:
                    95:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:65:4F:AA:6B:91:63:D2:B2:EB:F1:06:F9:19:50:CD:F8:91:B8:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b79bad8d-1e0d-3b21-aebd-6939951f9d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:fe:de:da:36:9d:10:6e:9f:15:be:f5:59:58:11:47:59:75:
         c3:1c:ae:7c:12:bb:1a:b8:ad:cc:21:bf:80:16:e1:29:32:cc:
         cf:fe:b8:10:45:56:d0:2b:1e:65:e6:da:d6:82:72:94:47:11:
         1f:00:b9:e5:f8:68:78:0f:80:a3:07:08:47:9b:a4:66:50:38:
         53:01:ed:62:0d:7e:75:a7:da:c5:6e:5a:08:aa:d3:68:02:27:
         ea:68:77:31:e8:a5:e1:73:ff:16:6f:08:c3:93:50:44:a4:4a:
         5f:12:a3:9b:7c:ce:53:7b:23:09:5c:39:c6:80:1b:9d:5d:57:
         5d:f8:8d:ab:c0:5d:b2:48:26:a0:72:eb:ec:83:b8:7d:27:2e:
         1a:d6:fa:55:25:45:e9:b7:2c:a2:1d:d9:70:aa:a2:65:26:f6:
         55:71:a2:c7:6b:b3:fa:3b:18:9c:a0:99:6b:96:8c:a3:28:70:
         51:b1:11:0a:3a:e4:b7:f1:5d:7d:19:ab:e7:f5:c1:ea:1e:0b:
         d3:71:5d:95:83:ee:40:5a:12:13:fc:f3:8c:19:9d:9c:d9:86:
         04:1d:6e:2b:65:fa:6c:13:d8:da:0d:d0:fb:ad:a3:ab:8b:5e:
         19:6f:d6:12:b2:c5:d6:e8:67:b7:2f:fc:c3:bc:74:cc:33:1a:
         bb:39:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----