Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d07eddf5-d823-3566-8824-70d138f1fcd5.roa
File:                     d07eddf5-d823-3566-8824-70d138f1fcd5.roa (raw, json)
Hash identifier:          nuMz5ydRAxhSb07KxXGBaVjF3ALX1ix9RHBguciliHc=
Subject key identifier:   DB:6C:76:00:BD:3A:9B:36:F4:FA:55:A7:3D:1B:D5:8E:9C:10:C9:81
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A0254C2A12000ADAFA3C4E8
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d07eddf5-d823-3566-8824-70d138f1fcd5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.92.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:02:54:c2:a1:20:00:ad:af:a3:c4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8d75964c-2ea8-40a8-aacf-aeb0cb833134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:73:0e:a6:35:83:c5:bd:bf:a1:5a:85:f3:02:
                    6c:ec:ad:3b:89:5c:a6:c6:43:b9:e8:a5:ca:50:c5:
                    86:70:98:06:02:77:39:de:f8:39:7f:f1:2f:d6:48:
                    5b:8c:1e:81:c1:11:b8:e1:65:22:02:70:49:5c:67:
                    0f:61:96:27:72:69:47:44:4a:c7:1f:41:86:ba:b6:
                    70:11:2c:63:17:e2:01:f4:48:fb:5f:26:f4:26:69:
                    ed:21:80:fa:5f:53:46:d0:24:86:84:a5:2c:f2:ca:
                    1e:7b:d8:eb:c0:bc:a4:0c:13:d1:d0:58:79:33:78:
                    bf:db:c4:dc:3e:4b:4a:54:0c:2d:a2:1f:2f:55:a4:
                    b6:2e:dd:1d:81:d6:66:d1:dc:6a:49:5f:41:27:ca:
                    6d:64:e0:3d:39:9b:94:aa:ce:33:31:48:a3:6d:57:
                    7c:75:c9:92:85:31:0d:8b:4b:f5:d9:fb:9f:a7:ab:
                    0f:87:4e:12:ef:93:83:a1:c5:2d:3b:f0:0f:1c:a8:
                    9c:0a:a9:a5:c7:c7:a0:7a:07:d7:41:61:99:8e:cc:
                    36:4f:c4:06:b4:9d:da:4c:27:3a:54:9f:de:7d:9d:
                    11:c4:42:5d:da:47:b1:a2:26:7b:1c:b4:0a:be:a2:
                    ec:42:32:ef:5d:8c:67:10:e5:d5:2d:6b:b7:d2:38:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6C:76:00:BD:3A:9B:36:F4:FA:55:A7:3D:1B:D5:8E:9C:10:C9:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d07eddf5-d823-3566-8824-70d138f1fcd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:7a:43:e1:a5:7b:18:b3:e9:77:d1:14:f8:45:ca:d2:ad:61:
         d1:02:c3:e4:68:00:b6:0b:2d:07:f8:52:ae:4b:e7:7e:be:f8:
         e3:c3:85:f8:14:2d:e1:31:1d:eb:a8:8e:c1:36:1f:79:6d:61:
         cb:2a:e9:7f:07:c5:46:12:a7:f2:9e:c0:76:2c:ea:16:b5:b9:
         2e:49:4e:2c:15:75:66:0e:84:73:24:85:2f:c2:3c:5b:35:b5:
         15:c8:6c:74:5a:5e:64:bd:8f:80:21:e3:30:27:bb:fa:2a:1c:
         dc:cc:01:b2:90:8a:4f:41:82:a5:31:14:dd:d3:66:12:a3:af:
         0f:49:a2:3a:32:d4:33:0f:9b:b6:e3:e1:d8:a7:cb:f5:ae:13:
         73:4c:f9:51:3a:f8:5a:71:76:f2:57:eb:a1:57:09:e9:97:b5:
         c3:c0:4c:1c:76:4d:17:5f:68:71:80:92:1d:a5:f1:32:5c:b4:
         14:3c:50:00:2c:5c:ea:1c:b1:14:3e:18:66:32:b6:f9:15:e6:
         82:82:0d:0c:ee:74:0a:27:74:1b:58:6d:90:bc:ce:52:65:ff:
         ff:ff:c0:35:4d:bc:42:a4:43:1b:9f:2a:29:cd:f6:61:5d:f4:
         d9:49:6f:1c:82:42:01:d3:ca:fb:b0:d0:9c:e8:c6:b5:14:e8:
         61:c1:de:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----