Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d16da1f4-e196-35b6-95a7-5f03e889cbf3.roa
File:                     d16da1f4-e196-35b6-95a7-5f03e889cbf3.roa (raw, json)
Hash identifier:          uf5bN+T/7Fr5LbtDfneRAqfQEg+nTmXJIEdcwzyoKIA=
Subject key identifier:   F4:32:90:DC:30:AD:3B:FD:4A:4F:8B:A3:AA:D5:84:7F:B4:93:49:A7
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A2479038DB51E5585EE4C00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d16da1f4-e196-35b6-95a7-5f03e889cbf3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:24:79:03:8d:b5:1e:55:85:ee:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=100474d3-4e9e-4335-a0bd-1a63a1b08c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:4a:b6:80:a5:9b:f3:7c:c1:fa:1f:4d:84:
                    70:ae:5e:cf:1c:ad:1d:58:c4:31:91:f8:7d:cb:a5:
                    6f:79:be:d1:68:39:23:5d:4f:f2:a2:f1:01:a0:9b:
                    69:e4:3c:ee:83:bb:c7:b4:1f:69:b2:a4:3f:e1:d7:
                    b5:b1:ed:e7:ee:a9:3b:b6:99:8f:80:36:39:1c:4f:
                    19:f4:67:4d:48:ef:a4:75:f8:a9:16:2d:19:a7:d4:
                    17:cd:d3:f5:bd:20:a9:d1:86:74:7f:59:c0:3c:2c:
                    01:76:34:54:da:02:86:20:49:6e:53:3d:de:3b:49:
                    69:a9:7a:42:6b:02:0a:a3:22:33:11:a0:97:5b:51:
                    78:23:e9:4d:29:c0:79:7c:a5:e6:64:67:da:ea:bb:
                    13:76:75:4b:37:43:ba:a4:40:82:5c:69:d4:77:8e:
                    4f:7b:f4:aa:0f:99:34:51:27:1c:02:56:6d:a8:42:
                    c0:5f:c3:84:c5:08:f6:84:d0:cb:6f:65:cd:10:8b:
                    5b:6d:84:0e:4f:e6:fa:6c:23:21:1b:30:35:bc:85:
                    00:92:78:8f:81:b5:c7:e5:6c:6e:7c:f8:27:62:3d:
                    87:8b:ee:7e:82:34:ce:e1:1c:c0:d9:ac:51:65:a7:
                    19:9a:c6:3d:7d:cb:58:de:ec:43:1a:a1:5f:23:8f:
                    fb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:32:90:DC:30:AD:3B:FD:4A:4F:8B:A3:AA:D5:84:7F:B4:93:49:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d16da1f4-e196-35b6-95a7-5f03e889cbf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d1:8c:e1:d1:fe:b0:12:81:b2:5d:fb:ae:c7:a7:1b:22:6b:
         7d:c0:01:fb:9e:d0:9c:76:13:e1:b4:13:cf:48:6c:6e:e0:1b:
         06:5e:a7:eb:e8:82:75:42:cf:66:3b:7a:60:e6:90:48:67:22:
         36:ac:f0:c3:6f:3a:dc:d9:dd:53:6d:ea:6e:01:2b:73:7c:dd:
         b7:d8:95:1b:4b:2a:e9:bc:46:33:33:f8:2c:6d:da:15:49:ae:
         24:10:19:e1:32:84:a9:cd:9a:1f:90:c7:93:70:bc:37:8c:76:
         ab:af:9b:45:ae:9e:b3:3e:a6:3e:9e:e2:ec:8a:6f:ba:38:04:
         90:b9:24:aa:cd:d9:92:47:1b:80:7a:06:a2:f3:c9:49:c0:eb:
         28:de:49:6d:fc:5a:f6:e2:03:7c:8d:1a:0b:41:ba:4c:4c:71:
         fd:67:0b:07:a5:01:a8:b5:01:8f:40:25:fb:c6:b8:44:62:e0:
         3b:32:a4:a3:4f:60:c9:38:e5:75:ff:bc:0e:4a:6f:44:e2:b0:
         08:d4:73:ab:75:76:54:13:66:4a:c5:6e:27:a7:fc:4d:96:a8:
         e5:70:4f:4d:52:92:7d:57:b7:aa:97:fd:c4:b8:64:bd:a3:1d:
         f4:d8:d9:6c:17:ff:00:61:20:f3:fe:2f:52:03:21:a7:da:e4:
         c6:2c:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----