Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d3aafc66-1eda-3cd7-b00b-5b3774168f8f.roa
File:                     d3aafc66-1eda-3cd7-b00b-5b3774168f8f.roa (raw, json)
Hash identifier:          ME0K4uP+7Cbvn/YBvKdbMBfl8RXDb9JVtjiltgj6mPU=
Subject key identifier:   52:F3:FF:40:60:10:57:39:FD:3E:13:2F:BB:93:AB:67:30:CA:65:78
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A1C555718D03BB1F47A7D70
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d3aafc66-1eda-3cd7-b00b-5b3774168f8f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1c:55:57:18:d0:3b:b1:f4:7a:7d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=46817bb6-b1de-4caf-843b-f17da7c6901e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:dd:99:ce:41:68:f4:b2:f3:c0:b2:3e:53:
                    07:5c:46:50:ac:79:0b:36:25:78:3b:e5:62:15:e7:
                    89:3d:cc:59:65:85:08:66:5d:df:32:09:c7:b2:7b:
                    a5:c8:db:c2:3d:35:30:f8:14:c0:e0:60:bb:4f:e5:
                    cc:b9:0f:7a:26:42:72:00:66:cd:d1:77:14:ff:38:
                    39:35:bd:fb:d4:be:a0:03:67:f2:bb:82:2d:a7:0c:
                    02:3f:cc:1a:0a:62:66:22:f2:02:3a:70:31:6a:3f:
                    91:6a:09:8b:be:72:d0:02:d8:e7:4c:53:53:c0:cc:
                    9a:d1:79:76:95:9d:79:8f:ec:d8:bd:38:3b:98:71:
                    eb:bd:ea:05:1f:bd:26:7e:78:88:f2:6c:c5:e6:4c:
                    9a:3b:6c:5e:17:c0:9b:6e:61:14:0e:7e:7c:66:fe:
                    9a:ea:2f:f2:57:b0:cc:f3:19:74:87:a0:88:2a:23:
                    ea:8f:02:8a:72:c6:f8:3c:bf:0b:0e:79:43:5b:d1:
                    19:5e:ff:f6:d6:66:f9:ad:b4:d7:a7:f2:fd:2d:51:
                    f8:3c:e8:e5:f8:a0:96:df:75:03:9d:ff:54:5e:87:
                    8e:ac:2e:7e:0e:e6:15:60:25:4c:7a:db:e4:38:a2:
                    ee:a0:d6:e5:fb:fd:0b:fa:d9:48:f7:3c:0a:b8:7c:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F3:FF:40:60:10:57:39:FD:3E:13:2F:BB:93:AB:67:30:CA:65:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d3aafc66-1eda-3cd7-b00b-5b3774168f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b7:e6:03:3f:bb:39:12:e8:31:88:f3:16:93:9f:b9:c6:30:
         db:92:98:99:e3:87:8a:1e:ac:cb:d8:ab:ce:16:a5:75:22:f2:
         a3:e5:dc:ff:9f:10:50:db:a8:1d:49:6b:3b:cd:3d:b5:43:1f:
         0d:9b:a9:a1:c5:5e:8a:bc:c2:36:f2:30:15:f5:df:2e:36:26:
         49:eb:34:95:1f:85:1e:f1:c0:5f:59:c3:90:86:42:7e:e3:a7:
         8e:09:3c:bb:84:1a:5b:2a:47:5b:0f:1e:37:d1:57:b8:0f:21:
         13:37:ff:3b:12:f5:2c:a5:ef:3d:0e:7e:ce:25:74:02:40:aa:
         27:0d:94:65:00:74:6f:35:91:1d:0d:99:0d:29:e5:dc:d6:d4:
         af:e3:4a:c8:dd:ea:7c:f7:09:65:a2:19:d0:74:10:52:dc:e9:
         93:3b:a5:1e:5c:82:d5:75:40:3a:91:33:54:43:47:ff:4b:a0:
         9e:f1:a2:35:a3:36:26:2c:14:b2:b7:b4:18:3e:4d:7a:b2:60:
         6f:2d:38:df:ea:d0:17:31:73:b5:8c:c3:aa:17:c5:17:bf:5d:
         3a:10:a8:dd:94:9d:86:ae:fe:6c:f3:65:2e:90:06:99:57:a3:
         08:c2:25:99:ac:9d:ba:9e:2a:6e:d6:a3:6e:06:6d:b1:52:82:
         52:59:38:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----