Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d6ba0f58-609c-3445-a046-e268dcada67c.roa
File:                     d6ba0f58-609c-3445-a046-e268dcada67c.roa (raw, json)
Hash identifier:          xp1QlXdDTwclADPAuYl11bsQUjcWRt3l2WW7Msh3R4k=
Subject key identifier:   59:C2:DE:16:83:EF:C3:AD:86:19:69:84:FE:44:40:91:73:24:29:62
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A27E345371129DCBB400A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d6ba0f58-609c-3445-a046-e268dcada67c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.102.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:27:e3:45:37:11:29:dc:bb:40:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=703e7c1e-1a37-4933-bce6-f5625dda8cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:82:68:5e:1a:b0:e6:ce:30:a5:81:9b:56:
                    fc:24:ea:52:9d:f0:d2:4e:20:df:a7:2e:e9:a0:7e:
                    21:bf:6a:6b:7f:df:84:23:d6:bb:45:e2:c5:52:89:
                    86:39:82:b3:cd:ea:ce:e3:89:15:54:b3:65:a1:88:
                    86:52:d0:c7:34:2a:88:7d:3b:b9:46:f4:ac:f1:ce:
                    37:7e:99:a8:ae:bd:e9:1a:ab:22:4d:c5:fc:e2:39:
                    6a:49:29:09:45:18:64:15:d8:55:1b:53:17:ef:fb:
                    12:b3:36:bd:ab:2f:d9:6f:02:94:08:15:e2:21:c9:
                    30:43:95:84:4c:b7:2e:06:8f:2c:0e:fe:a8:be:69:
                    8d:20:a4:83:df:43:00:62:d8:3d:b5:83:64:03:ca:
                    88:cc:67:fc:02:5a:c9:8d:74:3d:27:76:ae:ca:ad:
                    a0:d4:fa:85:86:82:84:9a:c4:5f:a1:a8:56:5a:f1:
                    e0:bf:79:a2:a3:e9:6e:11:0f:93:b3:20:b9:5d:b3:
                    12:24:3d:88:09:05:bd:96:2b:fb:b4:02:52:59:b1:
                    d7:4a:73:27:2f:3d:47:96:cf:b4:9b:bd:ab:d9:7a:
                    5f:fb:cf:fb:d6:ca:a6:bc:3d:e2:6c:0e:57:04:4e:
                    05:5a:2a:3a:26:a7:54:30:4b:1b:3a:d4:4c:cf:81:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C2:DE:16:83:EF:C3:AD:86:19:69:84:FE:44:40:91:73:24:29:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d6ba0f58-609c-3445-a046-e268dcada67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6a:d5:59:05:08:91:36:3e:11:b6:2d:a0:7f:75:ce:bc:df:
         2d:ce:c7:55:d5:8d:b2:63:6d:29:dc:b9:70:0b:f4:5d:84:39:
         ca:6e:7f:47:ac:9c:9c:2e:c3:0c:29:d6:f4:e1:b5:59:64:ec:
         26:76:97:7f:41:07:bb:af:dc:ff:d3:52:e0:94:62:53:70:96:
         58:d3:63:81:57:56:d8:65:18:55:a5:d7:9e:64:dc:aa:1a:1a:
         9a:99:60:cc:81:aa:dd:4c:16:e9:ce:1a:bd:bc:b0:c7:0a:a9:
         07:0f:e4:ed:2c:20:15:16:2d:6a:af:8f:67:80:1b:9d:49:b8:
         2e:9d:c3:45:6c:2b:05:54:e3:4e:42:6e:16:86:f6:5e:01:c5:
         9d:cf:42:65:ac:d8:53:50:74:2a:6c:fb:22:0c:9c:b8:d7:c9:
         ad:f4:2f:c8:93:74:11:a6:0e:02:0b:f0:0f:be:e6:58:82:6a:
         83:e5:ee:d6:8d:aa:c1:6e:27:6f:80:84:8d:14:13:67:00:a3:
         24:c0:0f:0a:88:65:ea:0e:5b:88:ba:09:6c:1c:07:0b:21:78:
         45:da:2d:b3:f5:9c:70:ae:b9:e1:48:27:97:34:d2:af:a8:a9:
         1c:f6:78:bb:12:fc:90:c9:08:de:6e:05:b4:f9:90:de:4c:76:
         23:83:63:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----