Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e76c53dd-1e66-3aff-98bc-6e5b20ce1b45.roa
File:                     e76c53dd-1e66-3aff-98bc-6e5b20ce1b45.roa (raw, json)
Hash identifier:          /dsTr1hh8npM2evvK8DxItVVWvLQFVVQ6filXucTjKA=
Subject key identifier:   E1:17:8C:61:54:36:0B:E0:16:80:55:2F:39:0A:79:42:26:05:23:E1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A10A990AA313FBDBA7AFE80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e76c53dd-1e66-3aff-98bc-6e5b20ce1b45.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.88.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:10:a9:90:aa:31:3f:bd:ba:7a:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=781b84f1-879d-4b61-9f49-32ecb18c4384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:e2:1a:41:81:bf:7b:ba:ae:7e:72:cc:3b:
                    76:e3:82:13:e2:a9:50:5b:f0:e9:e4:a3:eb:d2:17:
                    0e:e6:9d:1a:6b:78:b2:ce:ba:22:6e:d1:d1:35:e3:
                    10:69:38:9e:9e:86:c8:89:9d:e4:cc:4c:8a:b6:cf:
                    15:a8:30:9e:12:8a:87:97:33:eb:cb:4b:33:0f:aa:
                    91:06:03:61:ae:0d:de:65:c0:24:58:a6:26:f1:19:
                    40:32:1b:a8:12:d0:36:a6:c4:be:97:e3:29:ce:51:
                    42:42:8b:ce:72:57:aa:ee:93:bd:f8:a4:7c:84:13:
                    8d:e0:ff:23:ea:72:1b:7e:16:c6:5a:94:1a:18:e1:
                    59:14:a3:4c:ac:2d:8f:3e:ea:b6:c6:ff:cf:d8:16:
                    3f:f7:07:38:f8:04:e6:b1:78:f7:37:7b:33:7a:e8:
                    d8:b9:65:b0:f6:3c:e2:dc:82:f4:95:46:36:a8:4a:
                    96:21:a9:8e:8f:88:1a:b8:d2:e3:0d:6b:bb:08:c0:
                    d2:6a:ff:28:93:3f:da:42:c7:1b:b8:aa:e5:ae:96:
                    eb:2c:83:22:90:bb:c7:a1:88:b5:ed:28:06:0c:18:
                    e4:35:91:7e:a7:0b:57:00:d7:63:c7:61:54:65:d7:
                    c8:51:cd:4c:ab:3a:43:a6:08:25:df:9e:ad:7d:dc:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:17:8C:61:54:36:0B:E0:16:80:55:2F:39:0A:79:42:26:05:23:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e76c53dd-1e66-3aff-98bc-6e5b20ce1b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:21:46:2c:14:c6:07:b4:d3:76:e9:06:e3:87:7b:c2:9b:3a:
         5f:ec:44:10:a0:ef:77:03:0f:1f:41:0b:88:63:95:58:ef:5a:
         61:6e:3c:b3:95:2d:3b:ca:91:32:bf:2f:e4:43:58:cc:8a:d0:
         3a:d9:de:55:6e:8e:9a:39:39:d0:15:bc:92:01:5c:b0:98:8d:
         0d:2d:8e:83:16:d4:d4:52:4e:77:8c:b0:1e:1d:4c:ce:22:ad:
         27:37:dc:15:03:31:6c:23:58:97:16:43:88:6a:5f:d3:ff:20:
         f9:3b:ae:22:db:c4:d6:93:0b:aa:4e:ba:2f:b3:7e:b3:5f:d7:
         bd:34:3c:85:10:f5:19:84:36:58:e6:7e:76:2b:9c:7b:a9:a0:
         1c:ef:b0:94:5a:cd:98:ae:7b:7f:75:33:97:b4:f3:8a:84:70:
         cc:ee:96:cb:40:19:a9:ca:9e:17:dc:dc:55:ee:cd:d1:78:cd:
         e7:0f:3a:97:47:91:06:89:1d:36:8e:9b:95:96:6a:e2:dc:e5:
         94:6d:f7:f0:23:90:6c:eb:3c:1e:16:17:53:bf:35:1c:3a:3c:
         49:2b:7d:0a:2c:59:56:90:76:1b:18:28:4b:b2:c8:a7:74:47:
         c0:01:14:43:c0:ef:c1:55:0b:fd:e7:a3:36:66:63:37:55:39:
         f3:49:97:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----