Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f8354709-d0ba-3a81-b423-59469b62eaaa.roa
File:                     f8354709-d0ba-3a81-b423-59469b62eaaa.roa (raw, json)
Hash identifier:          9CIHodXimkIPJyu+ZC8EVbcaCfyUh10BDxy8MVIVlhY=
Subject key identifier:   B6:A5:B3:A5:99:D9:9A:03:0F:B2:EC:A9:CD:A6:C3:17:12:39:63:78
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A25A83EC7AC40DD66AF7C80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f8354709-d0ba-3a81-b423-59469b62eaaa.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.232.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:25:a8:3e:c7:ac:40:dd:66:af:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=acb6a31c-6712-4d2e-a20c-16a7c719e889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:7d:79:b2:e3:63:fb:89:19:fc:1d:70:0b:
                    a5:c7:38:ba:0e:aa:a7:b2:d0:46:65:30:ae:5b:16:
                    e2:1c:aa:dc:18:80:24:76:1f:f9:b4:e2:96:87:fb:
                    a1:59:94:2a:06:51:8a:f5:7c:c3:4b:ef:f4:56:b9:
                    51:8f:2f:41:7d:07:1a:d4:b8:dd:aa:c4:7e:3d:25:
                    e9:ce:91:71:7a:e6:40:dc:7e:5d:c8:f7:f4:00:70:
                    08:0e:5e:28:c1:1a:72:05:05:e8:64:f1:63:78:64:
                    d3:d1:05:d8:48:11:79:6c:fb:fe:cf:2d:69:04:d1:
                    f2:4d:1e:6d:eb:f0:30:7c:5a:d2:6b:45:da:30:b0:
                    1c:94:d2:4b:a6:3c:03:3d:57:63:8a:f9:3e:23:d0:
                    e5:0a:16:0c:e6:96:72:ab:16:25:1d:61:2a:6a:16:
                    65:2b:b5:b8:21:e2:ce:e3:90:0f:2a:91:4c:29:90:
                    fb:27:92:de:de:1b:4c:79:5a:69:68:67:39:a4:37:
                    f7:67:58:7d:3f:79:7b:b4:12:64:2b:a7:bc:ad:41:
                    43:86:59:c5:8c:4c:c1:48:83:83:ac:6b:b3:13:d8:
                    65:17:ad:52:fa:0f:76:b4:f2:87:96:26:0c:f7:bf:
                    af:3b:c6:c7:ca:9c:cf:7e:b8:15:64:bc:5e:23:9f:
                    2a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A5:B3:A5:99:D9:9A:03:0F:B2:EC:A9:CD:A6:C3:17:12:39:63:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f8354709-d0ba-3a81-b423-59469b62eaaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:9c:e1:da:f9:7a:ad:64:88:c3:34:b7:82:59:fc:6d:77:dc:
         7f:f6:04:60:a5:42:ab:c4:f3:1b:15:30:72:23:72:97:0d:65:
         22:8f:9c:a4:ee:16:3a:25:7a:44:a4:dc:5d:ac:41:2d:31:19:
         38:08:b7:73:ff:63:f3:0c:b4:d0:02:aa:55:bb:be:37:aa:f0:
         b6:e4:2b:9b:92:90:f0:25:3c:de:15:97:7f:84:b0:74:27:e0:
         b0:54:d0:1c:58:98:96:de:99:ff:63:79:58:41:22:69:6e:a8:
         e7:a7:89:e6:8b:6d:40:ad:b8:c8:a0:00:fa:19:52:14:a1:9a:
         9b:84:52:58:26:cf:3a:7d:9f:0a:a7:69:b4:11:6e:32:af:67:
         97:d4:8e:5c:50:fc:4f:ce:9d:63:e2:d4:0f:75:af:d0:68:59:
         e5:77:5e:e9:6b:3c:a4:c1:5c:db:1f:61:c9:11:e5:fe:8c:f4:
         8c:3f:55:39:53:41:4a:97:dc:69:f3:eb:7c:d6:ff:a7:59:bb:
         4a:39:35:b2:27:e9:19:a7:db:72:7e:98:57:3a:7d:7d:d4:06:
         9c:8d:44:7c:42:19:89:4c:2d:73:fd:f7:ae:96:fd:a5:eb:ce:
         b6:2d:90:b6:9f:b5:24:1a:72:02:b3:12:82:38:dc:83:45:d7:
         20:a0:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----