Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb9486ed-9b2a-36cd-87c7-0f1427cc45e6.roa
File:                     fb9486ed-9b2a-36cd-87c7-0f1427cc45e6.roa (raw, json)
Hash identifier:          2jqaPNMUc90oZELmzJQS5vXbOsKBhpvGpmpp5BVM0WA=
Subject key identifier:   B2:54:79:F0:69:6F:E0:71:11:36:98:41:3B:76:1A:E9:7C:85:A9:E2
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309F1C7FB613E5AF473606A70
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb9486ed-9b2a-36cd-87c7-0f1427cc45e6.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.98.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f1:c7:fb:61:3e:5a:f4:73:60:6a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=84bacfec-f861-4fc6-8965-9360192d386e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:5d:0a:da:8b:20:02:3f:19:b3:8c:07:ff:
                    fc:b7:48:5e:2b:4d:bc:28:07:50:7c:f6:32:a4:f0:
                    8b:86:25:0d:23:db:2c:9b:72:ac:76:7a:ea:2b:2d:
                    d2:76:22:bf:c2:ea:97:3c:3c:bd:02:31:b3:fd:48:
                    0c:9e:4f:11:cc:9a:c1:97:43:5a:b0:48:9b:33:8a:
                    5b:20:61:f4:87:ff:5e:43:fb:a4:c9:36:68:55:2f:
                    8f:a1:6f:5e:9d:36:02:b5:21:7c:a6:1c:9c:86:84:
                    9e:4b:2e:63:46:bd:ac:d0:61:80:4f:42:2a:29:d5:
                    e1:2f:20:24:ae:cd:20:ab:fb:79:5d:c3:a4:6f:fb:
                    b7:aa:35:60:85:99:40:4f:59:0e:d3:d2:ba:3d:87:
                    3c:0f:41:62:49:6a:10:f4:9e:c9:90:b8:d7:61:32:
                    0b:cc:30:49:0e:bb:36:73:83:ef:d7:79:95:b1:2f:
                    74:45:39:5b:fe:b0:5c:95:1f:66:6a:1a:4d:e6:e6:
                    e7:2f:44:3e:4e:29:56:bc:4a:f6:5b:a0:e3:ca:a8:
                    96:48:76:6d:a2:f5:c3:ff:eb:32:60:27:d5:a7:62:
                    6a:c1:1b:0f:80:3d:7a:85:6d:63:dd:31:75:d6:19:
                    6e:bd:a7:7c:a8:1c:5b:14:40:b0:3a:6e:9f:55:e1:
                    57:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:54:79:F0:69:6F:E0:71:11:36:98:41:3B:76:1A:E9:7C:85:A9:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb9486ed-9b2a-36cd-87c7-0f1427cc45e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c2:08:6c:bd:c7:6f:33:0d:fe:82:58:7f:83:95:91:d7:2b:
         10:0a:b4:4c:1c:f9:37:66:5d:48:17:71:4c:9a:69:da:28:37:
         7c:11:10:72:4e:b4:0b:2f:d0:7f:70:cf:58:a9:84:0b:a2:f7:
         4c:3b:f6:f8:a9:49:f2:09:cb:46:22:d0:8c:c8:bb:13:b5:cf:
         5a:82:5a:63:31:dc:ad:d5:cc:72:da:3b:15:b5:7f:bf:80:6d:
         4c:e5:33:3b:c5:bf:82:a5:b0:cd:01:58:06:ef:d4:8a:da:b3:
         1c:7e:6a:0b:97:94:31:b7:e6:a9:cf:46:94:2d:20:7a:84:1d:
         95:91:a3:76:9d:22:73:ec:a9:cf:23:8b:b4:54:04:79:76:9d:
         6b:bc:00:8e:4c:02:5d:b6:df:82:15:86:1e:63:8b:8e:a9:1f:
         c1:9d:1e:ab:55:8f:e9:a6:f0:94:62:64:4d:5b:34:c8:97:a9:
         ea:b8:e7:6b:e4:dc:50:8e:45:8e:f3:d1:30:34:bd:e3:ad:d2:
         fb:1c:f7:a5:93:c6:8f:8b:70:cb:40:11:98:c5:b0:c4:1a:3f:
         0b:73:99:ba:50:aa:e6:3a:97:00:cc:78:6b:0c:47:22:55:c3:
         62:68:a8:a6:b6:e0:41:b2:eb:cc:7c:27:a8:38:59:4f:e9:03:
         e1:42:d7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----