Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7695c82e-bc84-32c4-8db5-1352fa70c46e.roa
File:                     7695c82e-bc84-32c4-8db5-1352fa70c46e.roa (raw, json)
Hash identifier:          /jk9rQi+o94V6GXgmhi1S3RRq/FmCJELW/bubyt4Mmc=
Subject key identifier:   9B:FD:A4:27:BC:A7:0F:E8:CD:7A:50:5C:BF:BB:35:35:69:6D:C0:F0
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858430A039744A10B6395F52200D0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7695c82e-bc84-32c4-8db5-1352fa70c46e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:03:97:44:a1:0b:63:95:f5:22:00:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2a8d6bad-3f30-4cca-8ed1-c00f3711e474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9a:7e:00:3c:dd:e1:f6:37:ca:e5:c9:6c:b2:
                    73:1c:87:92:f3:38:3a:36:cb:4d:d1:24:cb:d4:be:
                    2c:f8:30:71:21:62:df:d2:41:3b:e6:01:15:8f:b7:
                    20:be:81:17:ee:24:6a:b4:34:c9:97:80:03:f2:97:
                    4d:35:cc:f4:bb:23:b2:d8:45:05:c4:eb:be:8b:7a:
                    ea:91:a9:f6:f9:66:0c:e3:b3:da:60:91:fb:36:a7:
                    ca:83:77:4b:9e:fb:b2:8c:7c:15:16:71:95:22:66:
                    89:95:f1:2d:5f:2a:14:69:ae:92:8d:6e:6d:d2:77:
                    da:cf:a8:ce:da:27:84:eb:0e:a2:05:f5:e1:39:17:
                    2b:10:25:02:fb:2b:98:89:f2:bf:4f:e2:bf:fe:81:
                    d9:d0:09:9b:3d:91:3c:24:7c:51:11:27:62:93:b3:
                    1f:a9:02:cc:01:7a:bc:d4:8e:06:ad:9a:cb:5f:3b:
                    f6:81:29:86:56:8f:88:d9:37:f5:9f:60:dc:2b:d6:
                    cb:1c:fa:49:ac:37:6c:81:27:8c:53:72:42:90:af:
                    92:54:0e:e1:5d:bd:33:09:d3:af:d2:9a:f7:97:60:
                    68:00:5e:f9:a8:bd:f6:18:62:3e:55:15:11:f1:aa:
                    f4:74:dc:ff:8b:6e:a6:e8:cc:e6:9c:e3:33:bf:28:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FD:A4:27:BC:A7:0F:E8:CD:7A:50:5C:BF:BB:35:35:69:6D:C0:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7695c82e-bc84-32c4-8db5-1352fa70c46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ad:c6:a2:1a:07:c8:4f:10:bb:e6:af:a4:98:c0:00:76:9c:
         4a:5f:86:1a:01:d8:68:30:b2:40:af:db:d1:d9:c4:24:0a:f6:
         ac:d2:dc:31:4e:1e:72:7a:4e:99:24:7c:2a:4d:09:8b:f0:f2:
         61:39:21:58:1b:9e:84:dd:de:18:d7:a5:d5:1b:d2:e0:be:80:
         0a:9f:52:fe:f3:82:d3:d9:d6:ba:aa:b7:27:55:c9:e5:44:75:
         d4:77:34:46:0c:84:93:de:5e:53:6a:43:b4:11:c3:b8:ce:19:
         61:b9:75:dd:b2:94:52:6a:d9:da:cd:67:d0:47:bf:a1:f4:dc:
         05:82:90:d5:a6:ef:22:8f:56:8d:e1:b1:22:d7:90:b8:5f:aa:
         e0:f3:99:25:79:94:69:69:c7:c9:9d:a6:c5:f3:9b:e9:d3:49:
         c3:ff:2a:ed:77:b5:52:57:41:23:b2:6d:11:7a:e7:48:a4:7c:
         1f:85:61:97:46:ae:6a:e2:00:ab:49:98:b1:13:4d:15:01:1f:
         a4:49:35:cd:4f:07:9e:7c:3d:bf:fe:39:1c:fd:f5:96:0f:38:
         73:51:bc:06:00:4a:fb:d3:86:5d:29:c6:89:8a:bc:b1:95:cc:
         ee:07:5a:ca:a4:ea:57:b5:ab:66:a8:30:5b:ad:f8:02:ea:db:
         cb:6b:34:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----