Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/97255a40-d732-3fb4-818c-1bae36be9113.roa
File:                     97255a40-d732-3fb4-818c-1bae36be9113.roa (raw, json)
Hash identifier:          B58Lqh6sPnw48YDBxTPbFLvfGl+9WvJIbe4Ttevo0Pg=
Subject key identifier:   59:E1:B3:89:A5:5D:C8:F2:C0:DA:0B:97:B4:FF:F0:90:18:DF:61:B8
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584309F8D4E7D0DCBCAD32F4E380
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/97255a40-d732-3fb4-818c-1bae36be9113.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f8:d4:e7:d0:dc:bc:ad:32:f4:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f08a37b6-a47a-4781-9255-391ce25dec55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:35:df:a6:7c:da:4a:cb:9d:6f:de:83:a9:
                    ac:74:b7:22:c0:9f:18:c3:43:66:0d:8b:d9:69:f7:
                    1c:e3:77:38:2e:11:f3:99:e6:27:31:ee:2c:b3:74:
                    12:e2:29:6b:95:3b:4f:26:20:c4:0f:87:47:72:c4:
                    de:7f:13:0c:9b:6a:78:66:57:42:a4:84:25:25:38:
                    e6:54:0f:8d:6c:b5:90:1e:f1:44:8a:87:fe:a9:b9:
                    d2:18:dc:33:e3:78:ba:83:fa:7d:cd:50:45:45:a5:
                    f8:b6:85:f7:ef:39:96:a2:b4:03:75:ef:2d:62:b8:
                    8e:14:12:63:12:2d:18:9a:6b:90:3a:9c:27:ad:5b:
                    99:4c:b3:8f:27:b7:43:41:ed:70:fb:c3:b6:a9:2e:
                    88:46:6f:7f:35:24:86:4d:ba:67:74:65:48:51:65:
                    12:7f:12:55:73:81:78:a4:d1:9f:bb:6b:06:8f:14:
                    91:e1:55:c3:f1:0b:ad:84:be:f3:d6:ab:fa:6d:fb:
                    b0:c1:4f:95:71:78:12:55:5e:1a:2a:03:d8:42:d3:
                    cd:f7:0b:32:5f:16:1c:7d:39:4d:c3:45:f8:f7:66:
                    fb:2e:26:7d:92:28:08:e8:b9:37:88:ad:18:12:98:
                    b5:2e:79:11:c4:68:92:55:09:6b:58:9e:68:04:0f:
                    4f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E1:B3:89:A5:5D:C8:F2:C0:DA:0B:97:B4:FF:F0:90:18:DF:61:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/97255a40-d732-3fb4-818c-1bae36be9113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:85:e0:5b:c1:94:ef:c8:fe:13:52:79:dc:25:69:d8:26:a0:
         b5:a1:53:d0:f5:b3:b9:29:e1:e3:b0:57:9c:2f:89:13:a3:8f:
         94:87:bd:1f:4f:cd:2a:ab:ce:67:f2:c5:1a:fc:2c:ef:05:13:
         74:cc:62:dc:67:11:59:33:a9:b6:62:73:3f:09:0f:2f:86:2c:
         8f:11:8b:b8:37:aa:df:11:ad:a6:91:1a:d2:66:0e:f2:4f:60:
         af:72:57:80:16:e0:8a:50:f8:40:50:22:71:d4:60:5f:09:fc:
         69:5e:9f:04:c1:3f:2c:be:2d:50:da:8f:3b:09:fc:45:2d:ea:
         1b:af:cb:9a:02:bb:14:33:e2:72:69:ab:0f:a4:cf:2d:d4:7f:
         1d:23:8d:b5:ad:e2:54:df:dd:0d:e5:bb:9b:bf:f3:1d:31:73:
         ab:d3:de:1f:b4:db:05:3b:50:87:6a:e5:cd:19:9e:6e:d5:4a:
         0c:d5:54:f2:2f:0a:95:80:04:ad:28:a2:de:4e:7d:e1:0a:ef:
         b4:4a:41:42:59:bd:80:aa:9a:7f:d6:b9:ce:ee:57:88:e0:ed:
         00:31:03:5d:b5:49:d5:b9:2b:3a:f8:38:ae:c3:8d:da:40:90:
         d5:7f:0b:0e:ba:8a:67:85:58:c2:94:c5:85:e3:60:ec:26:7e:
         1e:09:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----