Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/982acfb7-cc01-3723-9048-629cb0605e81.roa
File:                     982acfb7-cc01-3723-9048-629cb0605e81.roa (raw, json)
Hash identifier:          Eb6I9xWz9N7763l+HMqfUfK6C6kavbTVn9maqPNFgGY=
Subject key identifier:   25:2F:84:10:E2:4A:8A:F4:EA:D7:31:54:22:CA:10:17:AE:61:6A:34
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858430A218746F85E02A0D112CAFD
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/982acfb7-cc01-3723-9048-629cb0605e81.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:21:87:46:f8:5e:02:a0:d1:12:ca:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=596cad6a-7348-4d40-bc24-1895bcaac798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:74:ae:86:8b:2d:1e:67:7e:7f:78:c7:6e:
                    ed:d8:ad:4d:56:37:66:da:24:f5:07:4a:7b:9d:b9:
                    f3:ca:f3:f1:a6:d5:9d:1a:2b:a0:65:b0:5a:5b:f6:
                    e9:83:fa:0f:64:7c:2b:5d:dd:51:7d:b4:51:d0:4b:
                    41:03:da:31:e4:b8:8f:2b:70:4e:23:9d:28:d9:83:
                    af:3f:3c:5d:9b:0c:48:b2:d8:f7:68:ae:65:20:5d:
                    5e:72:24:13:0d:b5:37:cb:b1:b1:7e:07:ac:54:c6:
                    76:66:73:17:4c:16:3e:e9:47:00:73:dd:a7:a1:2a:
                    44:c0:ab:f5:cd:f5:fc:15:9b:49:98:d1:13:85:b3:
                    2d:4c:73:33:78:fd:84:0c:b8:2f:0e:14:ff:b4:b9:
                    5e:96:59:7d:02:ec:97:f5:2a:7c:7c:44:41:e4:87:
                    55:0f:8c:bc:42:49:cc:7c:5f:44:b0:69:9b:45:ed:
                    f0:d2:a0:ad:e1:8f:b1:dc:56:50:6a:af:86:db:bd:
                    ba:24:a5:40:ce:b0:5b:bf:c4:47:e2:ec:79:40:b6:
                    5e:8a:e0:f3:2e:77:07:1e:ef:db:20:35:3c:31:ce:
                    8c:72:81:b6:77:5b:7d:ce:4b:ac:68:2a:df:d6:67:
                    2b:dd:c2:26:81:c6:27:f2:d7:bc:94:e2:8e:e5:db:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2F:84:10:E2:4A:8A:F4:EA:D7:31:54:22:CA:10:17:AE:61:6A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/982acfb7-cc01-3723-9048-629cb0605e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:5a:83:5c:0e:08:0a:e6:e2:f8:25:d7:8b:85:05:54:21:0f:
         ba:12:50:40:e3:ca:8a:5f:10:2e:f6:dd:32:87:3b:0f:69:d3:
         9e:9d:0f:86:87:f3:ef:d3:02:05:1d:bb:6d:c4:4e:82:db:de:
         b0:16:cb:23:1f:ef:dd:99:4c:07:f9:46:96:7e:c2:52:5a:64:
         ec:cb:57:98:07:03:75:68:5a:eb:a0:8a:f9:dc:ec:cf:e3:36:
         c2:b4:36:b5:30:6b:d0:73:74:5e:af:03:c9:b3:6b:68:99:b1:
         5d:5f:8c:a0:79:1f:4b:f9:6d:8c:85:d4:d0:58:5b:96:02:88:
         93:b8:ed:59:07:64:f3:e7:36:47:68:a7:ca:07:77:c1:b1:8e:
         0a:c4:a0:f1:02:1b:57:6b:64:cd:ce:bb:77:18:25:72:f3:bb:
         b3:af:a7:9b:36:c2:c6:3f:6d:a2:37:95:cc:37:4c:9d:95:9d:
         1a:59:3b:3e:ba:05:0e:77:6c:35:54:c3:ec:9e:2f:c8:28:88:
         86:87:91:ad:a0:ef:c1:fa:c0:35:a9:89:cd:e0:0d:06:47:29:
         8e:d6:b0:d9:84:2c:50:eb:ef:d2:b0:db:15:59:95:b3:eb:f2:
         2c:52:5f:f4:24:f7:67:f1:f5:67:7a:31:18:a1:be:e7:fc:4b:
         e3:94:9a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----