Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cd097b25-a311-35b3-b4a7-ff316d887e06.roa
File:                     cd097b25-a311-35b3-b4a7-ff316d887e06.roa (raw, json)
Hash identifier:          afg5YbAcBCXmR5tY9q4ENIoOHFlTFrcXZ75UT56EFcI=
Subject key identifier:   F4:90:89:17:FF:16:F2:A9:B5:15:F2:AF:BE:34:3A:6A:DE:A7:E0:27
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858430A1C12733A2A5E584D2B5E00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cd097b25-a311-35b3-b4a7-ff316d887e06.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.128.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1c:12:73:3a:2a:5e:58:4d:2b:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=4541cfe1-8fa3-4844-b311-10357b1c8719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:5d:69:9e:ae:25:75:32:d6:b2:b1:f1:a0:
                    cf:92:06:13:1b:f4:cd:fa:b2:7a:62:8f:07:0c:97:
                    49:25:dc:e1:99:0e:93:63:01:4b:06:e3:8a:1d:0e:
                    b5:55:54:93:06:2d:1d:31:56:c4:9a:b8:0b:0d:be:
                    d3:60:13:8b:1a:37:8c:6f:87:8f:8b:bd:5f:5c:57:
                    17:c7:a7:72:60:b2:67:a0:e4:bc:84:8b:f3:1c:ba:
                    a5:85:86:a9:bd:ac:1b:5e:f9:d0:5e:c2:72:97:ed:
                    ec:cb:09:ea:ac:14:bc:b2:c8:25:5d:04:59:18:72:
                    66:1d:07:5c:1e:ec:7d:df:73:f4:76:b7:c5:00:61:
                    cc:a4:b7:0e:f3:94:7e:8c:e6:9a:01:ac:23:3f:08:
                    f9:99:dc:c7:df:d4:b7:e4:cb:d2:a7:35:87:3a:73:
                    6e:ae:8f:dc:1a:eb:24:36:56:81:82:8c:83:ca:52:
                    66:0d:a9:af:ca:ab:8d:fa:ce:6b:d3:f8:24:82:b8:
                    8f:1a:58:1a:8d:99:0d:4c:26:f8:fe:de:b3:56:ae:
                    53:70:b5:9a:a5:32:8e:31:09:0f:bf:81:22:5a:dc:
                    08:35:ec:1e:41:9d:d8:8e:8f:14:c3:21:f1:92:2b:
                    f4:f7:09:62:c5:ce:2f:ca:16:c6:79:25:7f:8b:74:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:90:89:17:FF:16:F2:A9:B5:15:F2:AF:BE:34:3A:6A:DE:A7:E0:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cd097b25-a311-35b3-b4a7-ff316d887e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:19:63:56:e9:85:ba:56:6e:9e:9e:02:b0:9b:55:ca:50:e5:
         b0:2e:c6:10:84:8b:63:ad:05:16:15:14:3d:26:cb:9d:18:2d:
         62:29:0b:f0:34:79:04:f9:4f:f3:15:de:2e:a7:99:cd:a5:7f:
         93:62:aa:a4:e5:6f:0e:14:b4:04:9d:23:34:cb:c5:43:a4:17:
         dd:df:3e:37:9f:f3:a7:bb:00:f3:d0:d6:49:d2:9c:ab:3e:e4:
         16:ad:85:1a:16:64:77:9e:e3:8f:dc:1b:e1:55:ec:fd:03:cb:
         00:3c:59:0a:57:ed:de:e3:81:95:d5:fe:43:6b:f0:0b:6a:78:
         cf:4c:c7:13:5e:03:04:4d:ad:bf:6c:49:cb:f8:70:95:99:95:
         66:b7:e9:92:22:2b:a1:79:33:73:7c:c5:55:07:9a:4c:52:c5:
         ee:1a:3a:30:7b:83:bd:70:ee:aa:ea:fd:7f:b4:8e:78:ac:00:
         0f:72:72:e7:f9:5e:84:2c:66:30:25:cd:14:fc:9e:65:2b:5b:
         40:8c:87:41:c5:83:ba:05:5c:e9:83:5b:b2:11:57:fd:69:a2:
         33:0c:32:8a:f7:23:9b:fb:2d:e1:fc:8d:d8:c5:6b:a1:8d:ec:
         b9:65:b0:b4:ca:f7:69:e9:57:00:ca:90:83:07:50:89:dc:f0:
         e9:ca:8f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----