Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4b8f3db6-385f-3a23-a31f-8d2f94814e50.roa
File:                     4b8f3db6-385f-3a23-a31f-8d2f94814e50.roa (raw, json)
Hash identifier:          xAmuATFYtxP5KwRT6zfpjolvKFDSKHT48pkK7ssKPFY=
Subject key identifier:   F5:44:2A:D4:7D:B0:DC:FB:A4:77:28:83:0E:4A:7B:9A:73:50:B9:8C
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285841378751D50BE27E2E82442130
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4b8f3db6-385f-3a23-a31f-8d2f94814e50.roa
Signing time:             Mon 13 Mar 2023 12:00:00 +0000
ROA not before:           Mon 13 Mar 2023 12:00:00 +0000
ROA not after:            Sun 15 Jun 2025 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.16.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:37:87:51:d5:0b:e2:7e:2e:82:44:21:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 13 12:00:00 2023 GMT
            Not After : Jun 15 04:00:00 2025 GMT
        Subject: CN=bfab1dc8-cec3-400b-b9ed-40512a3b47db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:89:df:6f:67:06:07:82:a1:f7:c5:69:fb:
                    45:d8:1a:b1:38:65:8d:45:c7:99:62:99:f9:e7:be:
                    56:27:9f:ac:b2:49:a4:12:cb:b9:3f:63:e3:1d:b1:
                    71:7f:ed:67:62:78:38:74:56:ec:6b:ac:b9:b6:43:
                    45:73:8b:54:c1:83:8d:7c:cd:cc:41:01:5c:f5:31:
                    a5:64:f5:fb:46:24:41:60:ac:97:e8:c2:32:a1:38:
                    13:cc:a1:65:c1:54:37:18:58:9d:ce:a7:cd:c4:9b:
                    c3:b6:c3:73:65:57:1c:bf:31:ef:78:fe:4a:53:64:
                    c9:27:40:d9:a8:b9:f8:0f:d6:47:c3:b4:49:18:dd:
                    8e:93:f7:67:50:7f:ec:d6:f1:ad:ca:3a:b0:87:73:
                    5d:9a:b4:f8:a0:f5:99:9e:14:ca:3c:16:5d:f7:c4:
                    b2:15:79:01:ee:13:e7:3a:63:5a:69:79:9f:47:c5:
                    67:f3:60:9a:e9:cd:23:c6:77:d8:ee:a3:c1:16:18:
                    ed:40:7b:98:0f:63:47:2a:69:d6:a2:68:c0:2b:69:
                    93:ec:de:63:05:03:d4:e8:36:ad:20:dd:50:01:3a:
                    27:83:e1:13:4b:89:72:cc:82:95:fe:a8:50:70:28:
                    c7:05:9c:84:5b:ad:cc:6c:82:5e:b7:06:d2:6b:28:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:44:2A:D4:7D:B0:DC:FB:A4:77:28:83:0E:4A:7B:9A:73:50:B9:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4b8f3db6-385f-3a23-a31f-8d2f94814e50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:99:47:97:69:d7:c7:b4:4f:47:7b:aa:8b:67:e5:97:ce:f7:
         32:d8:8d:e3:93:ca:47:0b:e3:a5:95:50:4c:cd:51:b2:77:5f:
         77:27:da:9c:ce:00:95:5f:03:eb:fd:db:14:ab:d0:49:98:45:
         ef:be:b3:05:e0:ca:73:11:29:5d:7d:80:60:f5:b5:78:e2:1d:
         46:d5:fb:56:ff:d2:e6:bf:79:b2:16:a9:fd:c1:be:db:7a:94:
         a2:42:0a:fb:81:6b:17:67:21:ef:f8:9c:52:ad:3f:65:11:ae:
         51:03:ce:52:b6:4d:3d:b4:79:66:d9:6c:9a:1d:85:55:fb:b5:
         47:28:95:68:51:7b:b8:98:a0:a2:9d:5d:9b:ee:f3:cb:2e:1b:
         41:f1:2e:a6:f4:7c:f1:de:86:f8:1b:9d:7d:17:05:21:16:94:
         97:91:b8:0c:2e:1e:60:c8:ec:a9:d5:93:7b:6e:3e:9a:e4:34:
         6f:c0:ac:e6:a2:8a:ab:3c:01:a9:b9:ee:eb:bd:3a:8a:e1:98:
         15:8d:82:5d:43:ca:52:75:e2:85:a0:d3:f1:bc:a1:ef:cd:c9:
         78:f6:21:6a:4a:65:fc:0a:59:64:13:e2:7e:ad:d7:05:80:87:
         73:e1:b8:ff:80:0d:5e:7a:0a:cc:1f:ba:96:17:79:e2:b0:51:
         65:81:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----