Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4d481ebe-53c9-3a3e-8d68-6d0913125e8b.roa
File:                     4d481ebe-53c9-3a3e-8d68-6d0913125e8b.roa (raw, json)
Hash identifier:          jodIfjeMuxW/v3M/p9WIhxLvkGntDfDTVkN+xWL5SPg=
Subject key identifier:   A3:49:4C:16:64:50:02:D9:16:7C:38:1E:3F:50:E6:3D:C7:75:8F:04
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858430A03092959048612E327A680
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4d481ebe-53c9-3a3e-8d68-6d0913125e8b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:03:09:29:59:04:86:12:e3:27:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f83417c5-1d05-4a89-b7e1-fa14735aa17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:c3:26:ed:7f:96:f4:de:18:0c:6c:39:68:
                    39:c8:0e:b9:4d:5d:2a:2a:02:31:fa:d8:c5:c3:10:
                    53:f1:a7:1c:d5:67:16:4e:0f:9a:9c:c6:7e:4c:26:
                    06:f1:19:d8:8e:04:c6:e7:f1:63:ac:47:ca:c1:27:
                    c4:f5:bd:26:97:1d:b9:9a:b1:27:33:7b:39:85:c1:
                    30:cb:7d:3f:67:63:8a:11:ae:5c:51:a4:f5:47:30:
                    a9:a4:38:05:fd:5c:b1:9f:b3:2b:fd:8e:48:d9:40:
                    e1:2c:6b:0a:35:2e:cc:f5:11:31:26:a2:f9:78:98:
                    27:30:cf:bc:e1:00:ec:b9:88:d0:1b:95:c6:6a:7e:
                    e1:b4:7f:00:50:1a:a7:0e:20:23:74:1a:77:73:f5:
                    f4:4c:64:f7:89:ff:a5:99:8c:b8:57:14:c3:67:65:
                    30:20:72:ac:00:05:1e:3f:1c:ca:86:16:ff:fa:0c:
                    76:f9:80:44:a4:16:c7:37:40:97:6d:89:1d:fe:11:
                    aa:db:b9:01:ba:9e:61:1e:7d:3c:0d:cc:82:9d:8c:
                    3a:d5:dc:61:03:1b:a5:e8:64:a3:bb:8b:59:0a:f5:
                    98:3b:3c:8a:d9:54:fd:9f:0b:cb:24:29:18:6b:64:
                    5b:61:f5:f9:98:a8:77:6c:60:27:5a:d8:79:20:e2:
                    cd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:49:4C:16:64:50:02:D9:16:7C:38:1E:3F:50:E6:3D:C7:75:8F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4d481ebe-53c9-3a3e-8d68-6d0913125e8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:97:5f:9c:f3:f7:b9:04:5e:22:2f:39:14:93:d9:ad:68:72:
         d9:56:51:cc:b5:aa:92:0b:ba:2a:db:d9:1e:8f:68:7f:8b:b3:
         da:3e:42:48:fa:cc:00:1d:83:4f:29:47:3d:4c:e2:8a:e9:e6:
         51:78:aa:70:0c:68:36:94:d2:77:91:00:dc:6c:b4:be:d1:1f:
         5c:7d:cb:fc:7a:76:d6:c1:bc:30:1b:8d:79:dc:75:07:88:8e:
         54:c0:7b:41:64:c2:e1:4e:14:4b:39:0b:10:6d:79:d4:90:bb:
         ee:65:3e:2b:21:85:24:34:a5:4a:0c:00:8c:ab:e5:15:9c:b5:
         1a:ee:ec:44:ea:ac:a6:d9:cc:20:9e:bc:ea:44:71:29:5b:a4:
         7c:6a:84:44:11:1b:24:e3:c9:82:80:e7:4a:fc:18:f4:24:4d:
         0a:8a:5e:a6:54:0f:7b:06:47:d2:19:51:d8:19:92:86:c6:a3:
         61:5e:f2:83:1d:7d:b6:89:ef:b3:ac:fc:dc:0e:74:93:76:7a:
         81:5d:eb:08:d7:cd:d5:80:e2:2c:6e:94:5a:c7:02:de:c2:0e:
         d2:3d:8c:6b:10:5f:24:0e:c0:c1:91:89:16:15:fe:d7:7f:d1:
         04:87:ee:35:69:b4:e3:d4:bd:96:7c:c1:19:68:f7:d0:4c:48:
         10:26:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----