Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/50e89c1b-cca7-355b-a1e8-2f7318215c32.roa
File:                     50e89c1b-cca7-355b-a1e8-2f7318215c32.roa (raw, json)
Hash identifier:          dr66ncY4wBGPmMYA67bx7X2p4JsroFn9/vgvrsWm0/c=
Subject key identifier:   C1:65:2A:81:F4:E3:5E:5B:D1:49:DB:BC:22:0D:CE:0B:8C:1D:6C:B3
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584309F7E90AF0C1FA4C48C53C40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/50e89c1b-cca7-355b-a1e8-2f7318215c32.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f7:e9:0a:f0:c1:fa:4c:48:c5:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8194c393-aa05-404f-9ffa-7cdc7764cf5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:59:c4:c4:5c:0d:bb:74:5f:8e:44:9b:4e:
                    13:a3:96:7d:82:cd:b9:ed:fe:a5:4d:24:5f:f8:77:
                    8f:2f:84:a5:e5:00:d9:1c:77:73:d7:d1:ae:d4:2b:
                    9f:db:8b:83:b6:7a:7d:a5:79:ad:8f:0d:1a:dc:e5:
                    fb:44:5c:40:0d:b2:a1:39:e7:92:b2:b4:2a:06:20:
                    c2:5e:5f:fb:aa:49:b2:c8:45:a9:ed:cd:7c:a6:27:
                    a8:40:1d:98:b2:d0:06:01:8d:ad:a4:d4:bd:7f:6a:
                    9f:d7:9e:d4:0b:8f:73:dc:46:e9:90:22:78:91:22:
                    d6:9e:47:d2:97:88:5e:a6:fe:6c:7e:41:6a:87:17:
                    15:96:1d:ab:f6:a9:4e:42:48:06:18:34:87:07:2c:
                    8e:2c:39:9f:57:26:1c:43:b1:b7:61:09:f1:10:97:
                    6f:3b:31:37:fc:78:3e:d5:a2:7e:56:87:63:e3:24:
                    68:2a:2e:21:03:1a:e7:ca:7c:98:12:f8:5d:b9:2e:
                    91:d2:36:99:7b:1f:b3:48:f2:03:de:bc:92:51:46:
                    8e:46:35:73:a9:e3:bc:6a:06:8f:7e:a6:7c:17:41:
                    61:83:2f:31:ff:00:3f:5d:db:f9:3b:c3:f0:39:d5:
                    94:ee:da:83:9c:db:ff:75:6d:6e:12:ae:8b:71:0f:
                    0e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:65:2A:81:F4:E3:5E:5B:D1:49:DB:BC:22:0D:CE:0B:8C:1D:6C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/50e89c1b-cca7-355b-a1e8-2f7318215c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f2:fb:3c:1c:e3:b5:46:4c:e3:4a:fb:98:2d:19:a7:0b:f0:
         81:50:a9:31:ad:6d:4f:b8:1c:f5:d6:06:5c:b9:2d:ea:f0:7f:
         00:09:12:cb:79:72:57:91:2b:33:1d:85:79:09:e6:84:40:a2:
         54:c5:2b:77:23:5d:eb:b8:da:5d:b1:58:48:9d:e0:4a:8e:df:
         10:44:bc:33:40:7d:ac:76:44:11:af:09:d8:2e:e5:ea:af:ff:
         c3:31:68:4a:62:3f:da:40:ce:78:88:dd:bf:fa:2d:78:87:50:
         48:1a:1b:e8:e5:12:dc:df:47:a4:e4:c8:23:5e:d8:08:2c:66:
         00:60:20:5f:d8:53:b2:64:f2:5e:cd:b5:13:3e:74:51:50:43:
         9b:6f:ad:eb:85:0e:10:eb:00:cc:ba:47:7d:13:81:47:64:92:
         11:32:bd:f3:49:70:b5:6d:b0:72:00:df:81:8e:7d:75:ba:de:
         db:a3:e3:60:72:bb:e0:59:bf:22:10:d8:a4:8d:5d:20:3e:7e:
         10:cf:4b:76:7f:5f:62:4a:0a:b6:f0:45:e6:62:b0:fd:8f:73:
         8a:2e:f7:23:97:83:05:99:2b:8c:c0:96:04:63:4e:88:c9:e4:
         82:cf:0a:d2:be:37:21:b0:52:7d:23:59:a0:d8:2f:0b:8a:ba:
         d4:d5:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----