Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/5fc12554-f7e1-34df-acce-2b031e217a0f.roa
File:                     5fc12554-f7e1-34df-acce-2b031e217a0f.roa (raw, json)
Hash identifier:          oYGz1lsfPaqyChIjvW9RiPLYPZYpCDD8+nS20GjLgmY=
Subject key identifier:   67:16:2B:34:41:7A:28:B4:B6:40:25:D8:EB:A8:1C:9A:84:2C:EC:3E
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285841378775BA38BC5E1CC24EA300
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/5fc12554-f7e1-34df-acce-2b031e217a0f.roa
Signing time:             Mon 13 Mar 2023 12:00:00 +0000
ROA not before:           Mon 13 Mar 2023 12:00:00 +0000
ROA not after:            Sun 15 Jun 2025 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:37:87:75:ba:38:bc:5e:1c:c2:4e:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 13 12:00:00 2023 GMT
            Not After : Jun 15 04:00:00 2025 GMT
        Subject: CN=8bdc65ff-9cf7-4046-a4b4-cd53b8ba724a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:7a:5f:e6:b7:98:0b:fb:d2:54:3d:04:92:
                    7d:0e:71:51:7b:ae:14:d1:5f:89:cf:44:14:c0:0c:
                    fa:00:8f:4f:9f:63:39:e7:73:d7:26:07:2a:df:2c:
                    75:7c:61:fd:d3:e2:f5:8c:f4:77:42:75:f0:0c:98:
                    5f:c8:27:2f:39:25:f5:fc:54:ca:a7:cc:be:0d:f3:
                    d1:dc:02:cf:dd:24:dc:13:c2:fb:32:f8:ef:ea:30:
                    f3:9b:99:52:3c:0e:b7:ed:1d:9c:81:35:3f:2e:42:
                    3b:9d:34:7f:aa:d6:49:0c:03:d3:f2:88:10:91:2a:
                    24:c9:0d:b4:5e:04:ae:a6:67:b4:c6:c3:7d:bd:6e:
                    7c:37:42:72:d9:f0:1b:c2:cc:4f:d8:92:7c:d9:44:
                    72:2c:ae:cb:34:63:4b:9c:1c:b4:d4:da:29:bd:66:
                    1f:d4:76:32:f3:c8:91:72:f5:a4:96:17:be:f6:db:
                    6e:4e:11:1f:4b:ec:7d:ce:35:4d:f6:ac:89:6c:f2:
                    dd:67:07:97:75:8b:c4:bb:94:89:a2:31:4d:72:83:
                    d6:fa:51:23:7a:08:18:14:a1:a1:7a:46:1d:29:a9:
                    1b:9f:87:86:c4:c2:1a:ec:c1:9a:b0:cc:18:66:ad:
                    94:90:b7:a4:ee:3f:4e:14:10:72:af:22:45:7b:ef:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:16:2B:34:41:7A:28:B4:B6:40:25:D8:EB:A8:1C:9A:84:2C:EC:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/5fc12554-f7e1-34df-acce-2b031e217a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:63:b8:f5:55:bc:d8:f6:b4:03:a5:94:ac:55:a2:d7:50:b4:
         ae:14:75:da:f9:64:b2:6f:72:15:6f:30:9c:5c:c9:50:74:b0:
         42:d0:3b:41:47:f9:fc:bd:5b:3f:54:92:eb:d4:51:49:28:be:
         75:1e:14:5b:9c:e8:2e:26:33:17:96:7c:fb:85:2b:ab:18:34:
         94:ef:30:83:a3:df:e5:08:9c:1f:5b:49:01:52:a6:70:ad:63:
         24:a3:95:a2:ed:8b:bb:be:a6:80:ea:c1:36:e9:db:c6:b2:e7:
         35:57:fe:82:b5:65:9c:74:d3:c8:a4:a5:f1:5e:41:f5:7d:0a:
         e2:53:6c:f8:ea:32:20:19:d0:3f:ca:e0:e0:3e:ea:d5:e6:77:
         19:96:54:97:66:c1:5e:e6:e2:b7:c5:4a:82:48:db:8b:7c:f6:
         40:9e:44:7d:ef:62:93:ad:84:18:e3:e4:12:99:c0:63:5e:41:
         0d:2e:0a:01:05:df:6a:cc:60:18:e0:1b:a0:50:c5:29:ce:1e:
         22:34:50:59:c7:7d:5a:02:32:42:1e:ae:16:38:6b:2c:5b:77:
         fa:1b:4c:bc:1d:95:f1:c6:a6:fa:25:e5:dd:cc:bd:ae:be:c3:
         65:57:a8:f5:dd:16:75:67:9c:ed:f6:da:f4:6d:2e:54:57:44:
         cf:fb:8c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----