Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/79193db0-ed5c-37ba-836b-4b6ac0e85f7b.roa
File:                     79193db0-ed5c-37ba-836b-4b6ac0e85f7b.roa (raw, json)
Hash identifier:          hMyTxvYa3cPm8mCAtGnNiFxlh5wWM2K5Q1lmMTCvh6s=
Subject key identifier:   F0:BE:78:F4:48:3A:B2:A6:BE:70:FD:04:33:7F:D7:DB:36:4C:EB:A4
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584137875E8FA49831B072EB0000
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/79193db0-ed5c-37ba-836b-4b6ac0e85f7b.roa
Signing time:             Mon 13 Mar 2023 12:00:00 +0000
ROA not before:           Mon 13 Mar 2023 12:00:00 +0000
ROA not after:            Sun 15 Jun 2025 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.28.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:37:87:5e:8f:a4:98:31:b0:72:eb:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 13 12:00:00 2023 GMT
            Not After : Jun 15 04:00:00 2025 GMT
        Subject: CN=7bc4e7ad-1bb3-4730-9382-70262e45c828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:dc:c4:23:7f:74:cb:73:cb:ff:f2:37:f8:44:
                    bb:3e:3e:5e:71:31:e1:69:90:4a:48:26:af:ea:c4:
                    8a:1f:94:be:e6:f9:35:85:b8:0a:e1:c5:57:e0:97:
                    21:86:56:e6:0e:c7:59:99:87:26:60:63:08:bf:fd:
                    83:fd:52:c3:54:15:d5:f6:60:39:5a:85:2e:27:2b:
                    28:75:d3:e4:42:5b:c9:bf:37:35:f0:86:c1:1c:c5:
                    06:f1:cd:7e:02:d5:87:e7:c3:a6:f6:46:5c:d3:cc:
                    db:5b:cf:aa:6c:c5:e4:2d:d5:f4:5c:9b:1c:8e:e0:
                    05:fe:c8:9e:9f:a8:60:7a:cf:24:73:11:00:e2:58:
                    f3:54:17:29:b6:fc:16:8a:26:1f:56:f1:49:c6:ad:
                    55:90:b4:00:3d:de:93:7e:ec:d1:92:a7:21:40:e5:
                    42:23:d0:45:f8:c3:a0:23:f9:36:d0:3b:a4:34:2d:
                    21:83:85:ca:ad:27:37:c8:18:e5:b8:08:63:3b:1f:
                    1a:d1:bb:c8:71:98:c6:48:32:38:c4:df:9e:a9:fd:
                    2a:5c:74:4b:a2:e1:59:5f:a5:b5:ed:bd:aa:99:41:
                    d7:3a:98:fa:95:f4:fa:1b:cc:22:b9:e5:2e:6d:6f:
                    02:ff:db:e3:26:51:bd:05:43:27:a2:63:f2:c2:61:
                    8f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BE:78:F4:48:3A:B2:A6:BE:70:FD:04:33:7F:D7:DB:36:4C:EB:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/79193db0-ed5c-37ba-836b-4b6ac0e85f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:9b:86:1c:05:6f:65:08:4e:0d:e3:13:9d:e8:ab:8e:65:3c:
         0b:7c:6a:e5:ab:b5:dc:f4:04:e3:73:81:32:47:14:d3:f3:64:
         e4:bb:28:75:b8:62:95:29:d7:89:40:29:82:65:7c:61:cc:c7:
         ab:9a:8b:58:81:90:31:e1:63:da:be:95:9e:96:5e:03:49:c6:
         5f:9d:b9:e3:31:15:34:37:ff:9f:64:dc:93:41:8d:e6:be:b1:
         c5:d0:8b:5a:16:39:cf:df:df:6f:d1:85:45:10:4a:94:63:2c:
         68:d8:48:db:14:90:70:56:47:72:df:96:3a:7d:cb:c8:bc:72:
         8b:d9:f3:50:75:87:c1:8e:9b:d2:bc:62:d1:32:33:e2:a1:51:
         29:3f:0c:a4:06:6f:46:1b:e1:7b:2e:7b:e9:5c:74:9b:f8:c4:
         91:52:98:4c:38:4e:bb:f3:d2:98:49:19:27:93:fd:32:5c:f7:
         e2:4b:d0:5e:73:f8:86:5d:1d:f4:85:04:53:2c:d0:19:05:f7:
         5d:2c:b4:2b:2f:68:d0:da:b4:f5:47:a6:9c:bc:dd:9d:2e:bb:
         79:15:15:8e:61:56:c7:aa:b6:72:05:57:f0:34:8e:71:a4:d3:
         1b:21:94:47:7d:65:d8:1c:2a:18:83:f9:39:5a:cb:da:88:1c:
         19:64:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----