Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a1ecf86c-dad9-32ff-94d0-05fe532f772c.roa
File:                     a1ecf86c-dad9-32ff-94d0-05fe532f772c.roa (raw, json)
Hash identifier:          HDgFZBcbbhRx48VUpxq7ylaKtmFnxadIrlT+2sCByAU=
Subject key identifier:   1B:EE:A3:F8:8A:DF:47:64:65:AD:D8:D8:EE:D3:9A:40:BF:35:A0:10
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584309F5AB29C2BFC32BF45D9D00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a1ecf86c-dad9-32ff-94d0-05fe532f772c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f5:ab:29:c2:bf:c3:2b:f4:5d:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=aa64c3f0-a801-4288-8857-983a1b658ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:79:b4:66:40:46:b9:5a:78:1c:34:73:4a:
                    36:d2:ea:20:41:37:d2:40:4f:7c:ab:ea:c0:c3:fb:
                    d1:e8:99:6e:18:92:bc:55:50:ff:c7:6b:8e:9d:91:
                    19:51:dc:cf:9e:cd:b6:f6:73:74:10:9b:25:de:ed:
                    a4:30:cc:78:9e:db:4f:6f:e2:b1:be:20:11:4a:fe:
                    1a:f0:f5:19:a2:36:6e:95:6f:5d:54:93:e3:2b:58:
                    1f:88:99:66:dc:8a:92:8a:8c:59:53:96:80:c1:9a:
                    02:30:06:3a:9e:26:72:4b:05:b7:0e:72:b0:ae:29:
                    a6:2e:52:11:66:9e:66:ce:c0:06:38:84:16:bb:d4:
                    3c:8f:7e:7e:89:a3:8a:38:f1:aa:f2:6f:c0:95:a7:
                    6f:49:74:dc:30:40:5f:c7:87:1f:a0:57:3a:4c:63:
                    71:52:ff:fd:ec:ea:cd:37:2d:6d:dd:02:a2:13:ed:
                    3a:8a:37:e8:9f:56:71:74:5a:cb:f1:22:fb:f1:ba:
                    e4:0a:a7:a4:15:3b:dd:bd:b0:91:9b:30:2e:67:3f:
                    d4:3b:d2:97:9f:d6:34:e6:1f:70:cd:94:a6:23:98:
                    84:df:13:76:fd:0a:05:c8:51:6f:82:92:0a:35:44:
                    99:fe:58:3c:d8:4f:1d:7f:f3:24:6b:43:2a:25:29:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EE:A3:F8:8A:DF:47:64:65:AD:D8:D8:EE:D3:9A:40:BF:35:A0:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a1ecf86c-dad9-32ff-94d0-05fe532f772c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e5:9d:1c:04:18:fe:43:e6:58:25:15:84:eb:af:b1:5e:2c:c0:
         2b:06:91:20:d8:8b:75:61:b0:5c:63:39:48:e1:2f:ed:fa:64:
         96:79:97:86:31:ce:35:3a:1b:fe:53:ab:de:49:e4:3c:f0:51:
         65:be:1a:24:3a:0e:14:79:4f:1a:ff:8b:30:d7:11:31:1b:ab:
         af:d3:ee:b7:f1:5c:13:32:92:69:f4:f0:ee:69:7c:33:21:f5:
         e3:44:a5:dc:6a:92:b3:e2:e7:0f:73:2f:16:a7:33:c6:16:e8:
         1b:65:9a:25:de:05:34:8e:1e:b9:2b:4c:b3:c9:d6:09:14:90:
         ee:ee:97:2f:85:8f:4f:b6:ad:f0:9a:05:22:d0:86:4c:db:ca:
         5a:9f:05:32:e7:5e:e4:9b:71:77:57:2a:8c:06:6c:de:60:4c:
         2c:8c:dc:57:3f:ec:6e:af:b3:ab:e4:1d:ec:2d:c5:d0:73:45:
         32:4e:6f:1b:98:0a:90:0e:cd:61:eb:79:2d:1d:1f:98:d0:a4:
         de:a6:96:3c:56:f6:7f:b4:3b:0c:78:42:c2:46:41:65:63:7b:
         9f:21:72:99:c3:94:76:98:ca:dd:01:2b:af:38:7e:54:4d:3c:
         5c:5b:01:1a:f1:a6:7b:9f:8d:bf:f6:36:b1:33:4a:b2:0c:ee:
         e4:b2:d6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----