Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c610b14b-6326-3eb5-9cdb-63bf3febafe3.roa
File:                     c610b14b-6326-3eb5-9cdb-63bf3febafe3.roa (raw, json)
Hash identifier:          3kfzwtBVdZltFXbzWwdEefhoCBmNEagG4zAUHBfvD58=
Subject key identifier:   77:1E:AE:27:49:6D:19:D2:71:AE:EB:5E:9B:C4:68:03:E6:8C:E2:B7
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858430A26D37864719C024D507180
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c610b14b-6326-3eb5-9cdb-63bf3febafe3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:26:d3:78:64:71:9c:02:4d:50:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c3b6845e-456c-462e-bfd1-ceed516f574e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:6d:93:f8:47:e8:0f:a7:ec:31:59:73:68:
                    ca:aa:02:6f:e5:ce:80:1a:20:ea:6b:28:d8:6b:93:
                    0d:9c:a2:ce:03:45:cf:b7:fc:51:40:33:26:10:31:
                    51:b6:b2:96:5f:47:ac:c2:3b:80:40:77:22:e6:96:
                    78:9f:ca:3d:d8:59:37:98:c4:fa:d9:ae:5e:d1:62:
                    39:52:dc:eb:72:4e:91:de:a9:ac:93:99:aa:fa:25:
                    cf:5f:73:a9:73:fa:e9:2d:03:71:f1:dc:2d:46:ec:
                    85:3c:a7:42:4e:33:96:71:eb:5c:9c:75:97:3f:64:
                    9f:bf:80:b9:2d:b5:16:d0:3d:de:b6:c4:8d:15:aa:
                    11:24:dd:f5:97:33:50:04:46:a6:fe:e1:4f:95:9a:
                    4d:a8:c8:cb:38:5e:c5:60:9a:43:0f:ef:b0:36:07:
                    2b:84:3f:e4:de:ad:1f:4e:98:1e:ff:8c:b3:46:1a:
                    d1:99:50:72:37:16:75:3a:74:9c:d8:94:e8:46:c0:
                    27:6a:34:55:fc:24:48:c5:97:b9:a5:8a:d0:b3:44:
                    59:c1:0e:25:50:d4:46:6d:ec:f6:fe:d2:56:56:b6:
                    27:64:b0:71:ce:26:19:67:f5:4b:14:23:7e:0c:f2:
                    e3:83:ce:c7:1d:d8:22:dc:9d:15:c1:d7:c1:31:77:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1E:AE:27:49:6D:19:D2:71:AE:EB:5E:9B:C4:68:03:E6:8C:E2:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c610b14b-6326-3eb5-9cdb-63bf3febafe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b8:aa:71:b2:59:b7:f8:58:7b:e5:17:5a:e6:a8:52:b7:71:
         24:d3:b2:1c:7b:99:18:8b:8a:e6:7a:31:45:35:57:60:9e:be:
         87:65:76:ca:f4:bd:45:94:86:73:49:5e:67:64:71:32:9f:81:
         cb:ee:6d:95:30:06:1e:5c:ba:e4:e2:a7:ce:0d:0a:57:b2:57:
         87:69:37:71:22:af:56:e8:62:a3:52:26:50:ac:34:8f:f0:99:
         20:24:15:b5:b1:d8:fb:3d:16:f7:1a:28:ad:80:a8:c1:3d:c6:
         a0:36:eb:07:df:0e:f7:87:b5:88:75:a2:8f:d8:f3:a0:0a:17:
         ac:24:b1:fa:f2:12:2f:ad:24:d2:de:10:f3:31:5f:03:49:2d:
         a7:2e:d0:5d:cc:a2:05:75:b7:f6:67:b9:be:87:4b:5c:8a:e4:
         d4:15:91:04:f9:bf:a4:3c:a3:5a:b6:11:b7:72:76:77:6e:28:
         cb:14:12:b2:94:58:d2:17:52:33:8d:20:fc:23:8b:32:4e:8c:
         5e:f2:05:53:cd:b3:48:df:b2:b1:45:68:da:c3:d7:d3:e2:ee:
         19:5b:0d:7d:4c:d0:3d:c0:2c:5d:0e:9f:90:22:5c:02:ec:46:
         80:72:aa:f2:fc:dd:47:29:01:56:4d:2a:1e:db:62:d3:b7:dd:
         d4:49:16:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----