Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d00c6c55-7e88-3883-b84e-83e3e1cc2c1e.roa
File:                     d00c6c55-7e88-3883-b84e-83e3e1cc2c1e.roa (raw, json)
Hash identifier:          qD2mQiwvP+qKV15aC4adcrjuIE5TeKBYUhEJK+Nzpew=
Subject key identifier:   04:14:2D:58:5B:C7:12:37:B6:6A:A4:19:42:3B:3E:1C:E7:40:46:D7
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858430A2207DFB0B6C689FD369D80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d00c6c55-7e88-3883-b84e-83e3e1cc2c1e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.8.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:22:07:df:b0:b6:c6:89:fd:36:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b421d465-3713-46f7-83e0-f4adadc2bc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:83:59:3d:79:c6:2d:38:a8:21:c2:22:03:
                    c1:2e:82:6e:81:91:51:b7:81:30:ce:a7:c7:14:4b:
                    9c:65:3a:0b:c1:31:5d:bd:45:d2:b6:f1:e0:b8:8b:
                    95:3e:fb:b3:84:28:19:21:9e:b9:b2:43:7a:0e:ed:
                    90:28:2a:70:73:56:b5:de:ac:74:2c:2b:30:ab:a0:
                    6f:78:d4:99:b8:1a:23:e2:91:91:73:e8:de:fc:ef:
                    8a:95:d8:5c:35:e0:04:33:25:2b:b6:a4:be:e4:82:
                    4b:f7:3f:59:0d:ab:a0:eb:73:81:81:4d:16:e2:48:
                    c4:22:d8:f8:21:75:2a:6b:0d:3e:11:c8:a1:e3:9f:
                    0f:e4:3d:42:b6:a2:6b:2f:fe:15:d6:0e:5b:3f:fa:
                    2a:27:6d:98:53:d3:ff:f7:5d:fa:2b:1c:f7:c3:84:
                    80:5c:79:ec:b4:9d:80:78:04:6d:ff:bc:97:f6:9c:
                    db:93:74:b6:a7:cd:b2:ba:06:7c:5e:4d:3c:df:72:
                    6f:02:a6:0a:b6:64:fa:35:43:a1:ee:ed:0b:41:eb:
                    19:f4:c6:83:61:bd:53:82:af:11:d3:83:9f:3c:a6:
                    8b:2d:7f:67:6f:a9:5e:3a:aa:7f:bb:5d:87:24:b9:
                    22:06:15:aa:85:b3:05:d5:18:c9:ed:d3:77:32:ba:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:14:2D:58:5B:C7:12:37:B6:6A:A4:19:42:3B:3E:1C:E7:40:46:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d00c6c55-7e88-3883-b84e-83e3e1cc2c1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:cd:16:e9:50:79:5d:c4:4b:bf:00:6a:61:29:36:6d:18:3f:
         ae:dd:4f:06:e4:e2:b5:76:b2:f3:00:30:04:ad:43:ca:53:9c:
         4b:6d:47:a6:44:10:72:b0:b9:f7:fd:db:c0:05:ef:d8:4a:63:
         a6:97:75:c5:92:dc:ab:d6:4d:e9:7b:38:eb:37:2d:f6:41:47:
         09:ef:5e:f6:a6:25:37:bb:dd:25:05:f6:90:49:99:0c:d6:3a:
         95:fb:8f:47:44:69:c2:12:59:e6:52:2e:65:0b:5c:39:16:02:
         a7:65:bd:86:14:d6:67:69:c0:9c:d4:23:6a:65:74:c9:ac:b1:
         3e:33:37:a2:67:3e:c7:16:0b:f7:c6:1e:fb:be:04:6d:2f:7d:
         2d:5b:44:4a:4e:b5:6f:46:05:92:45:fb:2d:21:83:73:53:ef:
         9a:29:19:75:0f:37:3b:2b:60:fe:c9:23:80:ed:de:b9:ae:ed:
         46:2b:dc:01:88:1c:ac:f0:4d:4b:d9:49:5b:18:6c:62:bf:90:
         5a:bf:63:6e:e5:89:f4:c1:11:91:36:f0:3f:84:3d:d2:1d:11:
         18:cd:59:db:c0:74:4b:ec:ac:4d:37:0e:37:21:a0:41:b4:b9:
         7e:fc:ac:e6:9f:9e:87:95:0c:f5:60:fc:a3:10:99:20:ab:76:
         10:78:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----