Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d79ea287-d975-36fc-8af3-059a22db528d.roa
File:                     d79ea287-d975-36fc-8af3-059a22db528d.roa (raw, json)
Hash identifier:          j1icuctketiNoK/LM2STGISqYTtgfdGyz+nRFG9V5eo=
Subject key identifier:   6C:AF:66:F0:EB:36:45:64:C0:22:B2:43:D6:C8:AE:03:38:12:D3:D2
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584309F5850D027E49D67469D734
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d79ea287-d975-36fc-8af3-059a22db528d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f5:85:0d:02:7e:49:d6:74:69:d7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=69c29a4f-4ebd-4bdb-ad19-63cf3d2d6ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:13:cc:06:6f:26:87:c8:ef:a0:aa:8f:d0:
                    c7:46:f8:36:2e:3b:30:f7:10:1a:ac:da:cf:96:70:
                    5a:4f:93:01:d6:48:cf:c8:5c:11:ef:41:79:81:84:
                    7a:cd:42:97:88:a3:c1:f9:ba:2c:9b:2b:46:ae:0d:
                    aa:af:fe:01:49:e8:3d:2e:5c:6a:aa:89:0a:07:50:
                    65:bb:55:ef:97:6b:60:2e:cf:03:4e:4d:b1:53:5b:
                    4f:e7:46:13:2a:93:66:65:5d:ac:d5:82:8f:30:f2:
                    fd:09:81:5d:ce:11:1c:5d:1a:83:67:fb:22:10:4f:
                    46:08:74:7c:fe:2f:ec:55:d1:09:c7:8b:4f:01:7b:
                    b4:b3:8b:13:2e:41:88:65:44:28:5f:f1:29:0d:6c:
                    a8:dc:14:9a:16:0f:ed:a8:57:f4:e2:f0:c6:9f:0e:
                    78:b9:ac:07:85:38:28:19:60:4d:2b:f7:51:8a:94:
                    5a:74:39:49:cc:cd:1a:8c:08:a3:9c:55:e4:a5:b2:
                    2b:3b:52:6e:a4:9a:ed:25:66:c2:35:0a:09:20:ec:
                    7b:d3:1b:b9:15:65:e4:05:c3:00:ca:35:0a:2d:7e:
                    91:ab:2e:4c:3e:07:12:7e:5d:a9:7e:f2:cd:f3:20:
                    27:9f:f8:f2:87:9d:2c:08:e7:f2:a3:bd:88:8e:da:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AF:66:F0:EB:36:45:64:C0:22:B2:43:D6:C8:AE:03:38:12:D3:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d79ea287-d975-36fc-8af3-059a22db528d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:36:da:26:dc:90:95:34:e0:cb:45:29:59:71:5b:96:42:95:
         2b:05:e3:b2:96:85:35:71:36:81:39:a3:03:80:f0:23:00:5b:
         4b:79:cf:a4:47:b9:a4:f8:e8:c9:97:56:79:8d:78:a4:56:93:
         37:c7:8b:0f:1c:81:34:20:2f:60:9b:23:21:e4:35:80:45:61:
         66:44:b6:a6:33:46:e3:d7:f4:0d:f7:8d:aa:e8:e0:ce:f4:d9:
         a1:b5:ad:23:7b:eb:10:bb:da:de:ff:8b:37:e7:4a:21:f4:c2:
         50:45:fe:d9:9c:bd:4a:82:3f:13:ac:ec:42:1f:96:24:c1:8c:
         0c:38:6c:9a:15:d4:5b:d2:e7:07:35:51:93:26:d8:c4:3f:82:
         03:7a:d5:07:fc:32:1e:bf:49:e6:29:e4:73:5d:7a:ae:35:c3:
         65:87:e8:96:04:7c:73:ae:8f:03:62:8f:c8:b9:a8:3a:24:7f:
         3c:a4:7d:49:9b:a5:fc:cd:30:f5:4b:ee:31:ce:55:10:ec:e5:
         ac:22:2d:45:3e:19:9e:80:12:a1:ea:c7:2b:97:62:63:e8:e4:
         73:74:74:45:b7:4b:3b:ca:1c:8a:28:ad:89:0a:3d:1e:36:2c:
         57:53:11:34:e7:24:1b:ed:ef:97:02:6f:e7:de:ca:3a:d2:f8:
         11:14:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----