Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58bf9ed8-7230-3602-938d-e969fade0db7.roa
File:                     58bf9ed8-7230-3602-938d-e969fade0db7.roa (raw, json)
Hash identifier:          o+C74PEB7KqdrMJfcLFKIhBQyYp5odeo4x6ezuTLl6E=
Subject key identifier:   99:AB:99:42:25:22:5E:98:95:DB:A7:8F:55:93:AA:6D:90:84:80:4D
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584170DAD85E39EFCBA09A70DB80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58bf9ed8-7230-3602-938d-e969fade0db7.roa
Signing time:             Thu 09 Sep 2021 14:21:46 +0000
ROA not before:           Thu 09 Sep 2021 14:21:46 +0000
ROA not after:            Mon 07 Jul 2025 04:00:00 +0000
asID:                     13213
IP address blocks:        45.74.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:70:da:d8:5e:39:ef:cb:a0:9a:70:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  9 14:21:46 2021 GMT
            Not After : Jul  7 04:00:00 2025 GMT
        Subject: CN=e859219b-7b7d-487b-a8d1-59c7ad069f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:f5:e2:df:d5:ee:89:91:c4:71:9f:d3:f8:
                    58:8b:b3:48:38:0d:f4:db:33:62:96:df:5e:d9:90:
                    17:a8:34:39:23:f4:c3:8f:ca:25:1a:91:72:09:8d:
                    79:b5:7c:81:2f:6b:3b:6e:61:60:4a:6b:b7:ef:2a:
                    6f:4b:a1:54:34:d1:04:1e:81:46:bb:ca:4c:39:b6:
                    31:12:17:8f:fb:d3:6f:a4:c9:4c:ed:f8:64:1a:58:
                    74:e0:d3:31:c7:7c:e5:8d:11:fd:6f:dc:0d:b1:a4:
                    8e:f5:2a:19:04:8b:21:39:47:00:9e:fa:53:09:dd:
                    ed:90:b3:c2:0f:6f:93:b9:aa:dd:f0:16:8b:23:bc:
                    7e:0a:90:6e:8b:74:fb:20:df:10:33:fc:6a:e5:8f:
                    85:df:19:53:84:7f:e4:55:15:4d:5c:d1:6c:91:d2:
                    d8:21:36:98:23:cf:3d:0d:b1:8d:e3:78:2d:f9:dc:
                    fd:18:c1:ad:b2:b4:21:2d:c3:86:3c:25:52:49:0c:
                    6f:b9:d2:e1:ec:ba:0b:88:6c:e5:3c:2d:79:66:0b:
                    af:fc:65:93:69:c4:fc:32:27:bf:d4:61:8f:1a:ce:
                    1d:c5:2f:cd:c0:49:dc:a9:88:65:8b:71:c3:ab:6f:
                    e8:a9:a4:44:ea:07:21:ab:92:2e:f8:ea:07:75:6f:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AB:99:42:25:22:5E:98:95:DB:A7:8F:55:93:AA:6D:90:84:80:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58bf9ed8-7230-3602-938d-e969fade0db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a5:03:35:d8:cc:02:29:5d:64:c0:f2:c1:34:5a:02:4d:02:
         a8:28:13:12:43:cc:3b:6c:f4:33:45:c3:ef:48:64:9b:69:18:
         e4:6d:4d:7a:c5:d2:02:55:fb:51:56:b2:7c:03:9e:90:e5:19:
         4b:9c:cc:8d:a1:c2:34:02:45:da:f4:9a:df:af:ac:b0:87:ee:
         b3:73:5e:13:7f:92:72:51:31:90:93:3a:1a:63:84:62:86:dc:
         a3:14:e4:3e:1c:69:95:4f:00:2d:fe:54:d6:fd:30:49:48:af:
         23:cf:5b:a3:80:9f:3a:c1:dd:3e:8d:b5:e0:b1:40:9e:28:ac:
         42:a4:fc:ac:8c:68:0b:d2:79:15:67:07:f5:73:e6:f0:ac:98:
         e7:8c:50:70:49:b7:be:28:17:84:ba:79:7f:d2:f9:29:ff:15:
         4c:30:2d:4e:70:a5:48:c6:8d:e4:96:0f:9b:d5:eb:03:50:7e:
         9a:ef:3f:d3:be:39:e6:9b:7f:ab:c6:3a:c9:6e:fc:ec:47:20:
         64:ca:17:50:4b:92:94:c2:a2:39:98:22:f5:c2:a6:42:e8:9d:
         c5:12:9e:9f:06:3a:79:c2:07:12:2f:52:d3:bd:f0:84:74:37:
         6d:04:91:45:65:6c:db:43:ab:2e:ca:a9:4c:96:b7:d0:97:1d:
         c1:f8:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----