Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/0a44db05-48f4-3619-89d2-629f35613f08.roa
File:                     0a44db05-48f4-3619-89d2-629f35613f08.roa (raw, json)
Hash identifier:          wZGGTYjQcvFZqbsoUl7uHqlTYEr8hE5W5B8SlQ2OmYk=
Subject key identifier:   7B:61:03:6B:97:D2:8F:54:81:B3:2F:B7:6D:7D:0A:B9:36:12:03:47
Certificate issuer:       /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Certificate serial:       010D0C9F4328583F88CFA9756A35E91906AF7020
Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/0a44db05-48f4-3619-89d2-629f35613f08.roa
Signing time:             Tue 01 Dec 2020 15:02:23 +0000
ROA not before:           Tue 01 Dec 2020 15:02:23 +0000
ROA not after:            Mon 13 Jan 2025 05:00:00 +0000
asID:                     62466
IP address blocks:        45.61.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:88:cf:a9:75:6a:35:e9:19:06:af:70:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
        Validity
            Not Before: Dec  1 15:02:23 2020 GMT
            Not After : Jan 13 05:00:00 2025 GMT
        Subject: CN=8e0ed7e5-2794-4175-9621-744251f2cc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:9b:08:3f:ba:83:96:a0:c9:c6:08:78:f3:
                    3e:40:30:da:f6:35:4e:b8:a0:bd:47:27:c1:54:a4:
                    00:c4:ac:cf:5a:b4:87:6e:7a:4f:6b:03:d4:0d:55:
                    30:e9:ef:01:14:e0:9c:d7:79:f2:af:82:b2:48:ea:
                    2c:3c:3d:4c:6e:fa:1f:53:42:dd:a2:b7:a6:75:5a:
                    fc:92:e3:f2:c5:25:9f:b4:b1:74:d9:bd:f2:52:fd:
                    ad:bb:22:69:f0:ee:3e:97:58:92:d2:cb:d8:ce:9c:
                    61:43:be:dd:81:77:d7:93:f2:f7:3e:69:3c:01:ae:
                    62:54:98:38:92:8d:87:8c:05:13:42:cc:a6:03:df:
                    f8:85:c2:6e:ec:c9:bb:a8:06:38:e6:0b:db:86:da:
                    de:69:d2:09:ab:b4:06:8c:28:c3:05:83:15:21:2a:
                    fb:01:44:17:1c:1f:c8:41:0b:df:57:28:ce:4f:15:
                    75:c0:62:e6:6f:d3:47:a8:ec:93:6b:30:95:75:7b:
                    82:46:1c:02:6c:9c:51:3e:30:ab:66:38:93:5b:c0:
                    b4:7d:9c:50:e5:54:94:00:a5:a6:b4:75:eb:b7:78:
                    cf:2a:47:06:85:bc:b2:5b:6c:ea:50:01:1d:51:e3:
                    7d:20:6f:93:83:a7:da:8c:86:a7:88:dd:1f:52:6c:
                    0c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:61:03:6B:97:D2:8F:54:81:B3:2F:B7:6D:7D:0A:B9:36:12:03:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/0a44db05-48f4-3619-89d2-629f35613f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl

            X509v3 Authority Key Identifier:
                keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:da:f2:b9:3d:df:a3:78:bc:a0:99:1e:3f:66:0c:95:04:3a:
         53:1b:47:10:a3:fe:0f:ae:23:fa:ab:97:73:3e:79:30:7b:7b:
         ba:87:c0:31:3b:8d:c3:e8:d4:d5:be:53:b5:e7:26:1d:3a:7f:
         04:18:9b:25:a4:94:eb:53:83:f5:6c:88:c7:01:13:33:f2:40:
         27:50:65:d5:35:62:95:76:3d:3f:47:d9:0d:b4:8c:ea:fe:b6:
         1e:0c:5f:d1:92:60:2c:2a:e8:ea:e2:e0:36:5f:6c:ae:22:b2:
         43:e4:0f:7d:6a:0f:3b:85:c4:4e:a1:50:15:cb:46:bf:c9:a6:
         d0:3f:7b:06:e0:c5:fe:4f:77:39:04:cf:28:e4:f1:89:59:89:
         d1:92:e8:90:62:ff:75:4a:62:c3:7a:f2:24:83:ae:70:7d:3b:
         98:a3:54:32:44:58:f9:5d:60:19:5f:66:db:08:d1:b4:8b:d6:
         42:0c:8b:d1:a2:01:94:7b:24:27:f0:33:74:fe:15:e3:38:d0:
         79:ab:89:1c:7a:fb:3f:7a:6e:6e:ec:5c:89:95:10:3e:6f:16:
         62:ba:99:0c:a1:65:a4:26:61:17:6a:08:6e:7e:6f:73:29:a8:
         d4:16:67:6c:e9:e2:56:f8:c1:16:78:70:e7:96:2f:a6:4a:30:
         9b:43:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----