Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/35d72240-8f9a-3e69-ad4a-a3c9988d20d0.roa
File:                     35d72240-8f9a-3e69-ad4a-a3c9988d20d0.roa (raw, json)
Hash identifier:          66H2fBS+30v3Cg2+03W7W1LgXZn6DXZkjRu+H78efNY=
Subject key identifier:   E4:A0:A0:34:8C:98:22:E6:74:74:50:60:0B:46:02:78:AD:53:51:EF
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F43285840ADD13582BB8D1C1D4722C000
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/35d72240-8f9a-3e69-ad4a-a3c9988d20d0.roa
Signing time:             Mon 13 Jun 2022 15:30:08 +0000
ROA not before:           Mon 13 Jun 2022 15:30:08 +0000
ROA not after:            Tue 01 Jan 2030 05:00:00 +0000
asID:                     14445
IP address blocks:        45.42.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:d1:35:82:bb:8d:1c:1d:47:22:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jun 13 15:30:08 2022 GMT
            Not After : Jan  1 05:00:00 2030 GMT
        Subject: CN=2ec4881b-502a-4c49-bdea-59c4dc8ec25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c2:32:76:a3:d8:c6:91:77:28:b4:91:6e:80:
                    3b:07:fc:bf:56:3e:b9:58:7c:63:c2:e3:c0:91:4a:
                    4f:b3:33:7c:04:c0:07:ca:ff:5f:bf:41:2e:3f:20:
                    a5:31:a3:df:27:c8:15:f7:9b:cc:3c:fe:10:63:a0:
                    03:82:cd:88:23:d3:e1:70:85:5a:f9:03:8d:46:7a:
                    2b:78:44:87:fd:3c:9c:f8:99:23:22:bf:e8:59:35:
                    6e:e6:e6:08:41:28:23:98:49:a1:21:df:3a:c9:f3:
                    7d:ad:e4:9c:0e:02:ed:08:89:0a:dd:9d:7e:2e:50:
                    76:6f:8c:da:dc:ad:bc:c5:69:ae:04:4a:2f:a5:79:
                    0b:58:06:ee:13:5e:b6:bf:bd:4e:2a:0c:1c:9f:fc:
                    d1:8c:9c:07:16:22:ce:ec:b2:cf:3d:56:72:ba:62:
                    f0:2a:5c:3a:26:3f:25:68:26:cb:c7:e0:32:28:57:
                    db:58:dd:7a:9e:a6:18:95:94:b4:7d:37:fa:e0:ad:
                    10:0d:95:df:ed:b7:53:44:dc:c1:09:74:60:13:5a:
                    9c:ff:9e:35:42:ce:ef:35:6e:de:bf:19:10:b4:2f:
                    fb:75:14:ea:0a:19:a0:06:03:9d:87:0d:9a:b6:bb:
                    34:56:88:23:e2:93:97:d7:48:0e:02:48:5d:0b:04:
                    3a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A0:A0:34:8C:98:22:E6:74:74:50:60:0B:46:02:78:AD:53:51:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/35d72240-8f9a-3e69-ad4a-a3c9988d20d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:7b:b1:4b:44:2a:51:6c:94:f9:01:cb:74:84:50:f5:4b:c7:
         3c:f5:16:ce:17:5d:75:34:19:c1:b2:ba:d9:9b:0b:e5:29:3d:
         33:35:4c:2b:4b:f5:48:e2:b6:5c:8d:75:7c:66:54:b1:69:f6:
         cd:23:46:09:e4:aa:36:3d:fb:10:45:20:76:db:bc:f7:ea:b3:
         72:3b:c8:dc:e9:d9:0d:57:9e:c7:c2:7e:b0:03:34:bc:ad:00:
         95:e1:5e:71:bc:ea:72:72:5b:1e:0f:56:18:c4:97:24:76:5c:
         5b:45:b8:63:97:94:91:28:7e:e2:20:de:ac:48:84:ab:0c:9b:
         b9:fb:b6:54:28:2e:06:c8:09:3c:f2:11:2e:b6:5c:c2:de:4c:
         d9:a9:4d:5b:a7:40:3c:c6:83:93:c8:62:50:2a:47:2c:12:61:
         9c:6f:8c:e0:36:4f:c2:c9:b6:61:92:ec:4c:b6:33:9e:4b:9b:
         8b:0e:c6:42:41:16:8e:d7:32:d9:ac:9e:22:c5:14:dd:86:58:
         b0:39:3a:24:b4:cf:6d:b1:f1:27:38:ee:f7:48:07:a0:3a:9a:
         d9:c6:c5:b4:5e:f2:c9:29:e3:4e:94:1b:1f:2a:fb:9b:7b:f9:
         1f:13:37:5a:42:49:8e:6e:85:31:60:5d:e1:94:42:e8:39:6a:
         6c:c9:25:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----