Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1eb2c23d-a4ad-3ebc-ae60-07aed438bdaf.roa
File:                     1eb2c23d-a4ad-3ebc-ae60-07aed438bdaf.roa (raw, json)
Hash identifier:          InMspY2ApaXmzlhT6Y2CHNXG6+FmGWHnLOWedTLdLgk=
Subject key identifier:   AF:F4:65:F6:5D:94:88:C4:83:7A:CF:26:15:5D:1F:EA:DB:29:1B:95
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328583F0711DCB725BAF070FD818A80
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1eb2c23d-a4ad-3ebc-ae60-07aed438bdaf.roa
Signing time:             Tue 23 Aug 2022 19:00:08 +0000
ROA not before:           Tue 23 Aug 2022 19:00:08 +0000
ROA not after:            Fri 27 Aug 2027 04:00:00 +0000
asID:                     209737
IP address blocks:        141.140.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:11:dc:b7:25:ba:f0:70:fd:81:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Aug 23 19:00:08 2022 GMT
            Not After : Aug 27 04:00:00 2027 GMT
        Subject: CN=9363eeeb-c90e-4460-91df-ffe9e3b3f176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:47:cf:27:0f:0b:dc:2e:72:43:4d:8c:a5:
                    f2:ab:c2:e7:ea:1f:7c:b9:2f:53:5d:6c:b6:05:c8:
                    c6:a3:a9:1c:42:83:62:28:e5:0c:19:4d:2c:f7:7c:
                    d5:3d:c3:b8:09:d0:06:f6:40:5d:d5:10:9c:0c:b6:
                    10:0a:64:93:35:49:6c:18:b5:77:e4:06:b9:d8:5d:
                    88:67:86:a6:f4:10:b1:63:b4:6f:e7:30:28:de:7a:
                    2c:38:7e:3a:85:c2:00:4d:80:21:ec:4e:46:4c:37:
                    6f:e5:6d:48:c4:58:58:3f:78:8f:ee:53:3b:3c:39:
                    0b:8e:cb:90:44:d0:7b:73:59:bf:5d:62:2f:11:af:
                    ec:bf:c9:ae:36:31:45:90:a4:1a:46:5d:4e:7b:67:
                    19:07:9f:21:e4:4b:94:1f:24:fd:1f:92:ce:f1:c3:
                    8e:bd:d7:36:9d:5d:a5:1e:78:32:9c:33:26:ef:75:
                    16:b8:cc:1b:9e:82:eb:4b:43:91:28:01:e4:e0:b6:
                    7c:5f:b4:fa:02:55:c8:65:85:ea:88:4b:ec:83:b9:
                    48:c9:3f:64:09:af:9b:a1:92:49:9f:81:91:e1:33:
                    1f:f8:8f:a1:a2:44:10:5a:16:5b:3b:e9:bf:4b:7d:
                    8f:3c:72:83:d9:61:33:c9:14:4c:02:07:e5:48:03:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F4:65:F6:5D:94:88:C4:83:7A:CF:26:15:5D:1F:EA:DB:29:1B:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1eb2c23d-a4ad-3ebc-ae60-07aed438bdaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:69:24:f5:96:55:fe:45:29:88:c6:8e:91:6d:83:c7:da:9f:
         1d:f6:53:ec:d1:e9:92:dc:ac:68:c1:bb:eb:2d:08:91:cc:73:
         00:e7:bd:0f:01:4d:9e:38:c7:a3:9b:81:e4:85:35:5c:49:7f:
         4d:e1:7e:a3:08:35:4e:a9:73:37:e5:c7:4a:e4:04:e7:b2:6c:
         2b:1e:c4:43:19:5b:c3:a1:fe:4c:90:8b:90:1b:bf:fa:04:80:
         50:75:87:16:6a:99:43:16:16:78:da:7a:88:ae:c1:e1:6e:6e:
         8b:b9:3d:f6:1d:c4:e2:6e:d6:36:ed:ae:b2:ff:13:b1:b7:bd:
         c2:66:58:eb:76:eb:98:4f:f5:79:16:0b:52:9b:c8:17:55:01:
         d1:56:21:60:1c:0c:ca:5f:bd:13:22:8c:c6:a2:33:15:0b:91:
         fe:8e:0d:f5:cd:64:f7:a7:b1:f4:7c:5a:f4:20:04:bb:72:bb:
         9f:ad:70:fa:ee:95:4c:45:38:09:f4:2f:4e:54:f7:78:83:c6:
         a7:2c:53:ed:e6:aa:ee:28:2b:b4:c3:6a:a4:25:fb:16:de:47:
         4f:5f:bd:f2:ae:c3:bd:0b:8f:19:b0:e0:4e:15:0b:2b:8a:50:
         99:de:99:3a:fc:fa:64:95:7b:02:29:36:a5:e5:8a:26:f2:66:
         b6:c3:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----