Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/37221416-e1de-3bba-88b0-d719e15b75db.roa
File:                     37221416-e1de-3bba-88b0-d719e15b75db.roa (raw, json)
Hash identifier:          lAsn5jIhg7cf7CgYJLoAfDZIr0KORHLp6uXTuO+RFso=
Subject key identifier:   57:AB:77:99:71:1A:E2:96:22:EB:D6:A4:A7:8F:E7:2F:35:BB:49:AA
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F432858410CF96CBAC36184C4B863DFE0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/37221416-e1de-3bba-88b0-d719e15b75db.roa
Signing time:             Tue 23 Aug 2022 19:00:08 +0000
ROA not before:           Tue 23 Aug 2022 19:00:08 +0000
ROA not after:            Sun 01 Jun 2025 04:00:00 +0000
asID:                     0
IP address blocks:        141.140.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:0c:f9:6c:ba:c3:61:84:c4:b8:63:df:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Aug 23 19:00:08 2022 GMT
            Not After : Jun  1 04:00:00 2025 GMT
        Subject: CN=8f13f27b-2e13-4c80-8cc9-3ed1b3474c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:d8:77:65:14:d8:b1:7a:12:da:4f:68:45:
                    d9:98:da:be:a2:d5:6f:20:cc:66:ff:d6:e4:65:78:
                    9a:24:43:b0:a1:82:0d:c7:fd:3f:93:0b:35:41:53:
                    6b:a4:83:1f:2b:b3:25:3a:c9:63:d5:3a:71:f3:85:
                    91:b6:d5:a8:bb:26:27:a8:67:8f:72:54:7c:28:f3:
                    5a:71:72:be:a1:9b:56:e4:53:c7:d9:54:6f:63:c1:
                    22:80:5c:a3:ed:09:d6:d8:4f:fb:89:41:a5:e8:c9:
                    28:77:3f:ae:0d:50:fa:87:b6:77:3e:5f:7a:c3:1e:
                    f1:a8:49:90:44:dd:2f:23:45:d5:5a:b2:76:5d:8d:
                    aa:e0:62:24:c0:4b:fb:f2:ce:73:b6:47:27:5e:47:
                    e8:b1:b7:cc:d4:6e:f1:9c:93:78:0d:0d:94:66:99:
                    8f:29:29:09:6c:ae:15:51:cd:f0:cc:f0:44:a2:30:
                    36:25:00:7d:ac:a1:39:81:00:85:78:52:36:c6:bc:
                    1d:f4:88:66:68:f3:18:94:cb:a6:ff:84:d5:29:1b:
                    62:1a:e9:0f:29:3f:b2:5b:5f:a3:e5:88:58:cc:df:
                    b3:8f:da:5f:7c:1b:5f:55:2d:f7:4a:34:39:95:07:
                    f0:d9:ca:f8:a0:e3:2d:0b:38:02:7a:fa:15:14:25:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AB:77:99:71:1A:E2:96:22:EB:D6:A4:A7:8F:E7:2F:35:BB:49:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/37221416-e1de-3bba-88b0-d719e15b75db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:4f:d4:bb:0b:ba:bb:5f:10:d0:72:92:41:e2:01:1c:4c:57:
         7e:b6:4c:1b:15:94:a2:26:b8:d1:07:ce:a1:53:2c:cb:a6:5d:
         7b:04:0a:fc:e9:98:4c:7d:74:71:7d:e1:80:08:6d:f7:01:0b:
         8b:ca:34:ab:28:df:5d:31:b8:c6:4b:8e:75:1f:f1:32:37:54:
         bb:5c:d8:76:7f:71:d8:1b:e5:2c:29:7c:6c:fa:aa:df:3d:1c:
         f4:3d:d4:f4:2a:c2:c0:2b:e9:c2:dd:d5:e1:d6:5a:ed:a6:27:
         13:78:5c:ca:0d:38:a8:0a:04:f9:04:12:d1:ad:8a:7e:df:4b:
         9f:4e:a7:9c:81:30:67:4c:77:b4:d5:47:4c:15:49:1c:27:0d:
         fa:98:19:95:5b:f8:50:2d:5d:12:ea:3b:6b:4c:2a:d8:7f:4b:
         f4:2e:3d:aa:30:1a:d8:cb:7a:40:d0:6b:23:94:45:a8:2f:20:
         50:61:1b:c0:9a:d5:49:b7:1e:50:2e:af:f0:f8:b1:02:98:5a:
         60:10:39:c8:fa:49:ec:98:7a:64:2c:87:e6:d5:c4:6b:d5:16:
         79:89:33:17:2a:81:a5:2e:b7:97:6c:83:12:9f:d1:e2:89:1a:
         a4:5c:ca:7d:51:78:b6:2e:96:39:73:57:58:fb:bc:3d:71:4d:
         84:3b:a5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----