Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/9575cb0c-57c1-35b1-a8da-722c57e992fb.roa
File:                     9575cb0c-57c1-35b1-a8da-722c57e992fb.roa (raw, json)
Hash identifier:          ArWd6sWKMZNJGAmUi+mjOPMH7az2HJNbZmDTVK16qBo=
Subject key identifier:   F9:DE:9D:DD:E4:0D:6A:6C:3E:22:44:8B:C2:B4:8E:04:D7:E0:0C:55
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328583D39784A1C48D586E3FDB00740
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/9575cb0c-57c1-35b1-a8da-722c57e992fb.roa
Signing time:             Sun 13 Mar 2022 05:00:00 +0000
ROA not before:           Sun 13 Mar 2022 05:00:00 +0000
ROA not after:            Mon 24 Feb 2025 05:00:00 +0000
asID:                     7018
IP address blocks:        141.140.16.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:39:78:4a:1c:48:d5:86:e3:fd:b0:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Mar 13 05:00:00 2022 GMT
            Not After : Feb 24 05:00:00 2025 GMT
        Subject: CN=bf58f97c-8ccb-49c1-8e45-ea1ababf4539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c2:d1:93:51:7f:bc:58:99:83:b2:1f:eb:10:
                    47:99:02:1b:ff:38:57:b8:4b:08:43:31:d6:27:09:
                    a4:9b:da:ff:c8:b2:24:50:55:ba:15:4a:37:a9:fb:
                    0b:16:1c:42:ea:38:62:d6:68:01:8a:f3:10:6c:3c:
                    66:11:5c:ba:12:01:f8:02:3b:6f:94:79:bd:da:36:
                    d7:ca:f1:ce:77:9f:8c:ee:f4:da:54:31:cc:84:ab:
                    1a:85:ec:31:05:e6:fe:57:00:be:21:63:2f:56:8a:
                    ef:4d:0a:f0:10:97:31:37:85:03:23:29:40:34:7e:
                    43:c7:9e:ef:2d:78:a1:eb:84:9c:06:c3:c9:07:6b:
                    23:72:5a:0c:93:a1:0f:3f:85:46:c3:f1:12:bb:3a:
                    15:b1:8f:78:92:3f:7a:bc:3c:aa:79:07:fe:dd:0f:
                    57:f9:b0:42:5c:52:d8:ce:64:0e:53:df:54:ae:c2:
                    e6:37:72:0e:80:1f:09:7e:79:14:42:82:b0:b5:e2:
                    2e:6e:8f:c5:fa:29:76:08:d4:a5:7c:b8:85:a0:84:
                    60:e2:6a:1f:f0:4f:b3:83:ec:c6:99:7a:a4:a6:69:
                    bb:01:58:df:b9:d2:92:f2:b3:74:ce:38:8a:ba:0b:
                    f5:9c:bf:6b:f2:11:74:f0:d8:13:25:90:ca:c5:49:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DE:9D:DD:E4:0D:6A:6C:3E:22:44:8B:C2:B4:8E:04:D7:E0:0C:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/9575cb0c-57c1-35b1-a8da-722c57e992fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b2:0c:be:58:b7:6c:e7:09:39:27:67:74:52:55:1a:ac:0d:
         a4:a9:07:cb:68:48:b9:16:0b:6b:12:9f:3d:60:3a:f8:2b:16:
         35:af:82:22:12:ba:07:27:94:e5:69:c6:3b:6b:62:47:02:18:
         4d:00:f8:a3:1d:02:78:d6:00:2a:17:6d:7b:88:08:8a:33:29:
         43:3d:36:01:54:9e:52:1a:2c:36:79:69:8c:c8:28:ea:81:ac:
         2a:0d:67:40:04:c8:ed:24:b2:51:f7:30:10:93:e6:21:27:f2:
         2e:6e:1b:d1:ae:28:22:54:55:fe:52:e0:d7:99:6f:d8:9e:74:
         f7:7b:d4:d2:40:a7:3a:d9:03:db:be:da:6b:eb:69:92:82:b7:
         e6:66:b2:1c:60:df:a0:ca:d9:af:1c:4c:3f:2e:2a:2a:64:da:
         52:b3:72:a5:8c:40:21:c0:44:b5:2d:7f:c0:6d:18:f7:f0:95:
         af:1b:50:8d:5f:3e:33:8c:4e:d4:f2:b6:45:78:45:4e:ae:4a:
         a3:a4:f9:bc:03:4e:b8:87:c2:f4:be:56:4e:1a:c2:2a:f8:b5:
         92:bc:f4:6e:82:a6:12:4b:63:09:06:3a:ae:c0:59:44:c9:f4:
         c1:c7:5b:fa:df:cc:07:60:8e:aa:0c:19:96:5a:fc:b3:1d:e8:
         60:ee:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----