Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a3ffbac8-7f5e-35d9-b726-274480f083ec.roa
File:                     a3ffbac8-7f5e-35d9-b726-274480f083ec.roa (raw, json)
Hash identifier:          sXCSQIp2/KHsYyTeFI0hYAEebl+WVpaQ9XTOAx+sVmA=
Subject key identifier:   30:82:91:2B:47:37:D7:0E:6D:80:C6:55:A4:7E:F7:4C:97:28:22:9D
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584049D7C5AF80D00E0F7B4F5D60
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a3ffbac8-7f5e-35d9-b726-274480f083ec.roa
Signing time:             Tue 23 Aug 2022 19:00:08 +0000
ROA not before:           Tue 23 Aug 2022 19:00:08 +0000
ROA not after:            Sun 23 Mar 2025 04:00:00 +0000
asID:                     61317
IP address blocks:        64.224.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:49:d7:c5:af:80:d0:0e:0f:7b:4f:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Aug 23 19:00:08 2022 GMT
            Not After : Mar 23 04:00:00 2025 GMT
        Subject: CN=ccf210a1-833e-46fb-827c-a0a385e04e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:53:65:ac:d1:7d:85:67:20:9f:43:3a:11:38:
                    63:90:e7:1e:4b:ba:5e:25:72:8c:f7:e5:9e:df:28:
                    0d:e9:e2:fe:4b:c7:a6:d5:b2:c5:bc:3c:f0:78:4c:
                    0a:2b:3d:77:68:07:e3:93:d6:e2:3d:de:c8:1a:23:
                    ac:0a:c2:9f:50:9e:2f:5f:83:cd:12:13:e1:c1:d7:
                    21:7d:1b:ce:66:f8:7b:64:98:bc:44:38:6d:62:68:
                    88:47:ae:1f:28:9c:9f:2e:59:28:05:66:b8:19:e5:
                    3e:4e:ef:26:6f:ff:ec:76:9b:52:75:87:4c:b8:b8:
                    ea:ae:a4:c1:19:a3:ba:74:b4:eb:6b:23:38:62:33:
                    86:5a:f9:28:ab:a8:6a:2c:57:5f:f3:57:4f:dd:3a:
                    74:17:ac:5f:55:f0:0b:bf:1d:9d:0e:3e:15:dc:a1:
                    98:1c:9d:5a:5b:84:3a:e7:0e:b6:58:3e:d4:a4:05:
                    44:97:1a:c8:a5:c3:bc:c6:65:cd:93:90:fc:8c:fc:
                    f6:bf:57:5a:12:97:fc:cf:1e:52:72:46:2b:32:86:
                    cd:ee:e2:d3:33:b1:8c:7f:13:fe:9a:7f:73:eb:fa:
                    7a:73:81:9a:2d:11:e5:4d:1f:d1:96:9d:19:27:bf:
                    26:e2:4b:74:5d:e8:6b:27:99:80:2b:0c:34:1d:ed:
                    ac:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:82:91:2B:47:37:D7:0E:6D:80:C6:55:A4:7E:F7:4C:97:28:22:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a3ffbac8-7f5e-35d9-b726-274480f083ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.224.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:29:23:d0:c9:97:45:cb:4d:a5:e4:49:a9:6c:86:be:6f:24:
         83:43:53:22:e0:06:d3:37:e0:3f:ca:7e:cd:b5:68:a8:6c:8f:
         e7:7e:11:f2:8a:98:34:a8:3c:ef:21:ab:eb:d5:44:b5:ad:cf:
         53:77:fb:88:17:64:22:55:23:3b:84:d1:d4:05:98:72:12:0b:
         19:b6:01:ac:2d:ee:96:8c:06:26:61:71:f5:ce:e7:a9:c4:d2:
         a6:7b:c8:ec:fa:9f:48:20:42:60:d4:c3:a9:40:bf:30:cb:11:
         0d:7c:6f:bf:af:a6:f1:e8:4d:49:56:72:69:ee:0c:7c:53:8e:
         27:e0:1c:11:09:0a:62:d4:57:c7:b5:ab:22:6f:de:ab:4f:1b:
         cb:41:7c:8a:e3:04:01:06:9b:a5:ea:36:95:f4:47:7f:bd:d4:
         ba:61:31:27:6a:02:e3:a9:1d:94:20:9e:19:ae:aa:17:d6:a2:
         6c:44:20:79:cb:ba:70:58:47:08:37:f9:cf:9a:63:a9:69:e3:
         7c:17:96:09:2e:64:d7:a8:df:fc:72:44:7e:49:ae:d5:d7:32:
         6a:9a:25:86:78:48:dc:df:c4:07:1c:92:6b:0f:b0:73:9c:ee:
         23:f3:07:cf:05:19:2a:ef:e1:dd:75:7b:b2:78:11:79:a3:55:
         df:06:ff:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----