Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c0f5add0-52e8-3a33-9930-4c7a1a519b6c.roa
File:                     c0f5add0-52e8-3a33-9930-4c7a1a519b6c.roa (raw, json)
Hash identifier:          cWaonYfJk6ZuWxdHFgvhIkH8n++T4tZWA95Gjnupowk=
Subject key identifier:   AD:45:8D:5C:EB:33:D9:76:1B:15:AC:C5:DD:D3:E5:9F:B7:BF:61:3E
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F432858410CFF10F348073FD75A040BF0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c0f5add0-52e8-3a33-9930-4c7a1a519b6c.roa
Signing time:             Tue 23 Aug 2022 19:00:08 +0000
ROA not before:           Tue 23 Aug 2022 19:00:08 +0000
ROA not after:            Sun 01 Jun 2025 04:00:00 +0000
asID:                     0
IP address blocks:        141.140.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:0c:ff:10:f3:48:07:3f:d7:5a:04:0b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Aug 23 19:00:08 2022 GMT
            Not After : Jun  1 04:00:00 2025 GMT
        Subject: CN=808e61f6-6c69-4ac0-ba6e-87e747ab27d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:0c:a4:41:0c:5a:8b:8c:26:42:f7:06:14:
                    a3:22:00:1b:22:9d:af:01:d7:6d:9d:0d:20:1b:00:
                    48:e8:19:f4:70:f6:54:cc:de:39:ea:2c:fe:ab:8a:
                    ab:e8:37:de:25:ab:83:79:7b:98:87:53:84:69:9d:
                    f1:3a:e9:a6:97:94:01:61:fe:93:b2:6e:91:d6:e0:
                    52:c5:ee:65:c9:55:01:a8:fa:ad:22:52:37:f2:10:
                    75:4e:44:c2:25:f7:8d:5f:51:e0:f6:63:df:b7:34:
                    bf:0c:67:11:96:91:47:d7:87:b8:d4:5b:b6:08:57:
                    96:c9:39:7f:45:bd:5c:fc:40:a5:2a:4b:4a:ef:3d:
                    15:53:ba:c9:6e:01:f1:73:ec:f2:94:69:bb:5c:53:
                    e0:84:59:8f:66:13:7d:60:ac:bd:fb:ff:da:72:84:
                    5b:16:f1:a0:e8:26:3b:d9:cd:61:3c:01:19:9e:8d:
                    bf:c2:2c:d4:d4:ff:f5:a2:a6:72:25:94:aa:b3:71:
                    c1:bc:2f:44:76:74:e5:34:43:f7:20:43:7a:0e:4d:
                    6c:94:89:f5:c2:a7:2a:f3:aa:0b:d7:a7:60:fd:9d:
                    5f:da:a8:dc:20:82:bf:06:d1:2d:40:e0:2c:c1:e4:
                    58:ab:80:47:1b:60:3b:26:ad:02:e4:51:5c:94:3e:
                    73:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:45:8D:5C:EB:33:D9:76:1B:15:AC:C5:DD:D3:E5:9F:B7:BF:61:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c0f5add0-52e8-3a33-9930-4c7a1a519b6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:4b:0a:65:d7:87:6e:91:ad:d8:4e:6e:e7:cd:3e:5c:4a:
         d8:a6:37:2b:98:69:4c:16:8a:43:9f:76:db:8f:cb:3a:60:35:
         58:6a:a4:c8:53:af:96:6c:ee:49:bb:7a:92:57:3d:a0:3d:1b:
         8c:d2:5d:eb:93:83:61:18:2c:c2:e4:94:b5:77:03:7b:f6:23:
         fd:81:fa:2a:f5:d1:63:f3:39:ce:3b:4d:70:33:37:cf:4e:04:
         b8:33:f7:f8:98:36:15:ab:2c:43:37:88:f3:c4:0c:83:71:f4:
         11:82:81:34:47:43:ec:30:9a:97:35:2c:42:d2:bb:3f:ee:57:
         81:f5:b6:16:0a:67:37:44:11:9e:30:b5:81:02:dc:53:35:c0:
         aa:8b:bc:76:7b:67:d3:50:2e:48:ef:76:f9:fd:4e:cf:bb:c9:
         48:15:03:97:77:bb:04:f0:25:fe:f0:46:43:ee:13:b8:d1:d9:
         7f:dd:80:7b:fe:b5:52:99:93:92:b6:52:d5:b3:56:ff:0d:6b:
         0b:47:53:16:2e:7d:66:5e:74:6d:28:a0:1a:2a:f0:1b:5b:58:
         f0:dc:78:66:22:f4:c2:1a:71:77:00:63:4a:de:9e:7b:d2:63:
         15:5c:11:89:6b:d0:3f:8f:f7:98:b4:55:28:39:8b:f7:83:0a:
         82:82:0a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----