Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c7eb874f-0edc-3875-bb5b-167d2ce646f2.roa
File:                     c7eb874f-0edc-3875-bb5b-167d2ce646f2.roa (raw, json)
Hash identifier:          oQaHg2hqfnXtUfa0qlr07jlt5S5Awb5tW1KXKUYmE4c=
Subject key identifier:   80:6C:AB:E3:DA:A7:E5:32:85:63:E8:E1:D8:32:E3:CB:94:29:9A:DC
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328583EC2AB5FF77A911A6508B043A0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c7eb874f-0edc-3875-bb5b-167d2ce646f2.roa
Signing time:             Sun 31 Jul 2022 12:00:00 +0000
ROA not before:           Sun 31 Jul 2022 12:00:00 +0000
ROA not after:            Mon 03 Nov 2025 05:00:00 +0000
asID:                     21743
IP address blocks:        141.140.4.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c2:ab:5f:f7:7a:91:1a:65:08:b0:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Jul 31 12:00:00 2022 GMT
            Not After : Nov  3 05:00:00 2025 GMT
        Subject: CN=5da30cb5-1491-452e-b782-1ba5fbc13594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:02:c1:89:22:1b:a8:42:10:c4:cd:2d:df:3f:
                    52:5e:12:d1:fd:dc:66:65:08:56:36:d2:71:ad:78:
                    ad:4a:90:f3:6e:7d:6c:38:06:9c:36:aa:fb:e8:a3:
                    ba:49:85:3b:cd:5d:28:cd:65:3a:5e:95:c7:63:11:
                    4c:45:5a:1b:53:8a:bb:6f:f8:8b:d9:5b:6b:48:4e:
                    02:dc:52:32:cf:5f:c1:63:33:ec:70:39:3b:a6:54:
                    81:cc:91:08:29:7c:b1:fa:c9:d7:04:e0:43:30:2f:
                    d7:09:6f:b2:82:5d:99:23:42:9d:53:dc:c8:f3:a8:
                    5a:c3:80:aa:55:8a:d7:9e:0b:33:de:1a:37:94:a0:
                    ab:b9:f5:d2:10:f8:91:1f:1b:0a:07:40:63:f4:2a:
                    b2:8f:ef:2e:76:f2:c5:23:80:27:52:fd:15:6b:ba:
                    55:97:eb:c4:d1:6e:70:69:35:8a:55:61:ca:dc:e6:
                    4f:41:ba:e6:9a:ef:5e:3c:fa:37:37:7b:7c:13:76:
                    66:4f:31:b0:d8:69:87:68:54:0d:81:e4:a1:51:04:
                    6c:f8:e2:4c:2e:07:14:30:ce:04:1b:e5:32:8c:10:
                    00:36:a5:e9:98:dc:6f:d5:3b:4c:05:70:f5:32:a9:
                    b8:01:ba:a8:40:7a:39:fb:32:3f:74:3c:2f:5f:56:
                    8e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6C:AB:E3:DA:A7:E5:32:85:63:E8:E1:D8:32:E3:CB:94:29:9A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c7eb874f-0edc-3875-bb5b-167d2ce646f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e7:52:22:b9:72:e0:e4:35:9a:fa:da:f8:04:bb:ad:8d:78:
         2d:2a:24:d4:c6:df:b6:f1:a1:6b:29:a3:e9:07:18:0f:51:ee:
         6c:a5:a5:39:29:29:21:07:a0:0c:fd:5f:5b:ee:cf:f5:e4:a9:
         09:f7:aa:49:35:a7:0f:f9:e4:70:29:d4:d5:fc:49:da:46:ee:
         78:b4:38:b7:b8:09:93:57:9c:13:42:06:50:ad:22:b3:57:ef:
         07:64:b0:8e:ca:d5:9b:88:22:4f:ec:99:4f:51:7f:c3:b0:42:
         a8:f7:f8:8e:d5:ca:7a:b0:4c:18:43:69:fe:5e:3b:83:55:fd:
         97:d3:83:8b:5e:4e:44:c6:41:36:68:b7:e5:66:c4:d1:69:7e:
         18:3b:d7:d5:4b:7b:ba:25:a9:9a:22:2e:93:27:c5:40:10:0b:
         ae:bf:a5:e5:25:dc:55:05:59:0f:47:e6:4b:bb:f2:34:b5:6c:
         96:8c:0c:9a:57:c4:7f:2e:5c:da:7e:07:74:74:ae:4e:42:06:
         44:7f:c7:4e:98:61:e8:fa:ee:3a:d0:d8:b1:c6:e2:36:c7:6f:
         42:dd:9c:3c:95:9a:c9:80:95:8e:50:f4:11:50:ae:36:27:88:
         02:82:f6:4f:37:88:e9:26:ca:ab:56:71:61:a8:ab:86:a3:cc:
         bf:45:dc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----