Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/3905bb88-75b7-3f69-8c24-198269cb124b.roa
File:                     3905bb88-75b7-3f69-8c24-198269cb124b.roa (raw, json)
Hash identifier:          bsGG9m+1hSFk8tM+GgMJKZkeFpjPw1ikFJl9D95FewI=
Subject key identifier:   76:6A:08:EA:86:19:95:8F:C3:B1:A3:4E:7C:FF:08:53:86:14:32:F7
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F43285845F811A6EC8A9EE6B01EA0D040
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/3905bb88-75b7-3f69-8c24-198269cb124b.roa
Signing time:             Thu 23 May 2024 14:22:07 +0000
ROA not before:           Thu 23 May 2024 14:22:07 +0000
ROA not after:            Wed 21 Aug 2024 14:22:07 +0000
asID:                     834
IP address blocks:        45.62.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 27 May 2024 15:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f8:11:a6:ec:8a:9e:e6:b0:1e:a0:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: May 23 14:22:07 2024 GMT
            Not After : Aug 21 14:22:07 2024 GMT
        Subject: CN=ab71264e-4bfe-4674-adf2-af2c52989af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:47:84:cf:39:1a:d1:6b:fe:75:9a:29:37:41:
                    3c:1e:3b:68:6f:ee:e0:31:ed:15:d2:e7:d2:bf:3e:
                    dc:b6:77:40:19:3f:a2:31:05:00:93:7e:cc:bc:2f:
                    b4:17:d1:a7:38:e8:a2:c4:e0:0c:b7:63:6d:ef:7e:
                    fc:d9:40:18:a1:e4:39:94:7b:46:56:97:c6:06:13:
                    b2:cd:6d:c1:a3:0d:b9:49:39:c4:82:ae:c2:ee:0e:
                    28:f8:35:fc:08:bb:cc:ff:a6:1f:c7:45:76:14:a7:
                    d2:a8:0f:9c:9a:f5:c7:ab:24:41:c2:77:6e:c9:44:
                    39:76:c0:18:a4:cb:53:08:24:a7:93:37:d9:5c:6f:
                    bf:9d:3a:a3:ac:aa:32:e4:0e:2b:ca:7c:e9:31:4f:
                    2e:10:8f:ce:ea:d1:8f:95:ac:f4:ce:53:e1:31:51:
                    65:31:c8:0e:9f:fc:6d:bf:8b:c7:1c:43:5a:d6:90:
                    85:98:2a:63:86:bc:70:62:18:03:a6:fb:36:65:3d:
                    c5:fe:2b:0f:8f:14:ea:8a:c0:33:d5:6e:cc:40:aa:
                    20:66:84:b4:fe:ed:a6:d5:0b:eb:e0:af:de:0c:8d:
                    5f:0e:6c:ba:63:7b:4f:dd:9d:09:c0:8b:cd:da:ae:
                    c7:5a:00:61:81:57:17:fb:a2:69:03:aa:f7:c0:0d:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6A:08:EA:86:19:95:8F:C3:B1:A3:4E:7C:FF:08:53:86:14:32:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/3905bb88-75b7-3f69-8c24-198269cb124b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cf:f2:a1:7f:32:8f:97:75:a0:a0:9e:b4:69:e8:0c:8e:93:
         3d:df:71:ff:7b:bf:21:64:48:5c:73:ae:5e:fa:25:ac:b7:00:
         04:4c:46:b8:f2:15:bd:4d:b1:61:89:94:2b:4f:54:36:30:77:
         b2:b3:38:ea:b1:96:60:6e:ba:2a:b3:ed:f0:7a:59:2d:3c:d8:
         fc:e2:b8:41:83:5e:0c:3c:c9:20:ea:9b:73:76:d9:0d:9d:30:
         aa:2c:a4:ef:3e:fe:df:f4:16:06:0c:5a:34:54:9e:59:e2:ae:
         47:fe:fa:9b:59:9d:29:8a:92:3b:ed:3d:0f:79:67:bb:6d:93:
         62:62:d4:5c:2e:a9:14:fc:96:a1:48:28:88:98:73:38:17:bf:
         89:85:bf:e4:38:0d:b1:18:7f:61:db:bc:1e:ff:cf:9f:76:41:
         82:a5:81:14:14:d1:29:dc:21:28:88:e0:67:72:a1:a7:56:81:
         8d:23:45:bb:48:34:fd:a2:65:8c:1e:2c:4c:71:74:05:84:d0:
         d3:f1:a2:cb:00:0f:cc:d0:d9:e0:ce:8b:74:03:44:30:7c:e9:
         54:cc:bf:be:5a:59:cb:c3:52:01:2d:06:bf:6a:19:59:69:c7:
         4f:b6:bc:1a:18:a0:32:7c:81:73:c0:29:82:25:af:c3:0c:37:
         25:6b:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----