Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/a85408a1-76ae-3099-b54d-8d5c1a69364e.roa
File:                     a85408a1-76ae-3099-b54d-8d5c1a69364e.roa (raw, json)
Hash identifier:          RU871fk/lEUJIjoEAddITxDWC5JrpWtIyh0BEVKAZtQ=
Subject key identifier:   56:69:53:7E:E2:77:42:29:5A:CB:33:A7:CC:79:D3:F1:C9:E9:9E:CF
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328583E9AFA5D8DADA8D8AD2479DF80
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/a85408a1-76ae-3099-b54d-8d5c1a69364e.roa
Signing time:             Fri 08 Jul 2022 15:06:10 +0000
ROA not before:           Fri 08 Jul 2022 15:06:10 +0000
ROA not after:            Thu 10 Oct 2024 04:00:00 +0000
asID:                     147293
IP address blocks:        45.62.168.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9a:fa:5d:8d:ad:a8:d8:ad:24:79:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Jul  8 15:06:10 2022 GMT
            Not After : Oct 10 04:00:00 2024 GMT
        Subject: CN=c597ec6a-57f2-4e35-8483-c028ef15bde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:04:61:cb:8f:ff:67:1f:d8:c9:36:08:eb:
                    cd:29:4a:ae:c7:56:f9:3e:70:39:89:d4:18:37:3f:
                    94:0d:f2:f7:9b:23:6a:83:15:36:67:21:56:0e:c3:
                    ea:f5:7a:6f:b9:26:24:45:20:52:68:c7:1b:33:55:
                    c6:9e:88:dd:f2:1f:6a:43:be:60:6c:57:f0:c4:ba:
                    5d:86:83:56:09:a2:4a:12:bf:b6:6a:5d:d3:03:0c:
                    16:d2:bd:af:df:9b:38:de:be:6c:12:5a:3c:f3:90:
                    30:09:3a:63:39:16:34:b9:d9:52:57:b8:ea:e4:1e:
                    de:45:71:aa:54:f2:ab:b6:37:87:84:40:55:91:f0:
                    c1:0e:b1:b7:bc:ae:51:e4:c2:e6:63:a6:29:5f:6d:
                    dd:b0:3f:a0:9d:a9:b9:c4:98:b8:e7:36:ea:76:60:
                    b6:51:15:24:2a:5a:b7:29:77:80:fe:e9:c9:19:af:
                    ab:cb:8c:f6:70:3a:d2:93:25:36:7d:9b:af:43:29:
                    db:45:27:95:6f:d7:6a:49:54:81:12:0d:f9:10:c3:
                    b5:a8:43:15:53:3d:08:22:f4:49:2f:1d:5c:d4:b2:
                    ac:37:c6:d9:2c:90:74:b0:39:74:e6:da:54:ed:10:
                    84:ee:96:e0:c3:e2:99:d9:97:bc:7d:9b:26:23:f4:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:69:53:7E:E2:77:42:29:5A:CB:33:A7:CC:79:D3:F1:C9:E9:9E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/a85408a1-76ae-3099-b54d-8d5c1a69364e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d8:62:e3:9c:31:fa:04:0a:a9:b3:27:2d:7c:3e:f6:e4:0a:
         e5:15:40:d1:b5:a7:16:fb:13:0b:a9:c1:76:a8:6c:99:cb:20:
         d4:8a:0f:d6:5e:3d:57:4c:c1:23:65:97:cc:af:23:01:b2:d9:
         f8:01:26:5f:31:41:e1:af:46:aa:6e:1f:02:22:c6:5e:13:7b:
         b2:5b:be:46:38:a7:5f:dc:47:3c:05:9d:57:c2:ba:ef:f8:e7:
         88:eb:b6:dc:6d:2e:d6:27:cb:df:92:bc:78:4b:22:13:03:38:
         0c:92:b4:aa:67:00:42:b8:7c:b9:9f:33:f1:ae:b8:a4:a9:28:
         76:62:e7:d3:ab:32:40:6c:59:1d:8f:ba:7a:c9:52:35:48:08:
         8f:9a:b2:49:1e:95:9f:d1:e1:ec:79:9e:e3:76:38:d7:ec:07:
         05:35:91:1b:f6:71:dd:2a:87:d6:49:15:66:98:19:2d:d1:f0:
         53:34:04:c0:dd:87:40:b4:3f:78:91:94:c7:67:85:1d:3c:69:
         c0:69:49:ac:0e:06:47:7e:98:24:da:fc:a0:a7:45:c7:cf:89:
         59:57:3a:40:59:7b:c4:07:27:b1:cb:c9:fe:67:64:43:91:a1:
         ee:fb:50:11:94:d2:65:14:ba:91:c4:63:8b:91:6c:ae:c9:8f:
         b8:bf:1c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----