Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/edc65bb3-a784-3103-bd96-027330918863.roa
File:                     edc65bb3-a784-3103-bd96-027330918863.roa (raw, json)
Hash identifier:          qBtdErFq/Ps4vCp22T8f4j7pnhLOlEcXbUng8gukXRY=
Subject key identifier:   40:DF:E6:5F:E5:C7:C4:D3:CB:B8:A4:E4:83:E5:5B:FA:50:D0:60:AC
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328583D73FBE60E1A6E94F529094E20
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/edc65bb3-a784-3103-bd96-027330918863.roa
Signing time:             Fri 15 Oct 2021 04:00:00 +0000
ROA not before:           Fri 15 Oct 2021 04:00:00 +0000
ROA not after:            Sat 06 Jul 2030 04:00:00 +0000
asID:                     11325
IP address blocks:        45.59.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 12 Mar 2023 15:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:73:fb:e6:0e:1a:6e:94:f5:29:09:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Oct 15 04:00:00 2021 GMT
            Not After : Jul  6 04:00:00 2030 GMT
        Subject: CN=228e3163-df47-4f94-a470-12896ee963bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fb:47:09:bb:5f:fa:cb:b8:82:65:a4:43:90:
                    50:81:72:97:06:8e:5b:16:54:bf:ee:ab:7a:2e:c3:
                    da:82:42:1f:f9:36:9d:15:4a:68:70:7b:c1:bb:d2:
                    e3:5e:e8:dd:4e:e6:ad:55:de:6c:d6:b3:fb:e4:a2:
                    52:2e:a3:b8:22:c2:d1:41:c2:28:81:97:8c:c8:b3:
                    a2:0f:76:4e:62:75:8b:2c:0e:ea:f1:a9:5a:58:99:
                    90:34:f2:89:6b:15:92:7b:3a:ab:e0:c1:75:ce:a8:
                    b8:b4:ea:8c:95:cc:71:cf:03:6d:47:19:74:39:7f:
                    63:09:d3:8f:6e:63:64:8a:f3:10:7b:d6:4e:4c:2e:
                    58:79:f0:fc:71:0c:b1:94:b6:55:7b:1d:f7:a0:c3:
                    7b:0d:37:81:a0:72:06:63:33:3c:29:ef:ba:26:3e:
                    75:f3:43:87:cb:70:78:93:19:df:9c:62:12:f1:99:
                    ca:09:bd:f1:aa:22:55:62:59:3f:75:b1:ac:16:3b:
                    26:1d:bc:d6:74:79:fd:34:5a:2d:99:ba:b2:77:e6:
                    76:e4:4a:6e:ec:a2:21:24:98:e2:ca:e1:36:9b:12:
                    19:a5:7f:1e:fc:84:10:62:f8:07:2b:0c:ca:83:e9:
                    82:87:91:2a:0a:ad:6e:ef:92:72:e6:b0:81:60:1b:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DF:E6:5F:E5:C7:C4:D3:CB:B8:A4:E4:83:E5:5B:FA:50:D0:60:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/edc65bb3-a784-3103-bd96-027330918863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:62:7a:59:aa:07:41:c8:bf:72:6d:91:64:98:ca:37:f5:04:
         81:f5:75:aa:b8:51:3f:72:2b:ec:89:41:cf:35:2d:a5:69:fd:
         8d:2d:18:2e:49:4c:0e:38:53:ad:85:fc:7a:39:5f:4c:6c:e0:
         e4:b5:25:4e:53:17:43:aa:9b:80:9d:a1:d8:fb:69:67:e5:6c:
         1a:4d:00:4e:64:e7:e5:da:58:da:ca:17:98:00:24:bc:f8:50:
         ae:3d:4b:be:7d:fb:df:5c:e1:2b:ac:a1:97:c1:09:48:25:ae:
         f0:18:cc:39:89:2b:c1:e7:b8:2c:58:88:e5:ae:0d:35:83:7d:
         7c:c6:e7:69:9c:78:f2:04:5a:3b:0a:bc:61:7c:c9:dd:c3:c7:
         cd:e6:2e:6e:e8:0f:7f:5c:2a:98:6d:06:3d:fc:1f:7e:1c:ca:
         d1:5f:4f:53:e9:e3:8f:f7:89:58:f5:a6:e7:6b:0c:0c:c3:e6:
         94:dd:3a:58:c8:35:a0:22:21:fe:2b:40:e1:2c:24:07:59:5f:
         c7:61:aa:2a:48:1c:42:c4:93:df:8f:e3:b5:9c:02:64:c4:84:
         5a:dc:a2:54:73:88:ea:c1:d3:2a:72:22:3b:55:e7:24:c3:09:
         25:74:00:71:e4:42:06:e4:8b:50:af:7b:37:f2:89:4b:11:ea:
         b1:63:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----