Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/57593819-0354-362e-aa3a-32f015a49b9a.roa
File:                     57593819-0354-362e-aa3a-32f015a49b9a.roa (raw, json)
Hash identifier:          Y+ESmKdZ98+q7SwIb7KRQs87v5PBF9VacAzumRgwL/U=
Subject key identifier:   54:B5:20:8F:E5:1B:A5:81:6D:05:B2:DD:60:D5:C2:A7:2B:B4:08:D2
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F4328583A8533B25BC8206001815EAD68
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/57593819-0354-362e-aa3a-32f015a49b9a.roa
Signing time:             Thu 08 Jul 2021 04:00:00 +0000
ROA not before:           Thu 08 Jul 2021 04:00:00 +0000
ROA not after:            Mon 01 Jan 2024 05:00:00 +0000
asID:                     398646
IP address blocks:        45.41.214.0/24 maxlen: 24
                          45.41.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:85:33:b2:5b:c8:20:60:01:81:5e:ad:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Jul  8 04:00:00 2021 GMT
            Not After : Jan  1 05:00:00 2024 GMT
        Subject: CN=8cc3d546-fb52-4990-8ae1-c5e3c77cd444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:de:cc:e9:ab:34:a8:51:94:89:25:60:7e:2d:
                    3e:df:aa:ce:7f:6c:0f:80:fe:95:04:27:11:25:d7:
                    a2:0b:ea:c3:93:d2:ec:41:01:fe:71:a7:63:d1:33:
                    3a:d5:5f:79:34:42:2f:d8:05:18:aa:53:b3:e5:f9:
                    29:ee:ea:7e:d5:40:94:9e:3b:4b:91:fc:a8:12:c6:
                    e5:14:80:e5:55:e5:49:be:ea:40:06:9e:83:ee:d2:
                    c7:b8:73:5f:54:c2:2d:da:d8:91:73:be:8d:b3:a8:
                    17:6a:d5:f4:0d:86:82:e7:13:3e:ab:2c:f9:47:e4:
                    7f:16:a1:66:a5:25:19:db:ca:1d:d4:24:f8:30:35:
                    70:d7:ca:58:36:d0:a7:f3:64:1b:3b:78:93:c8:01:
                    d9:94:ec:66:80:4c:23:c0:18:73:8e:0e:33:cd:02:
                    fb:ea:0e:7b:12:c8:e7:1f:81:d1:75:00:18:48:a3:
                    7a:cd:c8:f7:97:6e:3e:de:34:40:64:af:85:7d:3f:
                    65:8b:28:ae:ca:19:93:2e:46:ea:11:aa:75:cb:a2:
                    38:fb:93:c6:91:72:0b:04:b1:9a:8b:6e:a3:a5:cc:
                    35:de:59:46:f8:e1:9d:ba:20:18:d1:06:ee:36:97:
                    bc:a8:b5:ac:81:a9:38:62:56:47:b4:f4:07:30:9e:
                    3c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B5:20:8F:E5:1B:A5:81:6D:05:B2:DD:60:D5:C2:A7:2B:B4:08:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/57593819-0354-362e-aa3a-32f015a49b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:16:a0:73:af:5a:88:f7:78:b0:d3:c9:8c:10:4d:34:44:
         9d:59:62:ad:90:55:b9:17:fd:7d:4f:03:ca:5f:7d:17:06:c8:
         61:ff:be:c6:88:c9:34:55:ef:67:89:59:97:a7:59:cc:c7:37:
         2a:1b:5f:b6:10:6f:8d:c2:1e:60:c7:be:29:e3:e0:c4:9b:9a:
         67:6c:44:8f:21:18:d9:c1:34:56:f2:8f:0e:6d:33:d6:0c:18:
         5a:cd:a1:20:5c:d9:c0:ca:1a:2f:c2:9f:b1:1b:7b:1b:ab:bb:
         3d:f3:fc:00:64:83:34:eb:47:06:70:75:b1:ed:33:b0:d4:3e:
         f0:c3:35:63:51:7d:0b:62:30:db:e9:72:fa:dc:8a:d6:fa:62:
         a5:45:69:18:d8:ad:a9:ef:09:66:1e:81:d3:e3:1d:9c:ae:e8:
         78:bd:08:65:7e:96:ef:38:b3:d5:d2:50:48:e9:3d:dc:d8:b6:
         9e:b0:7f:0f:3b:51:20:93:16:41:8c:61:b9:fa:bf:4a:cb:b1:
         c4:5e:ab:24:49:b0:66:6f:1a:ea:55:94:7c:14:0f:8e:ef:9c:
         cb:b8:8c:f0:3f:1f:ee:01:a8:03:9a:2c:bb:2b:e5:74:3d:c2:
         fe:5f:0b:f5:1a:fc:79:b7:4b:56:0a:5f:7e:40:e0:10:14:5f:
         93:e3:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----