Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/9e51cf40-4bbf-3070-91e8-0b6222a44df5.roa
File:                     9e51cf40-4bbf-3070-91e8-0b6222a44df5.roa (raw, json)
Hash identifier:          A9SoZk/OBP3vFbJ//zS8TOOt1FbaW54L/5ws5vsdRC4=
Subject key identifier:   42:EA:F9:83:EA:0C:D5:AE:2C:70:27:79:A8:02:40:F7:30:61:6F:30
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F4328583A85322DEC8FCBA28559448640
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/9e51cf40-4bbf-3070-91e8-0b6222a44df5.roa
Signing time:             Thu 08 Jul 2021 04:00:00 +0000
ROA not before:           Thu 08 Jul 2021 04:00:00 +0000
ROA not after:            Mon 01 Jan 2024 05:00:00 +0000
asID:                     398646
IP address blocks:        45.41.212.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:85:32:2d:ec:8f:cb:a2:85:59:44:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Jul  8 04:00:00 2021 GMT
            Not After : Jan  1 05:00:00 2024 GMT
        Subject: CN=2a61edf6-8ecc-4c2f-b1ce-1ed3a0e9612b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:37:3f:83:b0:06:e7:22:4a:6c:e1:be:c0:c0:
                    03:1c:3e:e2:a1:18:79:d8:47:38:6c:e7:0d:d6:88:
                    b6:42:6b:82:b6:c5:b1:5d:9b:0a:80:d1:fb:1b:73:
                    97:21:e0:60:43:e4:6d:99:e1:f7:69:90:48:eb:2b:
                    32:b2:16:e2:df:53:81:25:0d:ea:b4:3c:6b:27:c7:
                    df:fb:c3:2d:91:80:6d:57:7c:5d:9f:cc:56:15:77:
                    b9:bf:7d:dc:a7:1b:c0:c6:82:49:a0:b0:21:5f:80:
                    d4:20:fd:24:c1:be:cd:24:73:fe:ad:ef:42:39:71:
                    c9:9b:43:fd:75:68:11:0e:99:21:86:e0:fd:56:6b:
                    02:59:f6:79:65:56:bf:07:ec:d0:32:fe:72:d9:2f:
                    4e:2b:69:c4:ca:ad:2d:6f:8c:bf:8f:8b:f6:07:94:
                    d1:51:24:34:e0:c5:34:1d:7c:78:31:44:90:ff:db:
                    36:eb:c1:67:c7:88:a1:9e:4a:d1:6c:2a:4d:2d:e8:
                    c6:df:4d:dd:78:d3:c4:63:0a:97:4d:4d:06:b4:a1:
                    53:9f:4d:8a:85:e9:d9:c2:ff:41:b8:0b:e0:4a:60:
                    b7:04:d9:c5:e0:ce:85:14:db:58:8e:42:af:0a:6e:
                    48:8a:99:aa:98:0f:65:5d:2a:6e:7f:7c:73:29:e1:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EA:F9:83:EA:0C:D5:AE:2C:70:27:79:A8:02:40:F7:30:61:6F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/9e51cf40-4bbf-3070-91e8-0b6222a44df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:9e:a8:d8:5f:6b:a8:9a:6d:22:82:f4:1b:1b:23:79:82:85:
         a1:19:f7:0b:0c:c8:be:5a:5c:9e:88:ee:43:2a:11:58:78:c2:
         59:9e:50:0c:d4:db:f5:29:34:a2:cc:b4:5d:13:3d:87:26:bc:
         76:8e:f4:30:2f:79:49:38:66:c0:d9:1d:02:48:9e:79:72:e5:
         74:49:93:32:44:68:b7:b8:41:39:41:96:7e:81:ad:b0:c5:1b:
         2b:4e:60:84:c6:d2:f9:53:13:84:d8:b1:ca:d0:a0:ea:ec:01:
         66:94:8e:fd:69:34:2d:19:6c:bf:aa:e8:b2:4f:72:33:26:17:
         20:8b:c9:8e:76:10:58:e3:83:ab:6e:00:44:81:62:e0:2a:d4:
         fb:49:09:83:7e:1a:ad:1a:41:b7:68:72:2c:ba:e5:ae:70:64:
         af:28:7e:c6:68:38:66:3a:42:fd:c0:1e:e9:f1:7e:71:33:94:
         4c:e3:27:5c:b1:c9:f9:3b:c8:d4:06:ef:e7:09:36:17:e6:d8:
         e4:02:00:b7:11:9a:fa:76:2b:aa:44:84:69:fc:af:a9:ce:f1:
         d9:86:ee:4e:62:50:a8:5b:fb:5b:ba:47:aa:6c:64:e0:8c:58:
         04:8c:f4:3e:b4:a5:c4:bc:d5:f7:f5:7d:e5:f2:f2:36:0d:a6:
         0d:18:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----