Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/c250d45a-df9f-3b8d-9adf-2e3d57b2424e.roa
File:                     c250d45a-df9f-3b8d-9adf-2e3d57b2424e.roa (raw, json)
Hash identifier:          Bi5jOnUqLrJ+KuLZia2W6LvFzss5Lb3rYSnE8q5aA1U=
Subject key identifier:   11:E1:54:4F:23:46:9C:24:C8:34:B5:35:F3:CD:14:FE:4A:22:E5:A7
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F4328583D40124C6FC8CED7793807B000
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/c250d45a-df9f-3b8d-9adf-2e3d57b2424e.roa
Signing time:             Wed 21 Jul 2021 04:00:00 +0000
ROA not before:           Wed 21 Jul 2021 04:00:00 +0000
ROA not after:            Mon 17 Jun 2024 04:00:00 +0000
asID:                     7018
IP address blocks:        45.89.48.0/22 maxlen: 24
                          45.88.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:40:12:4c:6f:c8:ce:d7:79:38:07:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: Jul 21 04:00:00 2021 GMT
            Not After : Jun 17 04:00:00 2024 GMT
        Subject: CN=6ce3a0ac-c590-4f9a-9e1c-2b0e2129f770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:b0:58:1b:c9:ce:b5:a3:c5:5f:d5:80:34:
                    fa:26:c8:60:14:a6:cc:d5:53:2f:7e:b2:a1:70:25:
                    3c:b5:89:a2:bd:bb:7d:c0:29:f3:5b:46:75:55:45:
                    65:d8:4f:e2:ba:68:a3:e2:14:b8:99:aa:37:c7:32:
                    42:03:87:c7:e7:f0:57:8a:eb:74:ed:a2:c6:8f:8a:
                    bc:42:71:38:f8:ea:75:70:68:01:0e:e6:01:28:19:
                    a7:61:ec:49:fb:77:fa:4f:6b:61:48:fe:49:bf:fb:
                    89:d3:59:47:ee:28:27:44:d7:29:52:ed:2b:a8:69:
                    26:41:bc:f0:a5:f3:e3:1f:53:8f:f8:49:bf:92:27:
                    ee:d2:b4:4e:ae:59:09:22:2a:7f:c6:f2:a5:4d:cb:
                    11:fa:cd:09:d2:cc:05:29:ad:08:e1:f1:d6:c8:c5:
                    3c:68:cb:f3:51:02:89:29:02:ef:46:73:d1:09:0e:
                    3e:b8:9c:5a:e2:b8:2e:70:0b:54:b6:ad:9d:58:d7:
                    3a:25:8f:dc:9d:ce:9a:5a:c7:e6:da:12:af:f7:a0:
                    d6:d3:88:6b:61:e2:76:11:3d:5d:b0:86:ed:0c:2b:
                    c8:7f:4c:06:1c:c8:8f:24:0f:a8:3b:1b:bc:35:e3:
                    6d:3f:d8:57:2e:9b:4e:94:fc:9a:69:92:98:24:0c:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E1:54:4F:23:46:9C:24:C8:34:B5:35:F3:CD:14:FE:4A:22:E5:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/c250d45a-df9f-3b8d-9adf-2e3d57b2424e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.216.0/22
                  45.89.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ee:de:d7:5a:84:72:19:49:af:10:85:c1:19:df:76:b6:cf:
         b2:54:4d:64:ba:f9:f3:76:3a:2d:54:c6:82:88:27:29:71:0e:
         f2:47:5c:76:5f:9b:be:7c:5d:6c:26:07:42:33:e3:36:6c:f5:
         63:61:57:7a:2e:18:8b:76:0c:73:60:f0:51:c2:df:c6:14:e8:
         79:8e:31:83:4e:9a:0d:66:3f:ae:ea:1a:5b:89:34:1a:89:b5:
         d4:3f:f0:d8:a7:67:1d:60:de:19:6a:bd:bf:0a:c6:04:d6:10:
         ac:ef:fa:67:e8:66:b7:78:1d:8b:05:33:e7:d5:d7:b5:58:ad:
         70:9a:fb:8d:a6:9e:5e:b0:d3:81:f0:26:04:f2:43:7d:5d:33:
         44:3b:ef:59:3f:c3:b6:28:57:53:9d:06:78:d5:9f:a1:8e:fa:
         f2:f6:63:b4:9f:28:c5:ee:c3:fe:ce:c4:22:e4:d5:8b:c6:f1:
         96:2e:dd:5b:03:48:19:a0:f3:23:1c:88:dc:3d:ee:c5:3b:61:
         d4:c7:27:ec:d9:80:de:be:68:b3:a8:f6:47:3c:1b:da:5f:f8:
         f1:a7:08:c0:46:dd:05:2c:f1:fa:67:e2:8e:86:dd:2b:b4:3b:
         ed:7e:91:fb:fb:46:d8:ff:aa:7c:86:7e:e9:c3:ce:3c:a2:0f:
         1f:af:d5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----