Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/2ac8cddf-82ba-37a5-96d0-f08cc15534e1.roa
File:                     2ac8cddf-82ba-37a5-96d0-f08cc15534e1.roa (raw, json)
Hash identifier:          VsBKUf+Wbi+iTIpmhTN1ETF/fYBZ68WnD7TOAVQBcWk=
Subject key identifier:   E5:90:99:EF:38:3E:58:DC:AE:91:9E:15:57:6E:0B:12:41:51:89:0D
Certificate issuer:       /CN=93652d41-9632-44fb-89a2-b986954b6570
Certificate serial:       010D0C9F4328584247CCDFA93BA89A2C43C5FB80
Authority key identifier: 89:10:A5:9E:8E:2D:D6:8E:E7:2E:9D:F5:FB:F6:D1:34:2B:B8:DA:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/2ac8cddf-82ba-37a5-96d0-f08cc15534e1.roa
Signing time:             Tue 20 Jun 2023 08:40:27 +0000
ROA not before:           Tue 20 Jun 2023 08:40:27 +0000
ROA not after:            Mon 18 Sep 2023 08:40:27 +0000
asID:                     397563
IP address blocks:        45.45.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:47:cc:df:a9:3b:a8:9a:2c:43:c5:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93652d41-9632-44fb-89a2-b986954b6570
        Validity
            Not Before: Jun 20 08:40:27 2023 GMT
            Not After : Sep 18 08:40:27 2023 GMT
        Subject: CN=fe853b03-7a42-4288-9eef-bd8bedfd16f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:84:9a:86:11:3e:52:50:b5:32:e2:fc:be:
                    59:e9:bf:c0:c0:53:90:90:d3:93:24:7b:75:8c:63:
                    e9:6f:72:31:ac:27:69:02:2e:91:4a:7d:96:96:7b:
                    33:7c:74:ed:2f:1c:c0:6e:07:ba:1f:d7:58:d0:a1:
                    46:f6:eb:b2:1f:84:a9:8a:3d:c0:9a:eb:27:8c:25:
                    12:df:62:da:fb:1a:b9:76:5c:74:d7:81:de:79:60:
                    0e:e4:e6:b1:8b:49:23:99:cc:eb:c5:e6:2a:8b:e2:
                    99:7d:c3:03:40:2a:6c:76:ee:a1:db:9a:3f:95:b0:
                    d7:da:d8:49:7b:9f:2d:61:9d:9c:ae:16:6d:97:ec:
                    fd:02:9d:8f:76:88:91:44:4e:3a:8e:f9:77:76:be:
                    9d:f9:01:9e:6b:62:a2:d8:a9:06:18:ee:a6:1d:49:
                    28:18:1b:a8:5b:70:21:3e:9d:c9:1c:37:d6:c1:65:
                    64:cf:80:da:f3:dd:a9:9c:22:7e:e0:c4:22:f0:f6:
                    d1:fc:9d:36:bf:33:cf:ae:0d:c9:11:29:70:cc:60:
                    27:53:39:72:3f:55:a6:84:27:e9:8d:4c:a0:35:61:
                    4a:d4:3d:16:d3:74:a3:a1:03:39:48:8c:ee:82:38:
                    a1:7d:ed:ec:2a:fc:49:0a:e2:3d:10:ea:9d:3b:ce:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:90:99:EF:38:3E:58:DC:AE:91:9E:15:57:6E:0B:12:41:51:89:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/2ac8cddf-82ba-37a5-96d0-f08cc15534e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/93652d41-9632-44fb-89a2-b986954b6570.crl

            X509v3 Authority Key Identifier:
                keyid:89:10:A5:9E:8E:2D:D6:8E:E7:2E:9D:F5:FB:F6:D1:34:2B:B8:DA:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0e:45:c7:f9:6f:5e:a9:e8:78:86:d3:f1:2c:cc:fb:0a:8d:
         b0:b4:4a:b4:51:25:9b:e0:df:47:f6:12:db:da:fc:10:96:db:
         d1:da:ff:c4:50:b1:2e:8e:c4:25:33:85:c9:81:bb:dd:34:17:
         57:2a:1b:df:87:80:77:d4:f1:f6:64:64:dc:f5:b8:f4:ff:7c:
         c1:73:e9:23:04:6c:4b:89:93:d6:d2:5f:74:f9:e3:27:4a:2b:
         a6:7b:c9:91:84:3a:64:9a:ab:be:0c:7d:fa:9b:a7:82:41:23:
         3e:6d:aa:33:c9:c0:69:b3:69:be:bc:4d:16:3b:09:dc:3c:f8:
         6d:e1:07:46:0d:84:15:24:2c:bd:41:ea:ee:d0:9b:84:b6:d2:
         31:23:e8:da:e0:a9:25:c6:fb:ea:25:88:cf:e6:41:aa:3a:9b:
         d4:16:d4:7f:60:63:65:81:b2:cf:58:57:af:ae:7d:12:23:02:
         9c:b4:b1:3a:b1:88:7d:aa:ae:80:fb:7f:ac:d5:fb:f2:9a:0d:
         77:48:7e:0e:b7:18:5c:52:f9:0d:82:f0:ea:84:db:45:4c:f5:
         e4:d1:3f:3b:60:11:fa:69:8a:20:58:d4:af:37:6f:dc:a7:f3:
         c6:14:53:cb:97:71:87:cd:d0:68:4e:f4:d2:84:66:bc:36:7c:
         a9:58:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----