Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/38b24cc3-bacf-353a-8801-51f8670b848a.roa
File:                     38b24cc3-bacf-353a-8801-51f8670b848a.roa (raw, json)
Hash identifier:          POTYjK6+CTW0G4/r3eTKAae1XtApM/YEFHtINDcCgDA=
Subject key identifier:   F9:7F:DA:2F:1A:EB:1B:66:A8:7A:59:6A:EB:E7:97:1E:C1:0A:AF:C0
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328583DB289AE6AA54EBDCD89691B10
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/38b24cc3-bacf-353a-8801-51f8670b848a.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Mon 28 Apr 2025 04:00:00 +0000
asID:                     7018
IP address blocks:        141.140.16.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b2:89:ae:6a:a5:4e:bd:cd:89:69:1b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : Apr 28 04:00:00 2025 GMT
        Subject: CN=920f0d84-40e5-48ae-af79-388238024675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:0a:b2:fd:5c:00:bc:7f:fd:f1:a3:74:e8:
                    ca:77:7b:34:8e:cc:dc:46:f0:5d:88:8d:79:d6:60:
                    52:c5:65:ee:6f:a2:89:21:c2:7a:93:a9:1c:44:49:
                    ec:86:09:54:7e:34:cd:3b:2b:eb:73:34:5d:6c:8c:
                    f2:47:96:bb:11:93:f7:f4:26:6a:04:31:f2:82:fb:
                    ac:4c:79:8a:ba:e0:b1:33:3c:85:f8:49:96:ee:30:
                    69:8a:05:ae:7d:4a:ee:4d:48:de:df:f1:67:45:af:
                    5b:6d:b6:f8:45:02:b0:4d:21:c5:a8:49:5b:aa:22:
                    e9:41:7a:e1:70:ad:c7:49:0c:1d:45:7c:4a:7e:e2:
                    71:59:2b:1d:08:6d:2d:15:5c:da:84:0b:e4:85:a9:
                    9e:a8:03:45:81:89:42:72:da:6e:a7:c6:f5:bd:96:
                    5b:35:8c:c8:a9:81:e7:4c:ce:85:31:e4:18:23:ee:
                    29:33:bd:84:56:7a:ed:86:14:b9:07:0e:7a:64:34:
                    af:04:8b:92:d5:f6:88:7d:c6:f8:2b:73:a0:52:0a:
                    ff:b2:ff:96:88:3e:88:a5:98:92:47:49:fe:87:ec:
                    83:7c:d6:28:59:0f:4f:ef:a7:30:75:1e:d1:78:9f:
                    bb:ce:57:76:44:cf:1c:57:09:bb:c0:98:45:67:00:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7F:DA:2F:1A:EB:1B:66:A8:7A:59:6A:EB:E7:97:1E:C1:0A:AF:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/38b24cc3-bacf-353a-8801-51f8670b848a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:d4:29:6f:0b:ec:ef:c8:86:a8:b7:b7:49:cc:88:ef:aa:e3:
         ac:0b:7d:05:b2:c0:d7:ea:c4:a7:31:bf:36:b6:b9:6f:ec:42:
         e0:70:49:a6:73:a9:d4:52:6d:31:42:ab:c4:c2:92:a4:db:64:
         e1:ef:66:2a:58:30:30:ee:3a:5e:19:8d:6f:d1:10:f4:4c:58:
         f2:e5:9e:b9:0a:c7:6c:44:f6:cf:50:32:3b:41:84:f4:6e:9d:
         46:1b:8f:43:2e:2f:71:2c:44:a7:ff:11:2a:e0:0b:fb:2b:d7:
         d6:74:38:45:bc:b7:77:93:8e:0b:91:1f:a9:cd:4c:0d:6b:33:
         de:84:bc:ee:ab:49:5a:30:cb:4b:2f:5c:d5:91:f4:3d:1e:45:
         b9:b0:e3:44:16:48:c1:e8:49:8e:3e:60:5d:60:e6:29:42:f8:
         69:b1:ea:c9:54:ed:d2:8f:ce:df:ec:e0:eb:a3:3a:5f:22:18:
         96:6f:db:89:90:b5:2f:81:5c:d4:07:0f:9f:c8:7f:70:0c:3c:
         40:cd:17:2a:91:32:bb:44:56:f1:d0:06:e9:0d:24:e2:ea:37:
         1f:ee:be:be:69:d3:6c:db:5d:ae:34:7f:da:07:ce:09:00:ea:
         dd:f3:49:97:f8:56:29:52:61:6d:1d:07:35:db:39:3e:23:c3:
         52:25:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----