Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/0a3974e8-4b23-30bf-9c83-24b19f899ba5.roa
File:                     0a3974e8-4b23-30bf-9c83-24b19f899ba5.roa (raw, json)
Hash identifier:          7wB5UfjIGheSlNHnqeQTT2wnKLNMRTmM+ZPvnpVxsCw=
Subject key identifier:   A2:AC:4F:9D:5E:B2:3E:BD:D7:18:D0:CA:7B:F1:C8:13:06:6E:49:5A
Certificate issuer:       /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Certificate serial:       010D0C9F43285842166B511F96E4BD566641E5FC
Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/0a3974e8-4b23-30bf-9c83-24b19f899ba5.roa
Signing time:             Fri 02 Jun 2023 16:09:17 +0000
ROA not before:           Fri 02 Jun 2023 16:09:17 +0000
ROA not after:            Thu 31 Aug 2023 16:09:17 +0000
asID:                     8075
IP address blocks:        137.70.154.0/23 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:16:6b:51:1f:96:e4:bd:56:66:41:e5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
        Validity
            Not Before: Jun  2 16:09:17 2023 GMT
            Not After : Aug 31 16:09:17 2023 GMT
        Subject: CN=ccb9b6dc-7f31-4e6d-9d93-6b91296accd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:64:83:59:04:ae:ad:1e:32:22:09:ed:08:
                    60:80:f7:e8:e3:ef:46:1a:aa:a2:c5:97:0e:02:65:
                    01:34:d4:fb:4f:47:4e:91:57:54:51:6f:f6:11:e6:
                    f5:9a:e3:33:59:2c:54:fe:31:45:af:eb:b2:c6:a2:
                    a3:c5:f5:19:e2:ce:f7:6d:10:4c:18:e5:ee:27:a5:
                    07:a3:68:c9:71:86:48:e1:0f:58:54:9e:c6:2a:7f:
                    1c:99:c6:c4:14:46:00:41:98:dc:e8:16:c4:62:59:
                    53:ce:75:79:0b:2a:ca:60:e4:e1:01:0d:41:db:2f:
                    f5:fd:ef:f4:ab:27:61:43:df:27:a9:eb:1d:36:2d:
                    23:b6:73:54:52:14:a7:bf:9e:b3:62:1a:07:bf:fe:
                    f2:71:cd:ba:70:3d:74:67:f2:15:68:36:39:0d:ad:
                    d3:03:ad:a0:a0:05:d0:9a:1a:37:2f:41:36:29:4c:
                    74:25:cc:1b:a7:25:1b:b7:63:d6:e3:b3:48:3c:af:
                    79:f0:0e:7b:6b:19:1e:96:ec:d4:60:b5:3a:b2:93:
                    1d:41:f5:92:b9:5b:2b:b1:a0:fc:d7:3e:4b:f6:68:
                    c7:62:87:d6:1a:e1:0d:71:86:ac:89:9a:71:13:b7:
                    54:d1:b8:54:9e:73:1c:df:db:37:5a:53:e7:a8:14:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AC:4F:9D:5E:B2:3E:BD:D7:18:D0:CA:7B:F1:C8:13:06:6E:49:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/0a3974e8-4b23-30bf-9c83-24b19f899ba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl

            X509v3 Authority Key Identifier:
                keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.70.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:70:de:0c:56:1a:ce:55:25:d2:1a:38:90:0e:26:37:89:5c:
         3c:f0:49:50:e0:bc:c3:2b:a0:94:7a:df:1e:1b:90:32:b7:65:
         df:eb:e3:1b:d1:29:49:12:cd:ce:38:e7:ca:2e:6a:e6:c3:bd:
         93:0a:62:de:ca:98:75:27:ae:9c:bc:c7:f0:50:02:48:ca:16:
         4b:84:71:20:75:42:74:4f:bc:76:c8:49:b5:a8:ff:65:d7:5c:
         33:24:8e:ad:7d:e4:ea:33:36:c3:77:84:ea:d7:b2:b8:96:27:
         ba:7a:1d:dd:78:f1:41:f5:52:d5:2b:28:3e:76:d5:f6:c2:58:
         07:24:6a:cf:3d:3c:b4:0c:7a:40:5e:18:57:57:89:55:d9:05:
         df:13:97:cd:78:ef:f3:53:5f:d8:5d:d4:e7:67:ac:21:e1:6b:
         e3:c8:64:cf:2e:f3:bf:f0:af:d8:3f:34:82:28:dc:25:14:76:
         cc:4e:f3:7b:c1:bb:64:0c:5d:cd:31:bc:9c:7d:d5:c5:fd:24:
         2e:14:ba:23:30:9b:43:80:cb:73:90:fd:5b:57:45:f4:46:38:
         53:7f:77:d2:71:92:2e:b4:b4:32:81:8f:56:ca:52:56:62:52:
         52:30:bd:37:8f:9d:93:a3:00:ec:6c:81:e9:13:b4:cc:6b:6f:
         7e:6c:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----