Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/137c43dd-a9ee-39e5-9714-1400e82155e9.roa
File:                     137c43dd-a9ee-39e5-9714-1400e82155e9.roa (raw, json)
Hash identifier:          gRONUlA0x0YmM5IWN4deafAeB+0XtYyJw2wyXNeauy4=
Subject key identifier:   D6:C9:A4:1D:89:39:51:D0:2F:E8:FD:12:39:C7:3D:82:39:43:AD:05
Certificate issuer:       /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Certificate serial:       010D0C9F4328584273BA88FA6EC4E0CF400D64C0
Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/137c43dd-a9ee-39e5-9714-1400e82155e9.roa
Signing time:             Thu 06 Jul 2023 02:19:04 +0000
ROA not before:           Thu 06 Jul 2023 02:19:04 +0000
ROA not after:            Wed 04 Oct 2023 02:19:04 +0000
asID:                     8075
IP address blocks:        137.70.152.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:73:ba:88:fa:6e:c4:e0:cf:40:0d:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
        Validity
            Not Before: Jul  6 02:19:04 2023 GMT
            Not After : Oct  4 02:19:04 2023 GMT
        Subject: CN=fb1c88b1-0c2a-4e82-8413-e92224ab0362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ba:f2:f5:bf:03:ae:86:6d:a1:59:0f:0b:df:
                    aa:dd:58:94:b9:b3:87:05:ce:bd:bf:03:fb:d2:94:
                    56:9b:21:53:9e:15:30:c9:b2:25:ef:ed:46:78:31:
                    76:a9:f8:eb:fa:92:d2:27:74:23:09:10:44:18:d9:
                    6a:da:83:e4:8e:c5:d5:34:76:b5:fa:4b:bb:a3:22:
                    9a:c4:a5:52:b9:13:d0:12:fc:7f:d6:27:60:56:da:
                    f0:dc:bb:fc:a6:b9:db:db:3e:d1:ad:7f:db:e7:9a:
                    3f:89:86:77:6d:a0:21:04:02:90:79:56:17:b2:e4:
                    1a:cb:0c:61:db:d9:a8:0e:54:f7:aa:af:11:76:d3:
                    42:65:19:55:a3:b4:36:49:e7:eb:3d:c9:e3:a6:77:
                    e2:2f:a0:e1:ef:34:27:77:20:bb:2e:c8:82:a0:33:
                    74:ce:60:b0:d7:3d:fa:0b:f7:cc:e4:06:a8:36:03:
                    bb:25:39:8c:1f:36:dd:e8:7a:ed:d3:e5:6d:59:3b:
                    48:f0:7c:5a:f0:5a:23:65:ba:bd:d5:6e:3b:bb:56:
                    ef:1f:50:1d:8e:9e:95:67:65:9d:51:64:cf:c2:ff:
                    1e:59:fc:9d:a1:a4:53:89:4c:81:07:38:7f:3d:e0:
                    7c:a6:c1:4a:4b:2e:f0:ff:52:01:75:d7:99:fd:04:
                    18:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C9:A4:1D:89:39:51:D0:2F:E8:FD:12:39:C7:3D:82:39:43:AD:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/137c43dd-a9ee-39e5-9714-1400e82155e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl

            X509v3 Authority Key Identifier:
                keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.70.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ad:84:14:1c:bd:fe:4e:bf:51:7e:c5:d5:f6:d1:51:98:a0:
         51:40:3e:12:bf:20:8a:ee:7a:f9:b9:29:7f:92:ad:2b:30:9d:
         7f:4a:d6:bd:8a:10:a3:7d:14:54:8b:20:22:a3:8a:d3:8a:ea:
         3c:01:ef:0f:2d:e4:35:3f:fd:3d:52:76:a4:63:79:45:06:0a:
         b2:b9:d0:d7:00:c1:19:e0:89:31:5c:b2:4c:57:8a:26:06:4c:
         a2:fb:7a:5f:2b:96:23:e2:f4:00:bd:f0:ad:24:5c:79:e8:45:
         d6:fe:98:82:86:0d:93:37:43:52:70:e1:f6:71:43:f6:f9:a3:
         1a:22:64:ff:a5:48:06:21:97:fd:1d:4a:5e:e2:9e:d6:59:be:
         c8:75:4c:67:ff:2f:78:64:3a:67:78:1e:8e:2c:cf:b7:67:67:
         25:cd:38:36:b9:41:dc:e5:40:0d:d1:61:94:ea:7e:aa:b3:f7:
         60:50:2c:60:b8:c6:05:14:69:10:e3:7a:20:db:25:25:6d:5c:
         5e:99:3b:9f:f6:05:20:05:f2:2d:2d:cd:c8:fc:9a:0f:e0:ec:
         2a:66:fa:c8:f8:4f:49:2b:81:df:c5:d8:40:f1:ed:c4:18:7e:
         72:e5:b0:98:17:ee:43:2e:90:79:5d:ea:15:10:39:cd:9c:46:
         bb:13:65:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJzuoj6bsTgz0ANZMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QzNWUzYmYtOTk0MC00YWJiLTljYzktMmY4YjhjZTY0
NGY0MB4XDTIzMDcwNjAyMTkwNFoXDTIzMTAwNDAyMTkwNFowLzEtMCsGA1UEAxMk
ZmIxYzg4YjEtMGMyYS00ZTgyLTg0MTMtZTkyMjI0YWIwMzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27ry9b8DroZtoVkPC9+q3ViUubOHBc69vwP7
0pRWmyFTnhUwybIl7+1GeDF2qfjr+pLSJ3QjCRBEGNlq2oPkjsXVNHa1+ku7oyKa
xKVSuRPQEvx/1idgVtrw3Lv8prnb2z7RrX/b55o/iYZ3baAhBAKQeVYXsuQaywxh
29moDlT3qq8RdtNCZRlVo7Q2SefrPcnjpnfiL6Dh7zQndyC7LsiCoDN0zmCw1z36
C/fM5AaoNgO7JTmMHzbd6Hrt0+VtWTtI8Hxa8FojZbq91W47u1bvH1Adjp6VZ2Wd
UWTPwv8eWfydoaRTiUyBBzh/PeB8psFKSy7w/1IBddeZ/QQYKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNbJpB2JOVHQL+j9EjnHPYI5Q60FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1
ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhiOGNlNjQ0ZjQvMTM3YzQzZGQtYTllZS0z
OWU1LTk3MTQtMTQwMGU4MjE1NWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzNWUzYmYtOTk0MC00YWJiLTlj
YzktMmY4YjhjZTY0NGY0LzNkMzVlM2JmLTk5NDAtNGFiYi05Y2M5LTJmOGI4Y2U2
NDRmNC5jcmwwHwYDVR0jBBgwFoAU8Sfva6IwqshfVMIEsxFsrb2vsvgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhi
OGNlNjQ0ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiUaYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSthBQcvf5Ov1F+xdX20VGYoFFAPhK/IIruevm5KX+SrSswnX9K1r2K
EKN9FFSLICKjitOK6jwB7w8t5DU//T1SdqRjeUUGCrK50NcAwRngiTFcskxXiiYG
TKL7el8rliPi9AC98K0kXHnoRdb+mIKGDZM3Q1Jw4fZxQ/b5oxoiZP+lSAYhl/0d
Sl7intZZvsh1TGf/L3hkOmd4Ho4sz7dnZyXNODa5QdzlQA3RYZTqfqqz92BQLGC4
xgUUaRDjeiDbJSVtXF6ZO5/2BSAF8i0tzcj8mg/g7Cpm+sj4T0krgd/F2EDx7cQY
fnLlsJgX7kMukHld6hUQOc2cRrsTZco=
-----END CERTIFICATE-----