Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/67eb973a-0628-3ac9-bb9c-74ead40fc61b.roa
File:                     67eb973a-0628-3ac9-bb9c-74ead40fc61b.roa (raw, json)
Hash identifier:          B54Z1pAukxXoRLAyo6zdjBAhz7+ZE6kXR3jFLLeGvXk=
Subject key identifier:   DA:3E:93:39:48:C4:05:49:78:32:F1:63:95:0C:75:C4:6D:CC:03:9C
Certificate issuer:       /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Certificate serial:       010D0C9F43285841EA1BB66B71465EE16DEA30C0
Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/67eb973a-0628-3ac9-bb9c-74ead40fc61b.roa
Signing time:             Wed 17 May 2023 19:13:19 +0000
ROA not before:           Wed 17 May 2023 19:13:19 +0000
ROA not after:            Tue 15 Aug 2023 19:13:19 +0000
asID:                     40382
IP address blocks:        137.70.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ea:1b:b6:6b:71:46:5e:e1:6d:ea:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
        Validity
            Not Before: May 17 19:13:19 2023 GMT
            Not After : Aug 15 19:13:19 2023 GMT
        Subject: CN=8519c405-75a5-458b-862d-77874f181010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:ff:94:41:62:35:87:ae:0c:c8:93:b2:2e:
                    cf:4c:7b:78:cb:1e:15:81:38:3f:6a:77:e5:99:06:
                    16:0f:af:bf:51:07:26:8b:c1:5b:89:69:2d:48:8a:
                    6d:3e:2a:13:b7:c8:82:d4:70:e2:84:e1:b5:43:df:
                    55:d7:93:83:85:20:de:49:fd:38:73:54:65:73:ca:
                    f9:5d:b2:ac:3d:32:09:ac:78:6f:82:a5:4c:46:33:
                    1f:35:0a:7c:eb:e6:53:ef:66:0d:7f:84:e0:c0:da:
                    57:e5:94:70:9f:c1:bb:a2:48:f6:d2:2a:56:a7:4c:
                    55:9d:b2:ec:c7:33:e7:c9:fc:34:8e:f1:07:30:38:
                    33:ae:2f:cb:b8:7c:04:e0:43:92:9c:0e:9e:29:15:
                    8f:16:29:c8:63:e3:10:27:b6:f8:00:fc:41:e5:88:
                    bd:e5:9e:09:6e:e9:98:e5:a5:8a:7a:7b:8d:7f:2e:
                    09:05:5f:34:f8:fd:8e:4f:4b:64:2e:6a:4b:79:67:
                    97:eb:a6:28:47:cf:a5:cc:94:08:ca:82:c8:db:96:
                    04:bc:a1:56:07:ab:f9:61:0d:8b:a1:a3:af:fd:ba:
                    63:32:67:47:ca:4c:38:48:44:55:e8:79:97:91:6f:
                    b5:43:df:44:94:81:9b:8b:21:70:39:b7:67:ae:78:
                    c6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3E:93:39:48:C4:05:49:78:32:F1:63:95:0C:75:C4:6D:CC:03:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/67eb973a-0628-3ac9-bb9c-74ead40fc61b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl

            X509v3 Authority Key Identifier:
                keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:49:d6:c3:a2:93:ac:dd:9a:5e:ed:91:31:6b:ca:8d:b3:e0:
         a7:69:a1:ca:66:46:25:45:e8:33:fa:b2:b0:c1:b1:bb:c5:a1:
         dd:45:cc:6b:ef:a2:40:d3:93:1f:37:38:7e:f9:67:4b:8f:d3:
         f2:3a:aa:48:35:ae:d8:93:fb:7f:0f:0d:c5:a6:68:1c:fa:ca:
         b8:9f:56:71:98:b2:7b:88:5d:81:a1:67:77:40:c2:45:ba:6e:
         0b:42:d9:65:52:82:b6:23:6a:ef:7f:15:4c:21:b7:93:fb:6f:
         02:3f:77:e0:c0:35:5f:73:33:3a:f8:ab:0c:fb:65:06:8c:ea:
         21:3a:14:74:da:00:06:87:af:46:86:23:b8:44:7c:b1:d6:38:
         3c:8a:0e:9a:7c:f0:28:ca:99:4d:5e:d1:81:c6:1e:05:fa:bd:
         9d:7c:38:36:e6:90:13:f5:f4:e4:21:db:06:8c:a9:fd:c0:bc:
         01:ad:20:52:0a:24:c4:2c:80:22:dc:a6:96:5b:5e:84:21:b9:
         54:f2:6e:99:91:90:8b:06:0e:3e:e2:49:c0:f6:99:d2:c9:73:
         fa:12:4e:5a:65:88:b8:fe:6c:ef:41:2d:af:37:58:23:7d:b1:
         96:0b:29:f0:74:0d:13:8b:c6:d2:91:a6:7c:1d:5f:ce:32:3e:
         fd:05:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----