Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS137564.roa
File:                     AS137564.roa (raw, json)
Hash identifier:          MyIxx+mYvHSt09HL2NHpNGpxstR6pcwIqdfMp1I1r+Q=
Subject key identifier:   8E:57:19:1D:88:79:AE:8A:EA:AC:71:08:18:68:BA:6A:00:C3:2B:57
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       698C19C21CAF947631B22EB202D7312FDB617B4D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS137564.roa
Signing time:             Fri 15 Mar 2024 06:41:32 +0000
ROA not before:           Fri 15 Mar 2024 06:36:32 +0000
ROA not after:            Fri 14 Mar 2025 06:41:32 +0000
asID:                     137564
IP address blocks:        157.254.128.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 10:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8c:19:c2:1c:af:94:76:31:b2:2e:b2:02:d7:31:2f:db:61:7b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 15 06:36:32 2024 GMT
            Not After : Mar 14 06:41:32 2025 GMT
        Subject: CN=8E57191D8879AE8AEAAC71081868BA6A00C32B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:2d:24:c6:70:8e:52:b8:d5:5e:5f:bc:99:
                    6a:9c:d1:31:66:ce:87:be:58:ce:b0:ae:a3:9c:8c:
                    c8:11:43:83:c0:a8:ea:cb:12:5e:58:0b:9c:e1:ec:
                    60:48:d3:db:25:81:a6:92:dc:c0:ed:af:c6:63:02:
                    1a:b2:65:b4:a3:4c:48:9e:40:18:23:71:c1:4e:d3:
                    37:c0:41:09:15:46:e7:71:6b:98:44:8a:2a:bf:f7:
                    6d:95:86:34:a2:aa:7b:11:0b:d0:dc:c5:66:6a:8d:
                    a4:80:9a:9d:19:76:6f:58:c4:23:df:f5:e0:85:6d:
                    12:54:f0:ae:00:04:f1:94:24:b9:7f:14:ee:c8:29:
                    93:e6:ff:a2:bb:4b:52:35:f0:4d:cc:d6:c7:f0:2d:
                    ca:9a:d5:47:1a:6d:d8:4a:9d:8c:95:5b:89:e2:5e:
                    62:dd:72:0b:d6:ba:29:47:eb:3b:f7:6b:21:1c:73:
                    11:52:6f:e5:f1:aa:18:99:fc:ff:2d:b9:c7:b2:f9:
                    d6:3a:9b:b4:27:5d:18:68:a5:ca:e6:0b:4a:63:42:
                    52:55:9b:31:32:a8:9b:67:ea:50:2a:fe:b3:a4:f9:
                    50:6c:44:f8:9b:ef:cd:ee:52:99:47:c4:36:41:07:
                    f9:ef:56:b3:18:f5:64:77:ac:8e:83:7f:2a:66:bb:
                    f3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:57:19:1D:88:79:AE:8A:EA:AC:71:08:18:68:BA:6A:00:C3:2B:57
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS137564.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:a9:67:fb:6a:0b:8f:de:4b:2a:d9:b5:30:4f:66:39:33:ec:
         f5:ec:ed:98:35:13:61:6d:7e:96:72:2d:d1:2a:44:b1:23:0f:
         b7:ef:33:b6:6f:ef:b1:2a:95:91:4c:8f:df:05:e7:f6:99:16:
         2a:5c:6f:a1:9b:83:30:cf:e1:7b:3a:fb:96:6c:64:c3:f0:76:
         65:99:10:59:32:70:51:0d:28:a4:f6:b5:62:e5:98:7f:7c:00:
         19:8d:f4:16:02:e2:e0:e7:6f:1f:27:0b:4d:a2:fe:9b:3e:53:
         24:93:ae:bc:3e:64:a9:4c:0d:e2:6d:e6:93:8c:ce:8b:e1:63:
         9e:11:1e:1a:30:55:ca:16:8a:84:af:03:8d:51:2f:7c:a3:15:
         5f:c7:ba:20:1c:23:7b:44:72:31:46:cc:11:17:6d:d1:e6:98:
         42:02:7a:bc:38:d8:c2:d9:b3:47:34:fb:d8:98:99:31:63:a3:
         1d:ac:f3:de:39:27:96:17:40:bd:c2:00:f1:5a:b5:76:41:5a:
         28:b5:df:15:32:63:f8:73:13:a6:75:84:d5:3e:93:6f:73:e0:
         b5:99:01:f1:c7:82:1a:ac:47:8f:44:30:bf:9b:e6:24:cb:38:
         63:06:f8:6c:ad:7c:77:75:07:35:fc:c3:34:bb:a6:13:f3:bb:
         27:9d:36:61
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUaYwZwhyvlHYxsi6yAtcxL9the00wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwMzE1MDYzNjMyWhcNMjUwMzE0MDY0MTMy
WjAzMTEwLwYDVQQDEyg4RTU3MTkxRDg4NzlBRThBRUFBQzcxMDgxODY4QkE2QTAw
QzMyQjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUctJMZwjlK4
1V5fvJlqnNExZs6HvljOsK6jnIzIEUODwKjqyxJeWAuc4exgSNPbJYGmktzA7a/G
YwIasmW0o0xInkAYI3HBTtM3wEEJFUbncWuYRIoqv/dtlYY0oqp7EQvQ3MVmao2k
gJqdGXZvWMQj3/XghW0SVPCuAATxlCS5fxTuyCmT5v+iu0tSNfBNzNbH8C3KmtVH
Gm3YSp2MlVuJ4l5i3XIL1ropR+s792shHHMRUm/l8aoYmfz/LbnHsvnWOpu0J10Y
aKXK5gtKY0JSVZsxMqibZ+pQKv6zpPlQbET4m+/N7lKZR8Q2QQf571azGPVkd6yO
g38qZrvzDwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFI5XGR2Iea6K6qxxCBhoumoA
wytXMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzEzNzU2NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAp3+gDANBgkqhkiG9w0BAQsFAAOC
AQEAbaln+2oLj95LKtm1ME9mOTPs9eztmDUTYW1+lnIt0SpEsSMPt+8ztm/vsSqV
kUyP3wXn9pkWKlxvoZuDMM/hezr7lmxkw/B2ZZkQWTJwUQ0opPa1YuWYf3wAGY30
FgLi4OdvHycLTaL+mz5TJJOuvD5kqUwN4m3mk4zOi+FjnhEeGjBVyhaKhK8DjVEv
fKMVX8e6IBwje0RyMUbMERdt0eaYQgJ6vDjYwtmzRzT72JiZMWOjHazz3jknlhdA
vcIA8Vq1dkFaKLXfFTJj+HMTpnWE1T6Tb3PgtZkB8ceCGqxHj0Qwv5vmJMs4Ywb4
bK18d3UHNfzDNLumE/O7J502YQ==
-----END CERTIFICATE-----