Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e302e302f32332d3234203d3e203130373533.roa
File:                     3135372e3235342e302e302f32332d3234203d3e203130373533.roa (raw, json)
Hash identifier:          twAXyIygmadoCcMuETcmP8wtcZIyLLJ7uXGSRd9ar68=
Subject key identifier:   33:A1:E1:4B:9C:61:BE:F2:A1:02:11:8C:EE:5D:CB:83:FD:F9:36:AC
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       10FEF4E7A5761FD703F8D83F7F92FF095514A3B4
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e302e302f32332d3234203d3e203130373533.roa
Signing time:             Sat 26 Aug 2023 14:27:02 +0000
ROA not before:           Sat 26 Aug 2023 14:22:02 +0000
ROA not after:            Sat 24 Aug 2024 14:27:02 +0000
asID:                     10753
IP address blocks:        157.254.0.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Aug 2023 07:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fe:f4:e7:a5:76:1f:d7:03:f8:d8:3f:7f:92:ff:09:55:14:a3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 26 14:22:02 2023 GMT
            Not After : Aug 24 14:27:02 2024 GMT
        Subject: CN=33A1E14B9C61BEF2A102118CEE5DCB83FDF936AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:0e:13:bd:a3:23:88:7b:11:2f:ed:16:bf:
                    80:7a:ab:47:40:94:17:ae:b3:d7:99:dc:b3:40:20:
                    96:5b:af:65:75:29:ab:17:54:e6:5f:85:a1:f4:8b:
                    16:99:6f:95:b3:c1:5b:ee:9d:c2:dd:a8:e3:58:12:
                    68:09:33:8a:cc:85:c8:4c:d3:af:09:e1:39:3d:d9:
                    98:e0:78:9a:87:88:c0:58:0a:f4:88:d2:4d:e4:68:
                    68:4c:d4:9b:1d:e3:4f:a2:34:32:97:18:d8:c9:1d:
                    0b:34:59:cc:3c:03:d6:2c:0e:b2:fb:80:c4:0e:94:
                    77:29:75:89:ce:27:b8:12:40:a3:71:4c:3e:eb:0e:
                    8a:96:7f:d4:c4:28:d2:e0:ed:95:76:a4:32:01:72:
                    1f:b2:b8:5a:23:16:b4:d0:38:b1:4f:90:66:fa:e3:
                    97:78:2f:a2:fe:41:18:41:0c:d0:98:de:64:e3:1a:
                    e6:f6:11:c7:3e:78:f7:3f:5f:7e:c5:d4:77:97:f1:
                    fd:82:d2:48:c8:7e:a9:cd:53:fc:bb:56:4a:bf:e8:
                    72:9e:17:e5:7f:04:41:19:9c:88:51:16:05:03:38:
                    10:12:eb:07:0b:e4:93:19:e0:36:fd:49:01:cf:f6:
                    46:84:49:8b:42:b7:db:94:4e:fd:e8:cd:9d:22:65:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A1:E1:4B:9C:61:BE:F2:A1:02:11:8C:EE:5D:CB:83:FD:F9:36:AC
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e302e302f32332d3234203d3e203130373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:16:7e:45:9e:d6:d8:ec:4b:d7:55:f0:72:72:1a:89:b1:4b:
         a0:c8:a6:17:d5:68:b8:38:1b:34:a2:5b:7f:98:73:fc:74:68:
         99:c7:b0:2c:f4:e9:60:40:a1:07:08:be:48:92:9b:9a:52:aa:
         38:74:82:91:be:9a:0e:fb:fc:4a:31:72:77:11:14:79:10:4a:
         01:fc:c3:6c:1c:e8:1b:e0:72:36:7c:e0:a4:a4:cf:a3:65:12:
         ff:9b:36:55:dc:81:93:01:d5:db:61:fb:bc:79:b8:d9:83:32:
         2e:15:5c:f3:4b:ee:39:88:aa:76:52:35:aa:aa:b0:63:e2:a7:
         f7:58:e1:02:2b:0b:bc:72:19:2e:3c:87:d8:59:1f:0a:ec:f5:
         18:95:c3:67:b1:d7:6a:92:4e:d8:5d:6a:e1:11:2e:02:f2:c6:
         53:59:f1:86:33:e6:08:ba:b2:98:84:4b:99:86:de:33:6f:17:
         e4:bb:79:f1:1c:91:6d:a9:4a:8a:77:3a:c5:30:6b:12:4f:00:
         f9:42:be:06:e3:de:bc:c5:67:33:f1:8e:aa:ac:46:7f:b3:8e:
         3a:cc:21:ef:d0:ba:65:78:96:3a:ca:af:e7:90:e4:73:10:e6:
         2d:0e:5f:d1:dc:1a:e8:37:f1:29:0a:3b:05:44:cc:37:a6:7f:
         41:d9:99:90
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUEP7056V2H9cD+Ng/f5L/CVUUo7QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwODI2MTQyMjAyWhcNMjQwODI0MTQyNzAy
WjAzMTEwLwYDVQQDEygzM0ExRTE0QjlDNjFCRUYyQTEwMjExOENFRTVEQ0I4M0ZE
RjkzNkFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA4OE72jI4h7
ES/tFr+AeqtHQJQXrrPXmdyzQCCWW69ldSmrF1TmX4Wh9IsWmW+Vs8Fb7p3C3ajj
WBJoCTOKzIXITNOvCeE5PdmY4Hiah4jAWAr0iNJN5GhoTNSbHeNPojQylxjYyR0L
NFnMPAPWLA6y+4DEDpR3KXWJzie4EkCjcUw+6w6Kln/UxCjS4O2VdqQyAXIfsrha
Ixa00DixT5Bm+uOXeC+i/kEYQQzQmN5k4xrm9hHHPnj3P19+xdR3l/H9gtJIyH6p
zVP8u1ZKv+hynhflfwRBGZyIURYFAzgQEusHC+STGeA2/UkBz/ZGhEmLQrfblE79
6M2dImV36wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDOh4UucYb7yoQIRjO5dy4P9
+TasMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMDJlMzAyZjMyMzMyZDMyMzQy
MDNkM2UyMDMxMzAzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGd/gAwDQYJKoZIhvcNAQELBQAD
ggEBAAcWfkWe1tjsS9dV8HJyGomxS6DIphfVaLg4GzSiW3+Yc/x0aJnHsCz06WBA
oQcIvkiSm5pSqjh0gpG+mg77/EoxcncRFHkQSgH8w2wc6BvgcjZ84KSkz6NlEv+b
NlXcgZMB1dth+7x5uNmDMi4VXPNL7jmIqnZSNaqqsGPip/dY4QIrC7xyGS48h9hZ
Hwrs9RiVw2ex12qSTthdauERLgLyxlNZ8YYz5gi6spiES5mG3jNvF+S7efEckW2p
Sop3OsUwaxJPAPlCvgbj3rzFZzPxjqqsRn+zjjrMIe/QumV4ljrKr+eQ5HMQ5i0O
X9HcGug38SkKOwVEzDemf0HZmZA=
-----END CERTIFICATE-----