Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3132382e302f32322d3232203d3e203239383032.roa
File:                     3135372e3235342e3132382e302f32322d3232203d3e203239383032.roa (raw, json)
Hash identifier:          WgHlQhj7pz8QZa3QmhpSEaQ73fYJ26FNyM5cWolsIi4=
Subject key identifier:   05:3C:B5:DF:51:7F:9E:E5:73:19:3D:A8:E7:F8:1D:59:21:11:43:DC
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0CBCB9D84023E72246860ED43EA9855A02916131
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3132382e302f32322d3232203d3e203239383032.roa
Signing time:             Wed 31 May 2023 17:47:08 +0000
ROA not before:           Wed 31 May 2023 17:42:08 +0000
ROA not after:            Wed 29 May 2024 17:47:08 +0000
asID:                     29802
IP address blocks:        157.254.128.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:bc:b9:d8:40:23:e7:22:46:86:0e:d4:3e:a9:85:5a:02:91:61:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 31 17:42:08 2023 GMT
            Not After : May 29 17:47:08 2024 GMT
        Subject: CN=053CB5DF517F9EE573193DA8E7F81D59211143DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:88:76:d9:bd:af:e2:3e:ce:27:b7:d1:98:6d:
                    a4:78:0b:4f:79:d4:b4:10:cc:ef:78:6a:dc:c9:a9:
                    4b:8a:d3:96:9f:6a:c1:74:4e:17:ab:b2:88:73:a9:
                    ed:30:c0:38:41:91:f6:a9:dd:15:69:f1:a8:57:a2:
                    59:89:19:17:e1:95:6a:cd:f5:be:7a:a3:bf:43:2e:
                    1c:d3:da:14:4f:a4:4d:bc:a2:e2:f6:b7:b4:21:a1:
                    2c:9f:d0:08:3d:3e:ba:24:c1:cc:1e:cf:dc:9d:3b:
                    ac:8d:0f:2f:d0:32:3f:db:36:05:ed:a9:de:9b:9c:
                    4a:82:d4:64:18:41:74:97:78:7a:83:73:7f:36:5c:
                    32:e7:5b:c9:95:e5:39:63:a4:db:ef:f9:25:56:0e:
                    0e:ed:58:f4:cb:4c:21:d7:5e:e9:49:5e:0f:8f:26:
                    62:50:0a:39:99:53:15:10:b4:4d:5c:6e:15:8b:47:
                    f8:e0:25:75:86:29:e8:c4:29:14:61:df:1d:ed:c6:
                    9e:28:67:4e:a8:ea:30:ac:9f:0a:97:46:79:3a:0b:
                    62:dc:f3:95:7a:74:7d:29:60:03:0c:3b:31:2f:f0:
                    2e:29:06:56:5b:18:c6:37:7f:04:2d:bf:d2:ab:3e:
                    11:d3:0b:80:3f:38:f7:e8:38:21:f8:20:fe:6a:b8:
                    0f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3C:B5:DF:51:7F:9E:E5:73:19:3D:A8:E7:F8:1D:59:21:11:43:DC
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3132382e302f32322d3232203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:48:2f:be:72:88:5a:41:25:b9:aa:48:4d:8a:b3:16:ff:71:
         5f:b5:8b:25:a4:14:b5:6b:cd:0e:e8:26:81:30:fe:83:dc:55:
         ac:d0:e0:29:fc:71:62:c7:ac:13:f7:01:46:99:2d:c1:5c:9e:
         2f:29:b8:23:24:b9:0f:62:60:48:64:1e:e3:74:46:ae:af:da:
         72:41:5d:8d:c7:3e:03:36:ae:53:87:b0:b2:92:cc:1e:b9:74:
         8d:6e:1d:21:25:61:ac:cc:16:09:cb:6a:c8:12:c5:70:0b:76:
         80:9c:6a:d9:df:7e:15:97:e9:82:77:df:0d:62:cc:52:e7:c9:
         05:5a:a6:71:09:6a:e2:a4:d6:5b:42:49:51:75:75:2c:77:ac:
         bb:8a:41:69:53:45:56:21:6e:d3:ef:5a:12:48:ab:ad:d3:a0:
         e5:dd:99:9d:76:c3:2d:c4:81:3d:c1:3f:58:46:7d:aa:0b:e2:
         20:95:ae:0f:cf:e8:c0:84:9f:59:16:37:47:c5:b8:e6:29:b8:
         94:d5:45:71:21:e0:84:68:56:90:31:3b:16:5b:8b:be:96:9c:
         d3:6f:da:e0:69:35:d2:08:e0:bf:6c:50:7d:d1:ef:d1:4e:2f:
         35:3c:c6:4d:8f:b7:50:4e:a0:53:67:a0:f1:fe:65:6a:6d:f2:
         95:0b:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----