Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3132382e302f32322d3234203d3e20383334.roa
File:                     3135372e3235342e3132382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          kvQg925mugJ7oKIxdJsKLfZQB8fDeIZgTOPw3BBnibw=
Subject key identifier:   B4:A9:43:A6:0E:71:B2:A8:38:F9:66:5D:10:F9:64:AB:CE:4E:4A:3E
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1DD5D710F410652F755A2A6A392445CF12B4859B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3132382e302f32322d3234203d3e20383334.roa
Signing time:             Sun 02 Apr 2023 00:00:09 +0000
ROA not before:           Sat 01 Apr 2023 23:55:09 +0000
ROA not after:            Sun 31 Mar 2024 00:00:09 +0000
asID:                     834
IP address blocks:        157.254.128.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d5:d7:10:f4:10:65:2f:75:5a:2a:6a:39:24:45:cf:12:b4:85:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr  1 23:55:09 2023 GMT
            Not After : Mar 31 00:00:09 2024 GMT
        Subject: CN=B4A943A60E71B2A838F9665D10F964ABCE4E4A3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:d1:48:8f:c1:34:91:5c:be:46:1c:06:d0:
                    24:dc:55:91:db:c1:20:f2:65:a4:a8:1a:78:99:83:
                    83:cf:ae:7d:e5:8c:4d:57:b6:71:af:f5:d4:6c:9e:
                    e6:14:40:7e:38:96:3d:4e:31:24:7f:1b:f6:af:e5:
                    dc:9b:cd:e9:c9:18:23:75:17:51:94:dc:0d:4e:75:
                    b7:69:35:ea:16:8f:1c:32:48:e4:8a:d3:d1:8a:25:
                    73:04:0a:9c:9d:12:a7:e1:31:b2:9d:b7:7d:6d:a7:
                    89:a3:78:11:01:90:7f:10:2f:12:4f:72:a9:3d:89:
                    b9:b5:a2:b9:ce:36:d4:13:f9:05:bd:38:21:b3:2b:
                    99:ae:d4:34:8a:a6:59:0a:24:f1:f5:bf:4f:49:90:
                    80:b4:bb:05:10:b4:13:02:89:f8:67:38:53:0d:17:
                    12:02:4b:38:fd:0e:bf:84:8e:5e:07:a2:c5:98:6e:
                    96:e7:50:46:9e:d0:85:09:8b:2d:b4:78:ee:87:9d:
                    34:77:46:1f:a7:eb:d7:88:64:2d:97:92:0f:18:52:
                    3c:9e:74:2e:8c:bd:a3:86:29:5b:f2:f2:e2:86:e1:
                    6f:f8:a8:09:8b:53:8a:34:cc:0a:62:62:ba:6f:4a:
                    7f:02:de:4c:3a:fb:88:52:93:6e:53:2d:34:1e:8b:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A9:43:A6:0E:71:B2:A8:38:F9:66:5D:10:F9:64:AB:CE:4E:4A:3E
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3132382e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:3c:f8:21:a2:53:da:28:88:95:80:41:ae:4a:73:0a:b6:
         50:6b:14:d9:63:b2:ef:33:48:22:69:bc:79:3b:73:58:15:bc:
         6c:99:44:cf:a2:24:52:42:4f:0a:c0:2b:9b:79:b2:2a:bd:81:
         94:de:68:78:b6:ba:c1:d5:31:70:78:4d:a2:23:b3:ba:12:a7:
         90:a8:c3:b0:30:04:2f:68:ca:17:72:34:bc:1b:e3:8b:a2:31:
         11:1b:23:e3:1d:46:fa:3a:4d:63:c5:b1:1d:4d:50:34:5b:38:
         bd:36:91:48:fe:30:53:15:49:1c:93:0d:0c:a1:5a:09:28:42:
         df:4a:c8:7c:10:83:07:0a:2b:e6:d8:6e:f6:41:ea:3a:b8:42:
         bd:5b:cb:26:14:79:d4:86:1e:74:a8:f1:53:ae:61:0f:56:65:
         c7:a1:67:77:f2:79:55:a1:6d:44:a3:54:ce:fb:1f:42:3b:af:
         40:1f:fd:10:d7:a1:93:7f:03:80:59:67:d3:a7:4e:00:61:17:
         91:6d:1f:ab:91:cb:f1:15:7f:48:26:61:30:b3:9d:94:76:ff:
         d3:b1:cc:51:50:54:d0:8d:fd:bf:06:e6:00:73:a6:17:ac:0a:
         49:bd:4c:aa:dc:0e:32:f6:8f:94:10:38:e8:81:44:eb:f0:5d:
         cb:19:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----