Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135322e302f32342d3234203d3e2037303138.roa
File:                     3135372e3235342e3135322e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          CXsxBCAJUrAy2UQ3eqF+uEn7YISmOp2k6NFrY2mtEwY=
Subject key identifier:   62:EF:1B:9E:95:A6:46:D5:C8:7C:F0:D5:47:F8:F7:B0:2E:B3:D7:F1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0599113656D77B276EC85370BC4DA3049045F7C3
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135322e302f32342d3234203d3e2037303138.roa
Signing time:             Fri 30 Dec 2022 19:54:16 +0000
ROA not before:           Fri 30 Dec 2022 19:49:16 +0000
ROA not after:            Fri 29 Dec 2023 19:54:16 +0000
asID:                     7018
IP address blocks:        157.254.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:99:11:36:56:d7:7b:27:6e:c8:53:70:bc:4d:a3:04:90:45:f7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:16 2022 GMT
            Not After : Dec 29 19:54:16 2023 GMT
        Subject: CN=62EF1B9E95A646D5C87CF0D547F8F7B02EB3D7F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:42:3e:4a:00:4e:9e:c6:d4:0a:03:bb:b9:
                    f3:5f:b3:ad:53:6a:a3:c0:05:42:a9:5f:22:d8:b5:
                    8f:52:f8:52:1e:2b:66:69:78:8a:0e:45:41:17:84:
                    41:ac:55:b7:b6:68:b4:32:62:25:17:fb:c5:11:8b:
                    84:58:62:15:28:cd:64:b6:1d:e4:a0:67:51:23:86:
                    4e:2a:a3:e1:e9:ef:19:68:3e:6c:10:3c:b8:a2:00:
                    5e:90:1e:55:a9:ce:72:33:ce:1c:a1:f1:3e:f6:3b:
                    74:cb:65:36:28:84:6c:34:71:ce:d2:68:b5:68:d3:
                    31:d9:36:ba:7a:f1:8b:95:c6:82:d9:12:c6:ec:72:
                    7f:e9:56:29:b2:fc:db:4b:c4:7d:38:a3:98:4e:eb:
                    24:8d:3f:95:ed:4b:a9:e3:7d:26:8b:28:bf:b4:4d:
                    09:53:1f:15:6d:15:28:1c:b4:d2:c6:78:76:e1:eb:
                    1d:ed:4b:29:9c:4f:d2:d7:84:14:19:37:34:e6:e7:
                    a5:d5:5d:a0:c4:ef:7c:b5:d8:16:a8:de:b6:6d:a0:
                    33:f3:7e:c1:d6:0a:eb:9b:f5:4d:f4:d4:08:92:4c:
                    3e:74:20:98:18:a9:c6:3c:12:55:e8:ef:a0:4d:e4:
                    c1:d4:bb:3e:2b:83:64:13:5f:48:d5:f9:8f:e8:ba:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EF:1B:9E:95:A6:46:D5:C8:7C:F0:D5:47:F8:F7:B0:2E:B3:D7:F1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135322e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:f5:8e:a5:d1:c3:0e:47:49:fa:f6:40:d0:d8:8e:25:f2:3d:
         f5:f7:af:5f:fb:4d:01:12:e4:df:32:37:38:bb:08:59:c9:c6:
         d6:29:c6:b8:a3:d8:c9:2a:54:82:fb:5d:55:fe:98:96:84:5b:
         80:2b:9c:f2:92:65:07:c3:68:80:eb:f7:24:22:18:f4:fa:87:
         f5:83:10:ac:93:8e:5b:02:f8:20:2b:68:36:78:3a:bd:92:71:
         3e:86:96:4b:93:11:06:12:66:bc:f3:cd:f8:c6:8d:2d:83:37:
         dd:77:d4:08:69:e9:d0:22:8d:97:0c:a7:12:11:0b:d0:a2:35:
         16:05:b1:e9:ad:98:97:81:de:78:ab:64:02:e7:89:22:91:11:
         92:1b:9a:8b:3a:9c:1f:4e:5d:57:54:e8:ed:d7:c6:9d:9b:cb:
         1e:aa:ad:ab:ce:96:ab:ef:a7:5a:0d:46:e5:b1:e6:d1:ae:61:
         17:69:c6:3c:8f:cc:56:00:48:6c:85:6d:8c:49:2a:97:1c:aa:
         b6:e4:d2:3c:ca:2a:1e:4c:46:14:a7:67:f6:04:90:0f:8d:36:
         72:a3:d2:03:75:23:af:7c:87:0b:8b:5a:3a:6f:02:15:ec:3b:
         e1:6d:34:e9:78:2d:3b:cf:49:27:d9:6b:33:cd:65:63:32:c4:
         f4:13:4d:54
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUBZkRNlbXeyduyFNwvE2jBJBF98MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjIxMjMwMTk0OTE2WhcNMjMxMjI5MTk1NDE2
WjAzMTEwLwYDVQQDEyg2MkVGMUI5RTk1QTY0NkQ1Qzg3Q0YwRDU0N0Y4RjdCMDJF
QjNEN0YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I1CPkoATp7G
1AoDu7nzX7OtU2qjwAVCqV8i2LWPUvhSHitmaXiKDkVBF4RBrFW3tmi0MmIlF/vF
EYuEWGIVKM1kth3koGdRI4ZOKqPh6e8ZaD5sEDy4ogBekB5Vqc5yM84cofE+9jt0
y2U2KIRsNHHO0mi1aNMx2Ta6evGLlcaC2RLG7HJ/6VYpsvzbS8R9OKOYTuskjT+V
7Uup430miyi/tE0JUx8VbRUoHLTSxnh24esd7UspnE/S14QUGTc05uel1V2gxO98
tdgWqN62baAz837B1grrm/VN9NQIkkw+dCCYGKnGPBJV6O+gTeTB1Ls+K4NkE19I
1fmP6LrxbwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFGLvG56VpkbVyHzw1Uf497Au
s9fxMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMTM1MzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+mDANBgkqhkiG9w0BAQsF
AAOCAQEAvPWOpdHDDkdJ+vZA0NiOJfI99fevX/tNARLk3zI3OLsIWcnG1inGuKPY
ySpUgvtdVf6YloRbgCuc8pJlB8NogOv3JCIY9PqH9YMQrJOOWwL4ICtoNng6vZJx
PoaWS5MRBhJmvPPN+MaNLYM33XfUCGnp0CKNlwynEhEL0KI1FgWx6a2Yl4HeeKtk
AueJIpERkhuaizqcH05dV1To7dfGnZvLHqqtq86Wq++nWg1G5bHm0a5hF2nGPI/M
VgBIbIVtjEkqlxyqtuTSPMoqHkxGFKdn9gSQD402cqPSA3Ujr3yHC4taOm8CFew7
4W006XgtO89JJ9lrM81lYzLE9BNNVA==
-----END CERTIFICATE-----