Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135382e302f32332d3234203d3e20383334.roa
File:                     3135372e3235342e3135382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          RL9HYG67rl7PR36jKKPhX2la6dPsoKvodAFa4X21k8g=
Subject key identifier:   1D:48:45:53:A6:79:12:F1:0F:CA:02:F6:A8:09:E6:6C:0E:9D:F5:8D
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       56E751D7C67F9C1793B62C50621AB95B7B64A0CC
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135382e302f32332d3234203d3e20383334.roa
Signing time:             Thu 20 Jul 2023 00:00:03 +0000
ROA not before:           Wed 19 Jul 2023 23:55:03 +0000
ROA not after:            Thu 18 Jul 2024 00:00:03 +0000
asID:                     834
IP address blocks:        157.254.158.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Aug 2023 07:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e7:51:d7:c6:7f:9c:17:93:b6:2c:50:62:1a:b9:5b:7b:64:a0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 19 23:55:03 2023 GMT
            Not After : Jul 18 00:00:03 2024 GMT
        Subject: CN=1D484553A67912F10FCA02F6A809E66C0E9DF58D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fc:80:80:8b:8e:b3:ee:d0:3b:48:09:99:b6:
                    12:b9:ef:21:ed:2d:73:d8:1b:fa:cc:7e:c4:d9:76:
                    9a:4d:84:6b:a8:6b:3e:72:6e:91:02:c5:af:11:d0:
                    47:70:be:7c:17:04:81:76:23:06:a8:6e:c8:5c:99:
                    2a:e9:0e:1b:1b:f6:12:68:88:66:5d:d1:6a:1f:c9:
                    af:9e:b4:05:74:93:73:e8:83:da:09:86:2f:cb:70:
                    c9:8b:53:44:4c:df:1d:ae:0c:58:c2:13:65:28:f3:
                    82:84:6f:9f:ef:90:93:e8:9b:50:ec:91:aa:16:63:
                    d4:9e:2e:b8:bb:d8:1f:7a:72:88:61:c7:8c:87:91:
                    29:04:7d:dc:e0:dd:c0:91:2c:93:c2:8b:90:15:39:
                    22:e2:67:a9:af:fa:9e:4a:fa:be:13:3d:aa:4f:62:
                    a8:58:71:9a:ff:6a:92:d4:bb:44:ec:80:ea:73:63:
                    81:e9:5a:9a:67:1a:63:a3:73:cb:a8:1f:d1:b0:f8:
                    44:2b:69:98:cf:35:2a:1b:27:f5:e6:35:bf:f6:a9:
                    23:4b:06:60:63:1c:81:2b:d3:5c:d9:d4:ac:c2:4a:
                    00:c8:6d:b6:2a:1a:5b:06:e3:b0:ae:ec:67:be:35:
                    88:8e:88:a6:5d:15:9b:e7:6e:3d:74:d2:b7:f1:88:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:48:45:53:A6:79:12:F1:0F:CA:02:F6:A8:09:E6:6C:0E:9D:F5:8D
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:52:a9:ed:9d:36:54:a7:d2:14:39:00:40:e8:5c:96:8f:01:
         50:67:e7:f9:fc:e1:a3:4c:aa:33:ac:76:cd:96:b8:51:46:f6:
         13:23:e2:7e:cb:46:92:8a:c7:a8:2a:46:10:25:89:5d:1e:7d:
         67:fd:94:bd:44:2c:f9:db:09:d1:44:25:2a:17:01:68:d7:61:
         cd:77:bd:a3:4a:69:c5:b1:b4:d1:04:9a:ba:95:41:40:04:f4:
         42:33:6a:f3:c0:e1:62:89:82:13:3a:e6:7a:b8:d1:d2:5a:34:
         48:3f:55:4a:c4:97:75:7b:42:60:fb:53:de:e3:0a:03:4e:7a:
         02:48:da:d3:46:51:b1:e6:02:37:2a:80:1c:b1:56:12:87:91:
         71:cb:5c:75:42:d5:24:8f:e6:5f:aa:ec:63:78:87:6b:6d:05:
         e1:ae:b2:2a:8f:16:ec:36:e5:89:54:13:0b:ef:61:4e:ec:d6:
         66:00:a8:63:24:3e:66:62:be:3d:93:69:66:cb:63:52:ae:c2:
         87:1c:5d:12:fd:92:3a:e6:e3:f7:ec:49:91:4e:45:78:5b:2c:
         a1:3b:22:90:93:93:ee:b7:4c:56:47:27:52:7e:31:85:0e:96:
         d3:42:f9:80:da:c4:6b:01:de:1c:30:e9:26:e9:a7:b0:e5:b8:
         bf:fa:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----