Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135392e302f32342d3234203d3e20323131303631.roa
File:                     3135372e3235342e3135392e302f32342d3234203d3e20323131303631.roa (raw, json)
Hash identifier:          5QX6qI6gd6drGL6A3iVGDyPEKz7btHQ+4TyI5hYA9Qk=
Subject key identifier:   82:A7:62:1A:A4:C6:8F:12:47:48:5C:22:EB:A1:CE:18:FF:48:EC:9D
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       45C5EDB81BE52FC2F82418137679655D1DA4A17D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135392e302f32342d3234203d3e20323131303631.roa
Signing time:             Wed 26 Jul 2023 19:02:14 +0000
ROA not before:           Wed 26 Jul 2023 18:57:14 +0000
ROA not after:            Wed 24 Jul 2024 19:02:14 +0000
asID:                     211061
IP address blocks:        157.254.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Aug 2023 07:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c5:ed:b8:1b:e5:2f:c2:f8:24:18:13:76:79:65:5d:1d:a4:a1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 26 18:57:14 2023 GMT
            Not After : Jul 24 19:02:14 2024 GMT
        Subject: CN=82A7621AA4C68F1247485C22EBA1CE18FF48EC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4d:80:f5:a1:d3:77:5d:c6:4f:18:f9:0b:e3:
                    c0:05:15:a8:33:8b:f8:b8:7f:6c:a1:c3:ce:02:0e:
                    c1:9b:04:94:10:26:4c:9d:4d:a1:43:70:6b:10:7b:
                    aa:5b:e1:72:4d:3d:ee:6f:75:04:da:cc:75:b3:40:
                    a7:03:40:33:87:2a:8e:2b:43:cf:ae:95:a5:41:5f:
                    de:56:9a:2c:81:88:f2:3a:7e:56:a5:5c:d7:d8:4b:
                    d8:69:0f:bb:34:34:cc:b9:fb:d4:1e:52:16:63:8d:
                    dd:e5:a7:e2:ce:80:b2:c5:b4:0f:62:ef:a2:f9:d8:
                    74:4a:c5:42:43:7a:f9:a2:39:48:fb:e2:10:69:06:
                    d5:58:21:d9:23:89:85:33:7f:a2:f9:45:72:d6:aa:
                    fa:3a:57:51:2a:e3:a9:0d:c6:c8:da:7b:2f:82:06:
                    48:a2:d8:6b:8e:ed:d9:f8:c2:70:81:ec:7b:e7:d5:
                    db:51:4b:fd:94:41:d0:e9:27:b0:20:96:98:c0:1e:
                    15:56:61:7d:1d:b9:ba:91:ae:c2:bc:72:77:a5:68:
                    8b:7e:af:4c:c1:11:c6:65:e2:fe:30:28:8d:5c:e0:
                    1c:ce:d7:8b:84:1c:26:8a:83:cb:4f:f0:e2:89:c7:
                    1e:2a:a9:ab:ae:bf:f9:31:45:0e:08:22:81:d3:8c:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A7:62:1A:A4:C6:8F:12:47:48:5C:22:EB:A1:CE:18:FF:48:EC:9D
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135392e302f32342d3234203d3e20323131303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c7:62:b1:23:16:78:84:99:41:a9:e8:ad:40:59:7e:65:c5:
         47:28:c7:1d:67:da:62:52:82:80:34:be:0d:cc:a4:b3:dc:a8:
         56:ea:75:f7:db:45:d7:9d:a2:7c:ee:7a:0c:c4:c3:c1:6b:3f:
         84:60:da:ec:f1:64:15:77:38:6e:a9:fd:2d:eb:45:78:5b:75:
         3e:b4:c6:71:4b:d0:36:f9:d7:a1:55:7f:34:37:0a:29:19:23:
         1d:7b:1d:5a:c5:7f:42:36:af:f1:21:9d:99:2b:b3:b5:95:b6:
         57:6a:67:1a:2f:37:a1:21:29:ac:20:9e:c5:57:87:17:07:ec:
         99:56:58:ee:e8:f2:da:f1:f4:25:ce:f7:17:62:53:23:35:58:
         ed:33:f9:cb:71:c1:34:94:17:61:92:9c:be:0d:40:f7:d1:5b:
         9d:bb:ec:b0:c4:f7:5e:cf:8a:1f:a5:27:ab:0e:36:a7:6a:65:
         fc:33:6f:5d:0e:a7:67:68:d7:a1:1c:15:a6:37:0b:9d:ad:1a:
         a3:11:c7:c5:f3:ba:27:89:ef:10:e2:bd:cb:e5:d2:9f:d3:6b:
         45:d7:3d:4b:5b:93:77:24:9c:67:8f:c5:0d:b3:8c:b0:92:3f:
         ef:7e:55:f7:4f:d3:73:7f:82:07:f2:26:92:34:75:2c:0a:fe:
         4f:d4:dd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----