Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e31362e302f32332d3233203d3e203634323839.roa
File:                     3135372e3235342e31362e302f32332d3233203d3e203634323839.roa (raw, json)
Hash identifier:          3rCk4yAMYpKi06JG0D4f+c7ABgOSYiguFPNzLtZSzOs=
Subject key identifier:   23:34:9C:F4:A3:B0:24:9F:0E:00:07:5E:C5:77:27:D0:A2:40:60:87
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3C4460C34DFB585063FDBA94C637631D8DFC57AC
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e31362e302f32332d3233203d3e203634323839.roa
Signing time:             Tue 15 Aug 2023 06:10:15 +0000
ROA not before:           Tue 15 Aug 2023 06:05:15 +0000
ROA not after:            Tue 13 Aug 2024 06:10:15 +0000
asID:                     64289
IP address blocks:        157.254.16.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:44:60:c3:4d:fb:58:50:63:fd:ba:94:c6:37:63:1d:8d:fc:57:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 15 06:05:15 2023 GMT
            Not After : Aug 13 06:10:15 2024 GMT
        Subject: CN=23349CF4A3B0249F0E00075EC57727D0A2406087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:0f:62:ba:a2:89:f7:2c:fd:20:b1:88:1c:
                    aa:65:d3:99:7f:09:e7:32:13:d6:1b:17:56:ef:df:
                    76:f0:65:47:c4:c9:b3:0a:5f:8b:a9:bb:49:10:42:
                    10:b8:bb:ed:a0:c7:1a:e0:8f:14:1f:05:fc:75:b5:
                    96:20:9e:de:e4:7a:87:a9:78:32:06:ad:c7:92:fd:
                    2e:75:e8:cd:23:16:e4:f5:11:89:e8:9c:4c:8e:60:
                    1f:59:13:a8:d2:4c:81:2f:19:91:52:33:fb:4e:5f:
                    50:96:74:0d:9c:21:58:e0:f3:c1:e3:ab:e7:66:1c:
                    89:2d:7d:f6:a2:3d:75:2b:4b:a2:be:35:4f:63:6e:
                    41:ed:78:70:f0:c6:a3:05:9a:61:22:e9:fb:76:58:
                    3d:59:00:9b:9a:6d:af:55:96:46:27:44:93:3f:37:
                    d1:b6:9e:2d:22:5e:3e:e4:21:8b:c4:1c:37:24:e7:
                    79:4f:a9:30:cb:87:97:8e:d1:85:10:fd:b3:14:ba:
                    6c:cb:72:86:15:56:27:e4:46:36:d1:5d:c3:e8:ca:
                    04:e3:de:de:69:56:ab:f7:0c:37:f1:98:c5:84:39:
                    40:a6:62:11:d9:bf:44:3d:a2:42:1f:42:fe:84:d3:
                    73:9c:cc:3b:74:26:8a:7e:98:a6:93:a8:3a:3d:0e:
                    71:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:34:9C:F4:A3:B0:24:9F:0E:00:07:5E:C5:77:27:D0:A2:40:60:87
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e31362e302f32332d3233203d3e203634323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:d2:72:bf:e4:39:1e:7b:6d:16:22:fb:0e:cd:31:76:cc:ad:
         c5:aa:ab:9e:da:6f:0c:bb:86:30:a4:4d:c1:36:18:ce:c7:af:
         77:a9:4c:91:2a:b4:7c:a7:1f:ad:59:c8:2c:53:3b:42:57:7a:
         36:ed:c8:2b:4c:33:8c:c5:51:a6:13:3d:57:13:c7:de:c9:54:
         8c:08:45:8b:65:60:40:1c:78:62:04:5e:19:7d:9c:4a:14:0a:
         49:f4:6d:34:62:3f:31:58:1d:71:ea:46:10:5e:d2:e2:92:a5:
         c0:5b:74:4b:6d:3c:dc:9c:e6:9b:23:36:36:33:54:82:96:db:
         95:d2:ae:93:88:cf:58:6e:c2:ad:f1:ed:d4:d2:ef:d1:10:45:
         4b:8e:b5:9d:05:9c:d7:51:9b:67:27:10:97:f0:6e:66:ea:2e:
         5f:97:cf:46:9e:e8:af:f1:1f:9e:01:e3:c7:96:42:aa:4d:ea:
         e4:f4:9d:85:f0:e7:65:76:71:13:a7:7c:f5:e4:38:aa:32:c6:
         09:0e:83:15:d4:a3:42:24:00:c4:b3:01:af:da:96:a1:76:c6:
         15:3f:79:0a:21:33:b3:f8:42:29:10:cd:9c:2c:d8:a1:52:3c:
         b0:19:af:76:5e:70:c1:14:c1:06:46:e3:7d:50:41:81:00:4c:
         66:e7:0f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----