Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136322e302f32332d3233203d3e203631333137.roa
File:                     3135372e3235342e3136322e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier:          FZt2cNLeA2RUdTa9awByRT6fdrKzk34DPmhXOKojFrI=
Subject key identifier:   D8:03:4E:F5:E1:D7:25:15:5C:49:B8:BE:9E:DF:AB:A7:B3:59:F7:3D
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1B5C3255BA2F87AF73742BBE1CED17CFE60CD6EE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136322e302f32332d3233203d3e203631333137.roa
Signing time:             Sat 29 Apr 2023 09:11:39 +0000
ROA not before:           Sat 29 Apr 2023 09:06:39 +0000
ROA not after:            Sat 27 Apr 2024 09:11:39 +0000
asID:                     61317
IP address blocks:        157.254.162.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5c:32:55:ba:2f:87:af:73:74:2b:be:1c:ed:17:cf:e6:0c:d6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 29 09:06:39 2023 GMT
            Not After : Apr 27 09:11:39 2024 GMT
        Subject: CN=D8034EF5E1D725155C49B8BE9EDFABA7B359F73D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:55:b3:10:fd:63:b4:36:e5:48:c2:cd:e3:d5:
                    4e:4d:9b:19:5d:5c:2e:f7:f2:9a:a7:49:54:cb:07:
                    f5:8b:7e:ae:7d:30:46:cc:65:fb:89:02:5b:0a:d0:
                    5d:cb:af:4d:dd:54:3a:4d:68:96:29:3f:78:ed:8f:
                    c8:bf:15:2c:f5:f6:43:47:2e:d6:38:91:9f:b9:17:
                    cd:ac:5c:e4:13:93:92:d0:7e:ed:f9:e4:3c:78:d8:
                    71:55:35:a5:a5:a8:00:5f:ac:68:05:e7:22:c6:73:
                    2b:c5:0e:fd:de:38:10:aa:de:14:0f:cb:20:b5:c7:
                    45:92:53:9c:27:93:01:0e:b0:a2:7f:65:e4:36:3b:
                    12:76:aa:7e:57:b9:c9:2e:04:2a:4e:07:85:61:26:
                    8d:ed:2f:4b:10:e1:72:73:38:b3:09:b7:37:0a:75:
                    11:dc:e7:e5:30:e0:27:57:1b:8f:dc:60:12:c0:73:
                    86:fa:57:a5:9c:92:53:74:59:07:38:44:f1:d6:87:
                    1f:f0:c5:3d:3b:db:dc:70:23:2d:b4:13:bb:d7:3e:
                    af:92:9f:aa:ba:be:59:f2:ad:53:4b:3f:7b:dd:14:
                    48:a7:fe:0e:25:50:9f:7e:11:2d:9b:27:d6:ca:a7:
                    6a:9e:7d:9f:a7:0b:d0:92:50:b1:1c:f5:95:8a:2a:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:03:4E:F5:E1:D7:25:15:5C:49:B8:BE:9E:DF:AB:A7:B3:59:F7:3D
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136322e302f32332d3233203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:20:2c:3d:5b:7d:bd:b1:fb:36:c1:d0:a0:bb:bc:de:6a:71:
         62:ef:eb:21:da:98:26:a1:62:20:ef:73:12:ea:c1:e1:cb:df:
         5d:e8:40:ce:54:aa:f1:bb:6e:02:a6:b8:a4:8a:6b:4e:9e:12:
         c1:c1:67:3d:ab:ed:93:3f:ad:6e:88:e7:d6:ee:75:4d:32:7c:
         cd:97:86:fc:9b:4f:e1:9c:0f:96:35:15:ba:54:95:18:a0:d2:
         df:fa:9e:3c:89:a0:ed:e7:a3:ef:34:53:6d:7c:0a:d3:87:70:
         bf:36:4f:3e:3a:48:49:4a:38:38:97:05:76:36:40:7d:ac:1f:
         6e:24:9d:8b:5d:b1:ea:12:56:8b:bb:ac:45:f0:87:62:7c:42:
         26:98:92:28:96:a6:fc:73:6b:74:a0:f5:9d:ee:57:7d:17:d6:
         38:fa:42:e2:a8:64:e3:2f:dd:d5:c5:f8:7b:66:6a:d4:67:9b:
         76:e7:7c:cb:ac:d3:3c:62:2e:fa:3e:89:9c:cc:ab:df:d7:23:
         6b:3f:b4:97:18:b1:fb:67:ec:96:97:c2:73:72:5b:8b:f6:36:
         a3:41:0f:52:dd:fd:d7:1b:06:e0:c1:4d:82:aa:c5:82:85:3f:
         88:b5:3c:be:26:a3:86:0e:1f:cf:76:3a:4e:8c:84:75:b0:f0:
         a7:1d:97:65
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUG1wyVbovh69zdCu+HO0Xz+YM1u4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwNDI5MDkwNjM5WhcNMjQwNDI3MDkxMTM5
WjAzMTEwLwYDVQQDEyhEODAzNEVGNUUxRDcyNTE1NUM0OUI4QkU5RURGQUJBN0Iz
NTlGNzNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21WzEP1jtDbl
SMLN49VOTZsZXVwu9/Kap0lUywf1i36ufTBGzGX7iQJbCtBdy69N3VQ6TWiWKT94
7Y/IvxUs9fZDRy7WOJGfuRfNrFzkE5OS0H7t+eQ8eNhxVTWlpagAX6xoBecixnMr
xQ793jgQqt4UD8sgtcdFklOcJ5MBDrCif2XkNjsSdqp+V7nJLgQqTgeFYSaN7S9L
EOFyczizCbc3CnUR3OflMOAnVxuP3GASwHOG+lelnJJTdFkHOETx1ocf8MU9O9vc
cCMttBO71z6vkp+qur5Z8q1TSz973RRIp/4OJVCffhEtmyfWyqdqnn2fpwvQklCx
HPWViipHUQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFNgDTvXh1yUVXEm4vp7fq6ez
Wfc9MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMTM2MzIyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnf6iMA0GCSqGSIb3DQEB
CwUAA4IBAQBPICw9W329sfs2wdCgu7zeanFi7+sh2pgmoWIg73MS6sHhy99d6EDO
VKrxu24CprikimtOnhLBwWc9q+2TP61uiOfW7nVNMnzNl4b8m0/hnA+WNRW6VJUY
oNLf+p48iaDt56PvNFNtfArTh3C/Nk8+OkhJSjg4lwV2NkB9rB9uJJ2LXbHqElaL
u6xF8IdifEImmJIolqb8c2t0oPWd7ld9F9Y4+kLiqGTjL93Vxfh7ZmrUZ5t253zL
rNM8Yi76PomczKvf1yNrP7SXGLH7Z+yWl8JzcluL9jajQQ9S3f3XGwbgwU2CqsWC
hT+ItTy+JqOGDh/PdjpOjIR1sPCnHZdl
-----END CERTIFICATE-----