Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136322e302f32332d3234203d3e203631333137.roa
File:                     3135372e3235342e3136322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          TqAE/kGYGBQ73VJAE2wGoHoCgT+a44bQ9/iMiC8ZWOI=
Subject key identifier:   6F:DC:8C:0B:AD:71:17:0D:D8:7C:94:8F:4C:C4:4C:08:12:FE:3C:0F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       30485D7C0C4208A4D4F4E834CDA77F72FFF92533
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136322e302f32332d3234203d3e203631333137.roa
Signing time:             Sun 30 Apr 2023 13:58:41 +0000
ROA not before:           Sun 30 Apr 2023 13:53:41 +0000
ROA not after:            Sun 28 Apr 2024 13:58:41 +0000
asID:                     61317
IP address blocks:        157.254.162.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:48:5d:7c:0c:42:08:a4:d4:f4:e8:34:cd:a7:7f:72:ff:f9:25:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 30 13:53:41 2023 GMT
            Not After : Apr 28 13:58:41 2024 GMT
        Subject: CN=6FDC8C0BAD71170DD87C948F4CC44C0812FE3C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:72:69:6e:8a:e2:58:b7:2d:3b:78:bb:d1:
                    92:9e:7a:6b:3b:e9:b8:08:8b:0c:d0:29:eb:27:a9:
                    24:0b:3d:a1:c5:41:ab:c4:08:93:5e:d1:59:3c:ed:
                    78:ff:0d:3e:bb:9d:68:85:db:51:7f:4e:7f:ee:12:
                    a3:e7:dd:a5:97:76:a6:2b:04:cd:9d:c2:3e:63:64:
                    e4:2f:52:9f:1c:f5:f7:db:d5:2b:06:98:9d:61:41:
                    42:11:de:5f:54:20:ef:03:ba:79:b6:0e:b6:96:64:
                    9e:47:75:84:2c:95:53:6a:50:c4:41:9a:f1:84:71:
                    78:9a:59:d8:79:e9:16:4c:88:d4:8b:f3:bb:be:9b:
                    f5:00:53:df:18:44:09:47:7e:34:7f:5a:2a:7c:42:
                    df:17:5b:af:c8:2c:74:fa:ac:b9:b3:0d:11:0c:eb:
                    ad:77:49:7d:85:39:61:a5:64:b3:07:1d:a1:ee:ad:
                    cd:95:63:61:66:f2:34:24:28:63:c8:b9:a2:94:33:
                    d7:ba:56:54:81:d0:2d:b8:89:42:7a:ac:da:7f:20:
                    29:eb:04:2b:bf:ec:03:12:4a:29:49:a3:35:63:46:
                    50:18:64:50:80:36:f1:d4:29:8b:69:18:c2:8b:0f:
                    42:34:4a:6b:9a:59:3d:d1:83:c3:1e:9f:d8:ce:c2:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DC:8C:0B:AD:71:17:0D:D8:7C:94:8F:4C:C4:4C:08:12:FE:3C:0F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:00:9c:0b:3b:cf:63:80:78:15:ec:19:15:d2:4a:19:09:73:
         1c:0d:06:d6:a4:67:68:86:78:eb:5e:b2:d8:77:44:be:9b:26:
         a5:42:9f:d4:ba:29:76:4b:32:70:50:91:26:5c:0c:a0:9c:fd:
         b5:15:79:d3:92:8b:a4:01:6b:05:a9:c0:ee:b5:99:ad:b6:2d:
         d2:4f:f6:ef:71:b1:de:c7:3d:2c:4d:96:9b:ed:0e:89:33:1a:
         fa:29:08:3a:65:be:82:ba:b1:ea:e3:eb:48:d6:50:52:54:d1:
         af:26:53:3b:c7:e9:5c:e1:8f:38:80:65:d0:ee:8b:36:34:dd:
         93:07:da:82:81:ce:8b:9d:c1:52:9f:5e:dd:50:f9:5b:c2:36:
         6f:c6:93:be:49:eb:75:f6:6d:ab:2c:0f:ca:cf:62:d4:b6:a2:
         2c:0a:05:a4:44:6d:73:f4:a2:90:17:31:a8:ed:4e:d5:b6:d3:
         94:9d:f0:b0:87:5e:5f:69:87:0b:a8:64:26:e6:4c:31:ba:91:
         3f:72:38:93:ee:41:36:ac:63:4a:b1:ed:a1:72:e7:cc:15:a0:
         d4:30:50:83:d6:e7:54:ce:9e:ed:25:42:37:c4:76:e7:4d:57:
         d9:52:0b:c6:eb:77:1d:0b:fc:a6:87:67:f9:59:a6:a9:d0:1d:
         f1:e0:cc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----