Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136332e302f32342d3234203d3e20323036303932.roa
File:                     3135372e3235342e3136332e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier:          JaE9Cfs3tzMyrqpUwGXbyg9zuzw1PjVcF3Ft8etYlNY=
Subject key identifier:   98:31:E0:37:69:C0:02:5A:2C:48:84:DD:72:B8:9D:E0:09:B3:E1:B3
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       51DB08E7B8B02CE60D157484EE4381BD01DCF680
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136332e302f32342d3234203d3e20323036303932.roa
Signing time:             Fri 30 Dec 2022 19:54:18 +0000
ROA not before:           Fri 30 Dec 2022 19:49:18 +0000
ROA not after:            Fri 29 Dec 2023 19:54:18 +0000
asID:                     206092
IP address blocks:        157.254.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:db:08:e7:b8:b0:2c:e6:0d:15:74:84:ee:43:81:bd:01:dc:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:18 2022 GMT
            Not After : Dec 29 19:54:18 2023 GMT
        Subject: CN=9831E03769C0025A2C4884DD72B89DE009B3E1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:3e:63:16:c7:4a:b4:ec:dc:03:3f:d6:8e:
                    85:fb:fe:7c:ae:a9:d8:1c:09:72:19:93:ac:ee:ee:
                    1b:21:36:72:21:21:91:af:55:89:84:a9:c4:1d:61:
                    4c:2e:62:34:9f:c6:3b:88:d0:2b:77:55:63:59:61:
                    c2:ff:8c:d5:6c:c5:0e:4b:62:93:da:51:3e:cc:16:
                    e9:cb:cd:f4:cd:ed:37:bc:53:6a:f4:c8:33:8f:26:
                    23:86:1f:19:7e:b5:c3:2b:a0:8c:b4:66:81:6b:0d:
                    d2:ff:dd:28:53:cb:b6:24:dc:f0:a6:fd:0c:fe:64:
                    e5:d1:e9:3c:38:73:38:66:fc:4b:ed:06:d1:97:29:
                    52:90:42:e0:bb:5d:83:ed:b1:15:cb:a7:87:9e:31:
                    05:ef:20:f0:82:20:37:22:d1:44:e1:9c:1e:f1:85:
                    15:d4:3e:8c:07:b5:21:21:7c:e3:2a:ae:52:72:fc:
                    8e:c1:d2:6b:34:a6:47:2d:4a:55:5d:0d:97:96:23:
                    cd:28:1f:b1:51:f7:eb:5c:22:54:b6:7c:45:8d:a9:
                    5f:83:91:17:42:d8:4e:48:7d:b6:04:5a:88:07:2a:
                    ba:97:4a:f8:d9:c3:83:66:8e:c8:5f:64:7e:f2:d9:
                    0b:67:a6:1d:db:72:a2:2c:0a:c8:09:b1:8c:53:da:
                    76:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:31:E0:37:69:C0:02:5A:2C:48:84:DD:72:B8:9D:E0:09:B3:E1:B3
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136332e302f32342d3234203d3e20323036303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:7f:14:11:a2:e9:1f:ae:13:3d:7d:05:06:a8:2b:91:06:be:
         24:5c:4a:24:25:36:94:76:73:bf:ee:b8:d8:d5:b2:bd:d8:a6:
         e8:f4:d6:89:94:5a:e1:18:b3:a4:01:0b:1e:ef:1b:89:19:e5:
         7d:04:4c:ab:31:3e:11:f8:d8:cf:91:ef:3d:e1:e1:2e:b2:8b:
         7a:b2:2a:93:f5:8d:59:52:5a:71:d9:0b:62:20:e0:74:ad:c0:
         a8:84:b7:3f:97:c0:df:45:41:d9:9a:4d:ec:f2:e6:18:fa:fd:
         c7:4f:48:be:5f:fc:32:3f:97:91:f8:41:97:b7:1e:88:f4:90:
         34:f3:69:b2:cb:6d:4a:6a:91:0d:09:10:88:9e:79:16:52:e7:
         fb:78:82:58:02:70:1c:e6:78:b5:f8:87:58:f7:14:fc:03:41:
         ef:57:17:b8:51:f6:d1:0c:1d:49:16:4f:8e:d3:2e:47:86:0c:
         fa:f8:48:a6:e5:51:0a:6e:5b:b0:5d:58:68:d7:2f:44:30:29:
         a7:dd:f7:b5:b7:4d:24:69:64:14:b9:66:9b:9d:23:48:8a:42:
         93:79:4d:a5:6d:58:1a:34:e8:1d:f1:29:4f:38:71:00:c0:1e:
         7d:68:7a:31:e6:0b:26:92:b1:40:36:ad:8a:23:3a:b6:55:e4:
         e3:b9:eb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----