Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e203533363136.roa
File:                     3135372e3235342e3137312e302f32342d3234203d3e203533363136.roa (raw, json)
Hash identifier:          AO2nWUJkLz7cp7K7F0ghABATwh8eAJTWSrAIOlmxg/Y=
Subject key identifier:   C4:9A:48:77:3C:0E:0F:23:E8:7F:1A:C9:DC:76:71:2F:60:96:AE:5B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       269230426EAB2CAAA829874CBDCFED951B1FABDA
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e203533363136.roa
Signing time:             Mon 03 Jul 2023 02:34:44 +0000
ROA not before:           Mon 03 Jul 2023 02:29:44 +0000
ROA not after:            Mon 01 Jul 2024 02:34:44 +0000
asID:                     53616
IP address blocks:        157.254.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:92:30:42:6e:ab:2c:aa:a8:29:87:4c:bd:cf:ed:95:1b:1f:ab:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  3 02:29:44 2023 GMT
            Not After : Jul  1 02:34:44 2024 GMT
        Subject: CN=C49A48773C0E0F23E87F1AC9DC76712F6096AE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7a:c9:f0:ce:34:65:89:60:14:cb:7b:77:6f:
                    4b:54:17:c1:07:39:88:a6:47:46:5d:6e:71:24:06:
                    ad:61:63:c4:79:1b:5a:de:bd:ba:df:71:86:f1:d7:
                    7a:ff:b8:00:61:2e:64:ee:f1:2d:ba:38:26:c1:d2:
                    0d:53:3e:00:9b:55:3d:d7:b8:f6:7c:fd:99:76:77:
                    d1:b9:be:2c:9c:aa:82:77:d0:62:e6:37:65:15:5c:
                    48:8c:d6:8a:51:91:a5:57:79:c0:8c:67:88:89:a2:
                    be:7a:50:5e:7f:6d:0f:37:f2:f5:79:32:3a:c8:09:
                    63:0a:d8:6f:f1:cc:c8:23:96:c7:dd:ba:37:7d:4e:
                    02:8d:65:46:8d:14:b0:84:4a:fb:14:24:15:6d:d3:
                    e6:f7:eb:2a:c6:6e:0e:e3:98:6d:a9:df:d2:f2:f0:
                    62:69:0a:b0:54:a2:32:81:72:f2:65:4a:be:e1:e3:
                    a6:9a:9d:09:27:ed:e8:44:2a:65:30:51:e4:90:b8:
                    6a:1f:66:67:35:f9:72:10:80:d9:97:c6:da:28:fa:
                    61:89:3e:6a:8d:2b:00:d0:d8:b9:b5:d2:1e:5c:81:
                    0d:b4:3c:45:61:25:eb:96:5e:87:b3:2e:f7:0b:07:
                    c8:1e:d1:af:01:b5:bb:81:3a:9b:de:80:f8:37:eb:
                    72:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9A:48:77:3C:0E:0F:23:E8:7F:1A:C9:DC:76:71:2F:60:96:AE:5B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e203533363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e8:ad:4d:aa:12:8f:34:d5:4c:39:9c:7a:1d:cb:d9:37:ee:
         26:f3:99:48:68:5a:12:6b:b2:e2:81:89:3f:a9:64:b2:8c:2f:
         1c:d5:af:63:a2:45:73:22:ed:c8:b0:e7:6a:ce:ba:43:28:19:
         de:6f:7b:95:9a:a5:59:f5:e9:40:fb:a6:f7:7d:6d:9b:c1:48:
         c8:97:e4:2c:8b:60:bd:2e:72:a2:f0:5f:0c:bc:a5:cf:46:79:
         81:26:3f:bd:96:b3:7f:2e:12:bc:87:f2:9c:fa:9e:70:35:ff:
         75:1f:c5:95:bd:33:51:6b:57:50:c9:74:c2:4e:19:2d:8a:0a:
         52:b3:6c:de:7e:ed:f0:e2:b8:49:b6:a0:dc:53:c7:38:d8:86:
         d0:ec:9e:7e:45:bb:16:2a:d0:95:c7:eb:53:b8:af:9d:98:22:
         6e:5c:d2:22:31:23:9e:69:63:a1:bc:6c:6b:15:ef:60:a6:2c:
         63:75:75:1f:42:de:78:1e:37:e8:04:13:b0:a2:7a:3d:22:e7:
         4f:fe:dc:be:d4:11:7f:f2:eb:f6:d7:9b:a5:d1:60:c7:22:df:
         e1:34:35:54:06:d0:fb:60:75:61:1c:5d:64:cd:e3:62:5b:08:
         30:5a:fc:65:82:b7:4f:a9:16:18:db:10:90:0f:f6:cc:53:5b:
         92:ac:07:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----