Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e20383334.roa
File:                     3135372e3235342e3137312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          mAn4GIT25rcro03qalnBSZTqcNKnLz03YDB6aXxMpYo=
Subject key identifier:   72:63:CC:39:E0:6E:59:FA:5B:FE:34:F4:8A:D6:0A:06:65:7B:E7:29
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       13A66EB45E1EC6C84D7341739F72617C34EFF8A7
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e20383334.roa
Signing time:             Fri 30 Jun 2023 00:00:11 +0000
ROA not before:           Thu 29 Jun 2023 23:55:11 +0000
ROA not after:            Fri 28 Jun 2024 00:00:11 +0000
asID:                     834
IP address blocks:        157.254.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 03 Jul 2023 02:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a6:6e:b4:5e:1e:c6:c8:4d:73:41:73:9f:72:61:7c:34:ef:f8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 29 23:55:11 2023 GMT
            Not After : Jun 28 00:00:11 2024 GMT
        Subject: CN=7263CC39E06E59FA5BFE34F48AD60A06657BE729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:2a:4e:e3:78:91:46:fe:7a:a1:61:c2:c3:
                    a2:f7:fc:5d:d3:c3:98:34:e1:d5:48:82:60:bd:7a:
                    e7:ac:93:fd:26:3a:54:04:08:31:ad:59:46:1a:18:
                    c2:97:f2:3c:9d:0a:1f:9e:cb:0b:18:a0:ac:06:3e:
                    5e:90:5f:12:42:bc:9e:2f:61:8e:b9:61:d8:c8:a7:
                    ce:81:23:b3:9e:ab:64:77:c8:ca:06:4c:be:3f:76:
                    b9:04:2b:b6:e6:19:d6:6e:07:35:14:53:0e:3c:53:
                    88:ae:34:09:63:45:0a:84:da:0a:c4:ae:a6:58:a4:
                    46:eb:15:52:bb:04:ed:0d:73:ea:28:d4:e8:51:95:
                    3a:c0:e1:27:e3:61:81:7e:56:b5:af:51:f8:34:df:
                    16:57:88:87:5f:93:77:ad:95:0a:be:75:b9:1d:07:
                    ab:bf:60:5d:cd:44:a7:ae:bb:7e:d8:eb:9f:f3:cb:
                    ae:1c:f9:c4:68:46:45:07:92:85:da:a5:41:ef:35:
                    70:0e:eb:fc:4d:09:6d:d6:7b:23:e3:43:e7:82:12:
                    6b:6c:4e:87:ad:aa:4b:cf:45:a4:7e:55:41:87:d1:
                    79:d5:24:0d:f5:d7:ff:02:9c:bd:5a:fa:99:08:f9:
                    76:61:2f:0d:63:04:6b:f7:ef:30:03:2a:9f:4a:d1:
                    f7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:63:CC:39:E0:6E:59:FA:5B:FE:34:F4:8A:D6:0A:06:65:7B:E7:29
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:97:3b:40:68:ec:37:94:41:b5:fa:73:c5:62:e7:43:0e:89:
         0d:12:63:5f:ed:95:7a:7f:57:55:78:78:c6:1e:91:f9:3a:c9:
         6d:54:01:f0:6a:61:ce:20:3e:d6:f0:95:5d:5b:81:74:11:6d:
         10:97:3a:e5:00:08:c9:4d:8c:b0:b1:c7:a4:4b:58:75:30:f3:
         a0:de:26:7d:40:fe:c4:16:92:b8:f1:e3:5f:22:e7:5b:13:96:
         33:f4:dd:76:98:f2:cb:b6:1f:8d:5a:6b:c9:a0:eb:bf:4f:22:
         9a:03:72:45:c3:9c:22:69:54:08:84:2a:1f:ff:65:87:1a:8f:
         60:b1:5a:74:95:86:4f:ef:e5:af:4f:51:34:d2:9b:6f:b3:c6:
         35:d7:01:b6:17:51:cd:ac:7a:f4:e6:92:c2:94:ca:0f:2a:1a:
         ce:1f:2c:0b:65:09:1b:d4:79:dc:4f:68:83:70:4a:30:7f:c3:
         47:95:60:17:0e:99:66:bf:90:16:84:12:e8:19:fd:b8:f4:4f:
         34:40:34:38:83:94:fe:e0:f7:6d:71:f9:b5:8c:bd:da:fe:fa:
         b5:1e:b7:6f:cf:f9:f8:85:61:5d:85:6b:d8:ee:58:5f:0e:8b:
         2b:46:8c:42:32:88:18:7f:cf:96:2f:2b:c7:86:d8:41:a6:46:
         73:53:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----