Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137322e302f32342d3234203d3e203631333137.roa
File:                     3135372e3235342e3137322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          AfHFextrX8RdFCeUrBqB1KowZ1cmNnH06isLBvE3QcA=
Subject key identifier:   BE:71:88:62:B5:4D:E3:DE:84:CB:66:30:0E:5A:3C:CC:D4:E1:65:2F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0AFF73EF934C125BE822623C80ED2526B4266A64
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137322e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 07 Aug 2023 13:44:19 +0000
ROA not before:           Mon 07 Aug 2023 13:39:19 +0000
ROA not after:            Mon 05 Aug 2024 13:44:19 +0000
asID:                     61317
IP address blocks:        157.254.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ff:73:ef:93:4c:12:5b:e8:22:62:3c:80:ed:25:26:b4:26:6a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug  7 13:39:19 2023 GMT
            Not After : Aug  5 13:44:19 2024 GMT
        Subject: CN=BE718862B54DE3DE84CB66300E5A3CCCD4E1652F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:70:16:95:ba:b4:4e:60:4f:98:9c:9e:3c:5f:
                    0c:47:43:de:70:a5:88:31:52:10:8a:8d:38:fe:b0:
                    1f:83:64:7d:f1:71:29:1b:54:35:26:82:fc:4f:04:
                    02:10:45:81:8e:bd:5f:ba:89:0d:a8:89:65:1c:e5:
                    45:d3:0c:c4:0a:a9:79:ca:8b:f8:c4:b5:02:97:db:
                    e4:a4:a2:82:09:53:38:c2:78:31:05:f4:29:9b:6d:
                    1f:d5:89:1d:dd:96:e3:a7:60:72:79:bd:a0:7d:ac:
                    7d:88:98:a0:f2:a7:d7:51:74:ac:c1:83:73:da:18:
                    e4:6e:fa:00:1d:80:09:91:fe:f7:e6:fb:e9:9d:e5:
                    a5:9e:d9:5e:07:49:70:9c:07:3f:98:06:59:51:b2:
                    17:cc:d0:1c:de:cc:3a:39:da:f2:05:fc:13:f1:cd:
                    b0:25:1f:6d:72:93:c3:85:10:2b:0c:27:7a:8a:b3:
                    12:77:48:12:b1:02:de:3d:a0:4e:00:05:9e:81:92:
                    b9:21:16:a8:ae:be:b5:e7:e7:de:81:e3:6d:51:be:
                    c6:74:0e:2f:02:92:43:33:72:6e:60:7d:12:f3:42:
                    e9:2e:ce:90:7b:d2:ba:7a:0d:7a:0d:56:45:b2:52:
                    67:7d:ff:5b:fc:ff:25:01:48:fc:b5:62:14:d5:91:
                    9f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:71:88:62:B5:4D:E3:DE:84:CB:66:30:0E:5A:3C:CC:D4:E1:65:2F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:2d:ea:08:0f:94:74:5e:7f:e6:0a:d6:1a:8e:2c:5f:b1:97:
         97:7f:65:5b:04:26:eb:50:e7:df:a5:40:95:3c:97:7f:82:dd:
         8a:d8:a5:9b:7f:9e:4a:ca:54:a9:55:3e:2c:39:8a:18:9f:80:
         0a:b6:cd:fb:0e:2b:d5:71:ed:eb:8b:04:97:b0:b1:1b:c8:e4:
         09:94:ec:fc:f1:f0:c5:81:69:38:39:32:24:d6:43:c7:39:dd:
         87:fe:e0:96:be:1a:bd:2a:b9:fc:1f:c8:73:eb:a8:37:d7:d6:
         bc:ee:f7:08:c0:f3:7c:30:ca:80:f1:53:f1:ae:fa:c1:35:30:
         66:d0:92:a8:0a:c4:91:2a:15:23:19:53:bf:60:69:ea:88:76:
         81:fd:49:e0:31:70:2d:f1:3d:93:b7:ef:66:b3:cf:a6:e1:81:
         dc:f8:31:28:1f:a6:2c:dc:72:e7:2f:72:8e:5a:cb:6a:68:d4:
         df:32:89:d1:c8:c4:01:12:54:b7:a0:1e:22:aa:b5:c9:8d:69:
         6a:77:8b:25:b2:49:9a:d0:6b:16:df:31:60:be:a0:b5:97:eb:
         9d:41:7d:f1:1f:7c:0f:5c:bf:9e:3f:34:79:25:60:e1:0b:e6:
         6e:e3:2e:68:7b:ab:64:88:c3:8d:c2:63:4b:ea:d3:f7:86:07:
         11:c1:38:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----