Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137322e302f32342d3234203d3e20383334.roa
File:                     3135372e3235342e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          fRqXJu9ZWgLpu2KAtnO96upa4v4cgv+8OqWoTC0/ejk=
Subject key identifier:   62:62:50:45:95:AA:73:E1:E2:91:09:92:D0:F4:5F:CF:EB:40:BF:FA
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       59EE34783973DB378E1F8EA88EB1DECABF7D02FB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137322e302f32342d3234203d3e20383334.roa
Signing time:             Wed 26 Jul 2023 00:00:05 +0000
ROA not before:           Tue 25 Jul 2023 23:55:05 +0000
ROA not after:            Wed 24 Jul 2024 00:00:05 +0000
asID:                     834
IP address blocks:        157.254.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ee:34:78:39:73:db:37:8e:1f:8e:a8:8e:b1:de:ca:bf:7d:02:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 25 23:55:05 2023 GMT
            Not After : Jul 24 00:00:05 2024 GMT
        Subject: CN=6262504595AA73E1E2910992D0F45FCFEB40BFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:48:28:b7:cd:a8:60:99:46:3b:ec:40:f9:
                    0e:0e:c6:3e:0b:31:7e:49:6d:c0:f4:3b:37:1c:6b:
                    87:0c:37:da:55:4b:a5:92:b7:ae:36:54:73:32:5a:
                    02:cc:1d:33:fb:82:84:cf:be:76:1b:02:a5:6d:fc:
                    77:4b:3d:f2:8c:f6:10:d9:03:b3:4a:e8:71:28:73:
                    df:8e:01:79:47:6c:06:7c:35:ab:fc:5b:ca:df:d8:
                    de:c2:e4:a1:0f:1b:e6:64:f5:9f:8d:19:ce:96:31:
                    56:e2:af:0b:2e:ee:7b:aa:d0:2d:40:e8:09:a9:1b:
                    9e:90:b8:bf:2a:c3:b6:61:5b:7c:d1:12:1f:cb:37:
                    b9:8a:21:80:22:c3:cf:31:db:2f:d3:68:a6:3a:38:
                    ae:55:72:83:1f:66:ce:96:05:8a:c3:58:32:c2:08:
                    22:2a:2c:47:0a:06:0b:78:93:3e:94:aa:40:39:c6:
                    50:50:9e:89:24:08:9f:fa:c9:cf:10:c8:8a:40:89:
                    89:1f:1e:14:83:0f:9f:fd:00:e1:ca:9d:07:3c:b6:
                    ac:b7:a8:4b:7b:12:7a:f8:76:53:d4:37:36:95:db:
                    c3:c8:f1:2b:e6:a1:2a:1b:88:d1:51:fd:6f:4b:77:
                    28:a7:5f:ee:20:06:5c:15:be:a5:52:e1:c6:33:92:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:62:50:45:95:AA:73:E1:E2:91:09:92:D0:F4:5F:CF:EB:40:BF:FA
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:69:df:03:e6:17:9f:f5:75:70:b9:18:8b:3d:0d:8e:54:2c:
         5a:08:36:15:a7:51:08:75:d5:5e:49:9e:06:4e:b5:1a:2e:d4:
         6c:d3:57:d3:67:30:2d:12:90:92:cc:10:9d:65:0d:a1:13:45:
         9d:73:1d:e1:e6:4e:f4:ec:59:da:64:9c:6f:63:86:19:79:21:
         09:17:b3:37:91:7c:ab:d0:09:77:b6:5b:06:70:ab:97:34:75:
         26:b4:40:22:f6:8e:bd:46:d8:17:bb:8d:91:72:c2:28:03:e7:
         59:c4:2d:dd:17:36:13:9a:00:64:f0:6b:95:7b:d1:a8:f0:e9:
         30:4d:68:20:9c:5a:2e:f1:1e:65:0b:b3:8c:a9:93:b5:e4:5b:
         44:fa:d2:ca:df:de:a2:fa:3e:f8:6c:59:98:5d:24:4d:84:7e:
         e1:80:40:0f:2d:13:0f:e8:3d:2c:6e:bd:ea:47:36:ee:af:39:
         50:57:85:5b:9c:0f:1e:ed:e6:68:52:01:1a:ae:f1:63:e0:2c:
         98:f0:26:39:08:54:6d:51:a5:03:25:3c:c4:21:81:3a:fe:06:
         c4:84:71:a4:31:16:b9:9c:a2:75:c0:7b:aa:3b:d8:6d:eb:34:
         b7:2c:44:f0:03:d2:d0:b8:e7:15:8e:8c:54:89:ca:da:21:7f:
         66:f7:41:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----