Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139322e302f32332d3234203d3e2039333834.roa
File:                     3135372e3235342e3139322e302f32332d3234203d3e2039333834.roa (raw, json)
Hash identifier:          EiPBGGb0cMBK38VQof8imirXRhRgvX0XXIjUBdYFy6w=
Subject key identifier:   CD:3E:7C:C8:5A:9E:F3:09:98:52:C5:42:0A:8B:CC:32:C7:72:E0:B7
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4C5604C3339336AE69ABC8A4F92F9DD2F38FA6EF
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139322e302f32332d3234203d3e2039333834.roa
Signing time:             Fri 30 Dec 2022 19:54:19 +0000
ROA not before:           Fri 30 Dec 2022 19:49:19 +0000
ROA not after:            Fri 29 Dec 2023 19:54:19 +0000
asID:                     9384
IP address blocks:        157.254.192.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:56:04:c3:33:93:36:ae:69:ab:c8:a4:f9:2f:9d:d2:f3:8f:a6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:19 2022 GMT
            Not After : Dec 29 19:54:19 2023 GMT
        Subject: CN=CD3E7CC85A9EF3099852C5420A8BCC32C772E0B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:fe:95:9e:2d:a0:ca:a2:6b:af:54:c7:13:
                    76:02:b3:74:30:ad:01:9d:b0:34:0b:31:19:66:6a:
                    75:37:32:3a:e6:c9:03:32:b2:5e:15:fa:18:6d:ef:
                    4a:2a:d1:f5:51:0c:2f:64:e6:05:c9:db:61:9a:5b:
                    7a:06:d3:e0:17:14:d7:20:23:cc:a2:ac:ae:3c:d9:
                    d0:27:b7:1d:3c:0a:a2:d8:f6:ce:7b:3f:ac:78:ad:
                    c8:32:00:89:60:2a:29:cd:52:a5:d6:ee:5f:6c:f7:
                    ac:c9:51:65:31:e4:4f:c1:ef:d1:4e:f6:dc:4c:bd:
                    93:65:d8:a3:45:5f:e5:c6:ec:b2:87:e4:b7:3c:26:
                    e5:f7:52:ee:ea:35:1d:ab:6f:36:87:4c:aa:70:2c:
                    52:3c:09:9f:b0:e4:41:93:4e:5e:9c:f7:31:3f:dd:
                    a0:33:91:3e:24:a9:14:a2:9f:bb:52:8f:2a:9d:8b:
                    fe:ec:61:ee:b2:98:d9:ef:8e:2e:cd:b7:3d:07:f5:
                    21:55:7f:e2:6b:f7:bf:7c:ac:8b:63:12:df:8f:c9:
                    c1:a3:85:36:94:24:36:8a:2a:ad:e6:cc:5a:f7:6f:
                    f4:be:db:a5:94:2e:96:77:eb:82:bd:d9:2e:93:0d:
                    e8:53:c4:76:0c:3d:6c:75:40:8c:9b:7e:92:7f:c6:
                    ec:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3E:7C:C8:5A:9E:F3:09:98:52:C5:42:0A:8B:CC:32:C7:72:E0:B7
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139322e302f32332d3234203d3e2039333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:6e:03:5c:d1:9a:a9:be:71:4a:84:30:fd:15:a7:13:47:46:
         6c:e1:b6:7c:e2:a5:5d:43:50:08:ad:bb:c9:44:60:d8:d7:ce:
         92:f8:5a:b6:2a:8f:41:3f:3f:88:c9:40:bb:a3:cf:bb:87:3a:
         42:df:a0:e3:7e:31:52:05:2c:7a:e8:f5:75:c1:0b:72:22:99:
         59:17:27:19:d0:2b:f9:7f:6b:b6:76:4b:0e:ab:74:3b:36:44:
         5f:bb:3f:97:63:c2:8d:27:e0:68:2d:80:5c:fc:18:9a:47:1d:
         13:51:80:9e:08:f1:93:db:9a:c8:a8:60:4e:f6:45:28:a3:75:
         11:55:ef:21:bb:4a:03:b0:60:9b:44:88:43:2c:e2:a0:90:d3:
         47:a4:b6:b1:e1:79:15:d9:30:d3:84:91:49:c2:a0:f4:0a:93:
         30:21:c7:5b:cc:f8:a8:04:27:29:23:13:ae:be:f8:4a:4c:7a:
         90:fb:5e:7f:b8:0c:7d:dc:87:e5:71:ed:97:0c:7d:6f:3d:25:
         48:a2:29:8c:25:35:b1:c4:23:03:b3:d1:32:20:fd:6d:5b:99:
         d8:84:83:e3:76:dd:9a:e2:77:b6:95:67:e0:ef:77:5f:d2:b3:
         28:1e:34:ee:71:33:58:05:f2:51:05:a5:d9:00:39:ba:63:53:
         47:28:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----