Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139342e302f32332d3233203d3e203134393536.roa
File:                     3135372e3235342e3139342e302f32332d3233203d3e203134393536.roa (raw, json)
Hash identifier:          psveh4B3sXHhy9bH2wJdjsHFllKMQqE8ewcdkWxqaMU=
Subject key identifier:   21:2E:F1:A4:4E:E3:2C:0F:83:6B:01:6A:68:13:3A:5D:AF:12:61:B9
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       73EA469F46890FFA805BAB55F02C0ADDB7056725
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139342e302f32332d3233203d3e203134393536.roa
Signing time:             Tue 13 Jun 2023 06:00:32 +0000
ROA not before:           Tue 13 Jun 2023 05:55:32 +0000
ROA not after:            Tue 11 Jun 2024 06:00:32 +0000
asID:                     14956
IP address blocks:        157.254.194.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 03 Aug 2023 15:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ea:46:9f:46:89:0f:fa:80:5b:ab:55:f0:2c:0a:dd:b7:05:67:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 13 05:55:32 2023 GMT
            Not After : Jun 11 06:00:32 2024 GMT
        Subject: CN=212EF1A44EE32C0F836B016A68133A5DAF1261B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:a0:68:ef:d9:1e:3e:de:22:46:83:b2:e6:
                    6c:15:9c:91:b2:a6:33:80:a0:26:c2:ae:b3:fe:3d:
                    0c:0b:3d:d9:a6:b0:f5:e1:d7:ec:a2:45:9d:20:d9:
                    d6:c9:b9:f2:e4:05:fe:6a:9d:75:f6:77:54:5b:60:
                    4d:1c:60:4e:0e:95:8b:5c:05:d7:39:f3:c9:b6:cd:
                    34:d8:c1:9d:e8:72:4a:67:f5:4f:35:56:9b:7c:ad:
                    69:35:31:af:f3:d2:d4:1f:a5:66:11:c8:d4:5e:e1:
                    b4:a9:7f:17:56:4b:d8:f8:2f:05:1f:a8:eb:7f:9f:
                    49:e9:74:70:8a:61:0a:90:60:84:73:9b:26:5d:67:
                    1d:27:61:7d:27:23:7f:f4:2f:aa:ab:d6:7e:ed:ff:
                    80:75:51:70:a6:ef:20:b6:c4:12:da:61:b1:e9:ee:
                    2c:b2:59:32:eb:ad:af:61:ef:eb:22:3c:e8:77:48:
                    23:9a:ac:47:41:79:45:96:77:40:59:a0:96:b1:89:
                    ad:04:ca:9c:47:61:6b:e6:56:46:28:32:21:85:6a:
                    44:4a:17:86:97:7d:a7:5b:32:4d:40:53:32:93:5d:
                    64:8d:b7:ba:ff:74:b4:5a:5c:b8:8d:9a:dd:02:05:
                    e4:a2:6e:e8:1a:64:cc:ee:c6:f8:30:b9:b1:09:66:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2E:F1:A4:4E:E3:2C:0F:83:6B:01:6A:68:13:3A:5D:AF:12:61:B9
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139342e302f32332d3233203d3e203134393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:6b:8c:54:e7:74:e1:4b:c9:10:bf:e6:09:9d:64:8d:d4:c0:
         d6:9a:51:a4:6f:3d:87:28:bc:91:08:ad:29:d6:81:43:aa:43:
         55:67:c5:d3:d9:6a:34:d4:c3:82:73:20:68:f6:15:71:df:cf:
         21:c4:01:ce:4f:9c:82:94:13:a6:d4:54:b5:2c:fe:b0:a3:db:
         7d:ee:14:4d:1b:3e:c0:43:73:61:71:fe:ae:36:84:63:fe:fd:
         3f:3b:dd:f1:70:98:5d:0f:2a:ea:20:fd:16:0b:24:39:93:e0:
         4f:ca:92:6a:15:88:17:b1:8d:73:ed:7c:14:a0:ad:ff:00:af:
         e2:e7:31:43:45:71:9c:c8:6c:00:80:21:78:4d:b3:76:67:60:
         74:9e:9c:f0:6c:7b:25:05:0f:38:db:c6:59:24:df:54:63:b3:
         66:08:4c:d7:77:73:4f:51:ed:ef:a1:61:98:36:f4:f6:a2:a7:
         49:7f:55:24:20:a1:e4:73:15:14:95:89:fa:04:93:90:b4:07:
         ee:3d:fd:af:ec:52:ef:47:fa:83:33:7d:ef:c8:c4:90:a2:30:
         c7:4d:22:e5:54:ea:c9:a9:33:ad:f2:c8:11:26:dc:6b:aa:1e:
         9e:65:18:1e:ed:71:a6:59:09:3d:fa:37:1c:b7:00:58:86:9c:
         25:5b:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----