Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139342e302f32332d3234203d3e20383334.roa
File:                     3135372e3235342e3139342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          //hWm1VV+YhG5UM2ZwxxF3O+Mfc3s2t+RHrieJrVjpQ=
Subject key identifier:   2A:E9:D4:60:6B:22:1C:7E:70:0D:6E:55:D9:2F:A1:24:37:A0:5C:E8
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       74C6A07DD8C0609BE50EA2591F946E7EC5B70035
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139342e302f32332d3234203d3e20383334.roa
Signing time:             Thu 03 Aug 2023 15:00:10 +0000
ROA not before:           Thu 03 Aug 2023 14:55:10 +0000
ROA not after:            Thu 01 Aug 2024 15:00:10 +0000
asID:                     834
IP address blocks:        157.254.194.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c6:a0:7d:d8:c0:60:9b:e5:0e:a2:59:1f:94:6e:7e:c5:b7:00:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug  3 14:55:10 2023 GMT
            Not After : Aug  1 15:00:10 2024 GMT
        Subject: CN=2AE9D4606B221C7E700D6E55D92FA12437A05CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:c9:fd:70:4b:92:ef:bb:17:78:b8:83:82:
                    d2:50:b0:26:26:30:e5:4a:53:3e:52:8d:03:25:50:
                    55:2b:c9:29:74:45:12:22:61:1c:57:49:f9:66:8d:
                    94:eb:d2:ad:90:65:23:db:3a:8b:e0:9c:b1:78:c3:
                    4a:13:59:72:82:b1:48:d9:c9:ed:62:dc:e7:1b:38:
                    fd:e8:52:f9:0d:d5:a6:48:cb:83:4d:a3:3d:5a:c6:
                    1a:59:71:61:78:e6:07:db:71:60:b5:21:f4:0e:ab:
                    37:8d:68:cf:3f:af:ed:c5:87:73:e2:0d:8d:20:c9:
                    04:93:47:fb:33:7a:5a:3f:d8:6c:63:5c:d2:e2:45:
                    3f:15:bb:4f:22:37:d4:a7:46:b5:21:c2:e2:18:7b:
                    5b:5d:cf:72:2a:17:fa:e8:b5:b2:ca:fc:37:05:21:
                    02:dc:d3:8f:bd:63:6c:ce:0f:6e:ef:f3:04:15:2e:
                    3a:c5:54:99:81:f4:13:3c:67:e8:63:ac:02:9d:29:
                    12:f2:68:fb:61:4a:67:a5:ee:2f:ca:e1:01:f8:4d:
                    8b:0f:f9:2b:0f:56:94:41:4e:ab:ee:68:91:ec:fc:
                    db:b8:d1:77:91:c9:80:30:fd:25:38:f0:c7:3f:9b:
                    27:ed:6f:f3:90:aa:f8:79:45:fc:ec:47:da:5e:05:
                    2a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E9:D4:60:6B:22:1C:7E:70:0D:6E:55:D9:2F:A1:24:37:A0:5C:E8
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139342e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:eb:1f:97:a2:eb:fe:12:23:b5:2c:c2:23:31:ac:3f:9c:87:
         82:b7:73:57:56:1a:24:a8:83:8e:41:91:a8:57:98:ad:d6:b0:
         e2:a5:ba:ca:dc:20:88:87:c6:4a:5f:25:36:95:55:d3:b0:15:
         59:a0:e7:c1:b1:27:33:d9:f7:a5:e4:e7:69:ae:e0:33:95:3d:
         87:89:9e:35:4b:59:86:c8:a9:ca:a9:4e:7b:c4:9f:0c:7f:a3:
         de:8a:65:6e:ca:bc:db:f9:94:e6:7d:87:57:07:97:f8:5a:b1:
         74:4d:b3:b4:63:d0:3e:b3:24:4b:0a:11:5f:f2:03:8c:71:8c:
         56:e0:cd:50:94:89:36:3c:02:6a:0e:f9:e2:67:4c:88:f2:5c:
         4e:9b:86:9b:84:d8:53:dc:7b:06:ac:4f:c7:f2:35:0d:72:87:
         2b:77:0a:5c:84:82:2b:32:b8:0e:f4:01:96:cf:1b:71:00:83:
         89:b2:f3:c8:5b:a0:64:21:9e:13:8b:b1:5d:4a:23:4a:d3:ec:
         f0:9a:c6:5d:62:e9:62:1d:4a:46:6d:44:b6:03:95:36:72:60:
         8f:8b:ca:7b:b1:f9:be:eb:09:15:b1:cc:bf:d8:39:70:07:96:
         d1:53:4e:b0:c7:10:f3:75:cf:71:9d:89:21:58:68:b6:88:21:
         e3:85:d5:de
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUdMagfdjAYJvlDqJZH5RufsW3ADUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwODAzMTQ1NTEwWhcNMjQwODAxMTUwMDEw
WjAzMTEwLwYDVQQDEygyQUU5RDQ2MDZCMjIxQzdFNzAwRDZFNTVEOTJGQTEyNDM3
QTA1Q0U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrPJ/XBLku+7
F3i4g4LSULAmJjDlSlM+Uo0DJVBVK8kpdEUSImEcV0n5Zo2U69KtkGUj2zqL4Jyx
eMNKE1lygrFI2cntYtznGzj96FL5DdWmSMuDTaM9WsYaWXFheOYH23FgtSH0Dqs3
jWjPP6/txYdz4g2NIMkEk0f7M3paP9hsY1zS4kU/FbtPIjfUp0a1IcLiGHtbXc9y
Khf66LWyyvw3BSEC3NOPvWNszg9u7/MEFS46xVSZgfQTPGfoY6wCnSkS8mj7YUpn
pe4vyuEB+E2LD/krD1aUQU6r7miR7PzbuNF3kcmAMP0lOPDHP5sn7W/zkKr4eUX8
7EfaXgUqAwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCrp1GBrIhx+cA1uVdkvoSQ3
oFzoMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMTM5MzQyZTMwMmYzMjMzMmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGd/sIwDQYJKoZIhvcNAQELBQAD
ggEBAC7rH5ei6/4SI7UswiMxrD+ch4K3c1dWGiSog45BkahXmK3WsOKlusrcIIiH
xkpfJTaVVdOwFVmg58GxJzPZ96Xk52mu4DOVPYeJnjVLWYbIqcqpTnvEnwx/o96K
ZW7KvNv5lOZ9h1cHl/hasXRNs7Rj0D6zJEsKEV/yA4xxjFbgzVCUiTY8AmoO+eJn
TIjyXE6bhpuE2FPcewasT8fyNQ1yhyt3ClyEgisyuA70AZbPG3EAg4my88hboGQh
nhOLsV1KI0rT7PCaxl1i6WIdSkZtRLYDlTZyYI+Lynux+b7rCRWxzL/YOXAHltFT
TrDHEPN1z3GdiSFYaLaIIeOF1d4=
-----END CERTIFICATE-----