Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139362e302f32332d3233203d3e20323030303137.roa
File:                     3135372e3235342e3139362e302f32332d3233203d3e20323030303137.roa (raw, json)
Hash identifier:          QSJOEJnymF0J6Y3gchi7EdiQX2eAD0pNu5km5qkzcxs=
Subject key identifier:   A5:7C:1A:05:BC:9A:C4:80:F1:F5:91:AF:34:EE:D5:58:7C:AF:87:88
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7CB834CD9FADE7417206310361628EB1E69DF06E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139362e302f32332d3233203d3e20323030303137.roa
Signing time:             Wed 03 May 2023 14:13:18 +0000
ROA not before:           Wed 03 May 2023 14:08:18 +0000
ROA not after:            Wed 01 May 2024 14:13:18 +0000
asID:                     200017
IP address blocks:        157.254.196.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b8:34:cd:9f:ad:e7:41:72:06:31:03:61:62:8e:b1:e6:9d:f0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  3 14:08:18 2023 GMT
            Not After : May  1 14:13:18 2024 GMT
        Subject: CN=A57C1A05BC9AC480F1F591AF34EED5587CAF8788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:bd:a5:a5:b6:8c:c3:4c:3d:e8:fe:9f:ea:
                    91:f9:92:45:8f:6c:f0:a8:65:33:eb:14:36:6b:a9:
                    e5:17:87:48:b1:98:8d:02:28:dd:b6:8c:e8:83:6d:
                    c6:7d:33:a6:11:3e:14:94:fd:9a:ea:88:b7:e3:55:
                    e1:13:d5:45:c2:26:08:48:7c:fd:67:68:6d:f4:bf:
                    10:fb:ad:89:2d:8e:82:19:97:95:cc:25:5f:87:3e:
                    f1:c4:85:1d:20:3a:b7:f5:d9:5e:9d:f0:76:dc:2e:
                    1c:ed:6a:85:d0:ec:48:96:ca:a2:c1:db:72:4c:74:
                    d3:52:2d:78:2f:59:13:0b:24:7b:48:dc:5f:67:88:
                    b1:d1:40:ba:6f:94:43:78:47:90:12:2b:f6:dc:76:
                    d2:80:55:aa:d4:07:f1:42:28:6f:d8:e0:fd:af:59:
                    7c:a9:81:6e:b3:42:0f:c5:54:99:53:53:a4:b5:60:
                    30:ac:97:57:10:5c:54:15:9c:d8:2e:22:e5:6c:b1:
                    95:5d:b9:a9:23:6d:92:71:e1:a3:53:ff:8d:32:92:
                    3b:cb:ab:00:af:3d:32:c9:11:82:74:64:9e:aa:e6:
                    51:f1:f4:cb:19:27:8e:d9:52:78:22:58:3e:a3:b3:
                    88:f9:ff:f9:0b:d1:a7:21:cd:81:ea:d9:8a:93:9d:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7C:1A:05:BC:9A:C4:80:F1:F5:91:AF:34:EE:D5:58:7C:AF:87:88
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139362e302f32332d3233203d3e20323030303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:c2:99:c9:94:8a:e1:bd:e5:7d:46:61:5b:cf:30:1c:28:49:
         09:c1:e6:40:78:b6:83:b5:9c:83:2d:43:5e:39:26:b6:ac:36:
         20:ee:25:e7:0c:e9:1c:c1:64:97:8c:71:27:5a:0c:80:10:98:
         21:bd:68:2e:e1:6c:eb:2c:b7:a9:dd:3b:b2:e3:c0:aa:f9:99:
         35:07:a8:b1:d1:fb:4b:de:3a:ad:c0:d7:83:a8:17:99:d8:7c:
         9e:23:8d:8b:b2:5d:52:fe:64:78:b7:4b:4f:20:66:2a:65:ee:
         fd:66:12:d3:24:19:27:12:ff:da:e9:52:78:ec:4a:d4:fe:bb:
         ad:a4:98:b4:8b:a9:25:7d:b7:ae:b2:08:4b:be:ab:0d:10:b7:
         47:ab:17:fa:d6:3d:eb:10:89:e4:ae:80:85:8b:df:15:a6:b9:
         cc:f3:4b:38:bd:66:e0:d2:50:39:a7:10:b4:98:b8:ff:ec:ea:
         dd:1c:05:20:c4:be:68:01:19:87:94:c5:06:88:3b:5f:00:db:
         86:fb:5b:83:f9:a5:2e:6f:73:91:38:50:d5:57:78:0a:50:2e:
         da:7a:97:af:44:0e:d7:2f:f0:fc:30:ef:ef:8d:52:89:4f:e1:
         01:61:68:fd:71:44:82:1c:8c:17:89:ba:95:04:13:f6:60:18:
         e6:2a:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----