Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231362e302f32342d3234203d3e203439393831.roa
File:                     3135372e3235342e3231362e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier:          NAmqBbiekIZ2XdUXYFq+jnFYcWO5YuvvghROqajS6I0=
Subject key identifier:   CB:A4:85:24:02:7C:1F:0A:76:39:B9:A9:8B:C2:88:80:B8:1E:39:81
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       59F86FD6D8044D1731FBEB618F8CD5D59D249179
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231362e302f32342d3234203d3e203439393831.roa
Signing time:             Mon 28 Aug 2023 12:41:40 +0000
ROA not before:           Mon 28 Aug 2023 12:36:40 +0000
ROA not after:            Mon 26 Aug 2024 12:41:40 +0000
asID:                     49981
IP address blocks:        157.254.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Aug 2023 07:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f8:6f:d6:d8:04:4d:17:31:fb:eb:61:8f:8c:d5:d5:9d:24:91:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 28 12:36:40 2023 GMT
            Not After : Aug 26 12:41:40 2024 GMT
        Subject: CN=CBA48524027C1F0A7639B9A98BC28880B81E3981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7e:81:38:b0:13:8f:10:f1:f9:2d:33:28:58:
                    f8:a6:69:fc:7f:84:f4:13:87:1c:a4:50:1b:62:c7:
                    b7:ae:f6:d2:69:6b:5e:b8:7d:e2:a0:cf:b2:ff:75:
                    ef:b2:ef:5b:3e:86:89:79:73:79:fd:f3:13:f1:c7:
                    b4:31:b2:b8:e2:75:db:03:f5:5a:91:8c:c1:9a:14:
                    88:b9:82:2d:60:04:39:d8:12:2a:4e:23:d3:61:6d:
                    bb:a1:60:16:82:c6:8b:b9:f2:fe:a5:67:d1:ce:36:
                    df:a8:7a:fc:b4:17:5f:58:52:d8:eb:18:ea:4c:ee:
                    d5:57:89:20:54:fe:a1:8e:4f:5d:e4:3f:91:9d:56:
                    71:86:12:b5:39:b2:ee:c3:e0:26:60:1f:77:22:f1:
                    8d:8e:d2:2d:b3:98:1b:4d:28:ad:2d:aa:30:5d:05:
                    a9:12:83:f8:fa:06:d7:fd:34:cf:eb:50:fa:59:b6:
                    5a:11:74:19:d3:ce:2a:15:72:d3:b4:9b:f0:83:75:
                    af:43:20:9e:42:3b:eb:01:b9:18:10:79:7d:28:e6:
                    27:ca:3b:c7:c6:f9:a0:5f:f2:a1:32:79:74:c1:9d:
                    72:71:65:ac:46:3a:8c:34:84:44:e9:ba:fd:2c:75:
                    25:7d:69:67:d6:d1:4b:93:f0:62:3f:34:0c:08:17:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A4:85:24:02:7C:1F:0A:76:39:B9:A9:8B:C2:88:80:B8:1E:39:81
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231362e302f32342d3234203d3e203439393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:cb:7f:79:af:fa:d2:b3:96:eb:7f:15:b5:c5:70:20:7b:99:
         4d:61:cb:30:2a:5e:41:a7:78:24:e2:da:77:38:71:ad:bf:9f:
         3f:26:73:ec:3e:aa:14:f6:58:5b:4f:87:d8:5b:5f:59:38:09:
         bc:fc:be:75:59:42:96:a7:37:64:0d:ed:98:6f:ee:03:5a:d4:
         0e:93:a3:85:eb:10:c6:8a:27:de:b8:2d:b9:0e:01:2c:b8:fe:
         09:2d:f4:6f:c2:8c:68:5d:b7:1c:f3:7b:b1:90:32:d1:74:4b:
         d0:3b:df:32:9b:e6:b3:3b:80:08:b8:2f:8d:8b:c4:38:c9:10:
         1a:77:8b:fd:7b:7d:f5:73:b6:ca:d7:75:dc:e3:81:5f:11:5a:
         02:55:ed:01:5b:a8:91:e3:74:10:bb:67:15:2b:f9:a3:9d:5b:
         c4:7d:6a:a0:97:c4:ca:53:47:e6:88:26:e3:ab:80:f5:2a:4c:
         94:48:5a:e0:d8:45:9b:79:cc:13:8e:97:69:c3:de:cf:9f:62:
         9b:18:f8:4d:fb:55:e4:1a:29:3d:53:41:08:62:35:10:28:29:
         e4:72:aa:64:a0:6b:46:54:62:22:07:c5:57:7c:cc:a8:4a:86:
         84:47:11:8f:33:cd:1c:10:54:eb:ca:14:ec:74:a4:d5:af:c0:
         cf:55:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----