Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231362e302f32342d3234203d3e20383334.roa
File:                     3135372e3235342e3231362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          O0Vr3tyIEg27akgcRnrpuxPrnLUPElmMd2NZpMGecGU=
Subject key identifier:   01:EE:FC:C9:82:69:39:BF:20:B8:8F:27:E1:37:BE:CE:E6:53:95:E9
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5ABCF5AC83226262003613185D2AB0E13679CF1F
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231362e302f32342d3234203d3e20383334.roa
Signing time:             Thu 24 Aug 2023 00:00:07 +0000
ROA not before:           Wed 23 Aug 2023 23:55:07 +0000
ROA not after:            Thu 22 Aug 2024 00:00:07 +0000
asID:                     834
IP address blocks:        157.254.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 28 Aug 2023 12:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bc:f5:ac:83:22:62:62:00:36:13:18:5d:2a:b0:e1:36:79:cf:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 23 23:55:07 2023 GMT
            Not After : Aug 22 00:00:07 2024 GMT
        Subject: CN=01EEFCC9826939BF20B88F27E137BECEE65395E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:ba:6c:4d:db:73:fb:da:b3:14:e0:1b:fa:
                    0f:3b:19:24:70:f4:8b:07:1e:ef:54:ac:b8:60:a5:
                    29:35:a3:75:4f:8a:65:95:8a:ba:79:64:53:65:38:
                    77:ae:54:71:e0:88:bd:7b:0e:d8:61:29:9a:95:d9:
                    1a:f1:5b:4e:12:5f:d6:95:f5:ca:90:b5:04:0a:67:
                    ea:4f:57:da:fb:a8:17:d3:68:33:bc:eb:05:ec:38:
                    ee:b2:f7:22:f7:22:18:20:30:9a:5b:39:83:f0:25:
                    ef:f7:5f:50:b7:7c:6a:d7:7e:ef:ad:d6:b2:bb:cb:
                    ce:4f:cf:de:9e:e2:80:7a:51:61:aa:3e:4d:47:ee:
                    fc:fc:4d:61:d2:ed:69:6d:06:9b:8e:3b:6e:6b:fb:
                    03:ed:15:1e:e1:73:61:53:31:17:a8:8e:a6:c0:06:
                    1d:88:c7:39:f0:48:75:c7:d4:e8:15:7e:d0:55:aa:
                    17:40:bb:46:6a:a6:3d:8a:dc:a2:38:71:10:7a:c2:
                    4f:87:fe:05:88:c9:f7:61:e7:8f:24:e8:80:aa:c1:
                    98:f5:9a:cb:c7:10:1c:dc:5b:be:10:0b:41:20:3e:
                    c5:89:07:53:cc:b5:a3:2b:ec:22:3d:8a:5e:f3:85:
                    8c:ec:a2:01:68:87:46:53:2a:ed:16:44:fe:86:66:
                    55:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EE:FC:C9:82:69:39:BF:20:B8:8F:27:E1:37:BE:CE:E6:53:95:E9
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:f9:92:15:6e:7e:91:64:37:d6:66:ee:e1:a5:5c:14:95:
         e0:ba:ff:5f:db:1c:9e:56:f2:9e:11:1f:c5:e5:e4:8e:40:34:
         fa:24:b0:d0:ea:cd:63:7c:89:cf:8c:70:a3:6b:bb:15:a0:1d:
         76:4b:2b:e2:3a:0f:10:a4:9d:16:b5:62:e5:2b:40:f7:b2:24:
         e4:4e:93:fc:6a:61:97:28:fd:ea:05:ab:42:44:12:c4:8c:c3:
         73:8f:65:7a:91:9f:7f:a1:fe:67:c9:0e:72:25:65:18:ae:c8:
         79:ef:cf:11:e4:83:9c:f9:6f:e1:2d:3d:24:66:3d:54:16:f0:
         89:c2:8c:f2:dc:8a:70:81:8b:1c:6d:45:06:14:1a:be:5a:87:
         54:f9:bb:15:08:62:43:85:5e:a8:92:6a:e9:35:60:e6:f3:12:
         35:46:f4:15:41:7d:5c:7b:22:84:f3:66:31:55:50:68:94:e8:
         14:e1:53:fb:76:21:b1:69:67:96:bb:c1:07:42:2e:17:97:e6:
         51:02:d6:2b:95:f0:89:ac:45:b8:7a:37:e6:28:f7:b8:bf:a6:
         a2:5d:be:83:78:42:f9:ef:4f:dc:76:17:a6:f3:4b:b7:1c:ef:
         f3:c4:c9:aa:68:ec:2c:2d:40:3b:11:c4:dc:ae:e9:4b:7d:6c:
         72:5f:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----