Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231382e302f32342d3234203d3e20383334.roa
File:                     3135372e3235342e3231382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          e0ZAp2NpqtkMjJwgLJHpniPJxThvSu1ymZ6hz1B9zuQ=
Subject key identifier:   35:9B:AE:37:9F:A9:1A:8A:3A:CF:D8:F7:B5:01:37:23:36:E6:50:88
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3AC4A4A36FB265C6C5C831D3F92E06BF90C80C99
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231382e302f32342d3234203d3e20383334.roa
Signing time:             Tue 06 Jun 2023 00:00:06 +0000
ROA not before:           Mon 05 Jun 2023 23:55:06 +0000
ROA not after:            Tue 04 Jun 2024 00:00:06 +0000
asID:                     834
IP address blocks:        157.254.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c4:a4:a3:6f:b2:65:c6:c5:c8:31:d3:f9:2e:06:bf:90:c8:0c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun  5 23:55:06 2023 GMT
            Not After : Jun  4 00:00:06 2024 GMT
        Subject: CN=359BAE379FA91A8A3ACFD8F7B501372336E65088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:cb:c9:c2:77:87:20:a9:87:39:06:21:cb:
                    a9:38:eb:71:85:77:f2:81:51:ad:d9:3e:d4:f4:f3:
                    1c:ee:1a:d4:19:7b:b5:b4:7c:b4:b1:c6:b9:ee:c4:
                    8f:a0:84:c9:3e:21:49:27:5d:68:4c:e1:6d:0b:aa:
                    46:9e:80:55:42:96:0c:b9:b9:87:7b:6b:e7:5d:52:
                    4b:85:df:ec:31:95:02:0a:5e:8d:7b:66:ef:17:51:
                    4c:69:2b:fc:13:d4:fa:40:78:ff:38:15:33:5d:47:
                    b5:6c:a0:b2:a0:05:9c:19:09:88:8a:07:af:1c:6b:
                    9e:27:ce:98:83:e7:cb:fa:95:ce:a5:01:ef:74:ca:
                    b5:b9:62:2a:7a:ae:d1:3b:ec:b6:8d:fc:8b:82:89:
                    1b:42:3a:df:09:9f:4a:29:00:58:9b:ba:48:c7:10:
                    d2:bf:f1:32:0d:2c:80:7a:b4:50:1a:14:5d:89:50:
                    97:20:88:23:04:45:c8:73:2b:a9:f2:af:bb:a7:36:
                    d8:e9:a4:9d:8c:ce:b2:e2:8a:24:8b:12:db:55:63:
                    95:78:b2:d8:39:5d:b1:28:44:ea:44:83:8b:39:93:
                    d9:f6:19:99:a5:48:55:41:06:af:0f:5e:61:29:91:
                    77:03:cc:6e:f2:2d:2d:4f:85:75:a3:e1:5b:16:c3:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9B:AE:37:9F:A9:1A:8A:3A:CF:D8:F7:B5:01:37:23:36:E6:50:88
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:dd:27:1a:c1:8a:d1:bf:11:8d:44:78:9f:64:92:fa:2c:
         0e:f6:a3:ae:67:a6:22:20:31:96:57:5d:6b:1d:fe:5e:77:4d:
         3b:41:48:66:71:c3:8b:81:c8:8a:b8:74:24:c4:64:66:b7:9d:
         c5:ae:de:2d:2b:cc:41:0e:4c:11:c4:92:ce:56:1d:98:16:6a:
         06:51:c6:92:b1:15:81:db:e8:4e:7c:8b:85:f7:35:99:21:90:
         07:50:1a:65:46:1e:5f:50:18:b1:cd:42:98:b8:9b:c9:37:5d:
         4f:24:21:70:51:16:9a:7f:91:48:47:d0:6b:bd:cb:51:68:e6:
         0e:ea:42:0d:44:58:2c:98:b9:38:be:db:0b:40:4c:47:61:69:
         76:85:9d:3f:ad:34:37:ad:75:8a:59:d5:b9:02:36:ab:7a:22:
         9b:2f:ab:a6:32:b9:21:5d:66:28:72:37:fc:7d:68:66:e9:25:
         f7:d2:75:38:70:2f:8a:b2:30:84:72:38:6f:b5:f9:05:a3:7f:
         d3:e4:c9:b8:3b:61:c5:0c:d1:71:d2:e4:9e:e6:b1:50:41:60:
         71:d1:e5:96:6c:ee:6c:43:c0:e1:18:52:28:a6:ee:20:26:12:
         a0:0a:c2:97:ec:19:23:11:2c:9c:2f:d9:8d:af:37:9d:4d:d3:
         70:9e:73:cf
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUOsSko2+yZcbFyDHT+S4Gv5DIDJkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwNjA1MjM1NTA2WhcNMjQwNjA0MDAwMDA2
WjAzMTEwLwYDVQQDEygzNTlCQUUzNzlGQTkxQThBM0FDRkQ4RjdCNTAxMzcyMzM2
RTY1MDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwnLycJ3hyCp
hzkGIcupOOtxhXfygVGt2T7U9PMc7hrUGXu1tHy0sca57sSPoITJPiFJJ11oTOFt
C6pGnoBVQpYMubmHe2vnXVJLhd/sMZUCCl6Ne2bvF1FMaSv8E9T6QHj/OBUzXUe1
bKCyoAWcGQmIigevHGueJ86Yg+fL+pXOpQHvdMq1uWIqeq7RO+y2jfyLgokbQjrf
CZ9KKQBYm7pIxxDSv/EyDSyAerRQGhRdiVCXIIgjBEXIcyup8q+7pzbY6aSdjM6y
4ookixLbVWOVeLLYOV2xKETqRIOLOZPZ9hmZpUhVQQavD15hKZF3A8xu8i0tT4V1
o+FbFsOkpQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDWbrjefqRqKOs/Y97UBNyM2
5lCIMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjMxMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/towDQYJKoZIhvcNAQELBQAD
ggEBAEj03ScawYrRvxGNRHifZJL6LA72o65npiIgMZZXXWsd/l53TTtBSGZxw4uB
yIq4dCTEZGa3ncWu3i0rzEEOTBHEks5WHZgWagZRxpKxFYHb6E58i4X3NZkhkAdQ
GmVGHl9QGLHNQpi4m8k3XU8kIXBRFpp/kUhH0Gu9y1Fo5g7qQg1EWCyYuTi+2wtA
TEdhaXaFnT+tNDetdYpZ1bkCNqt6Ipsvq6YyuSFdZihyN/x9aGbpJffSdThwL4qy
MIRyOG+1+QWjf9Pkybg7YcUM0XHS5J7msVBBYHHR5ZZs7mxDwOEYUiim7iAmEqAK
wpfsGSMRLJwv2Y2vN51N03Cec88=
-----END CERTIFICATE-----