Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232332e302f32342d3234203d3e20323133313836.roa
File:                     3135372e3235342e3232332e302f32342d3234203d3e20323133313836.roa (raw, json)
Hash identifier:          6W7EMY3vkxU/UQ+hrHnPYi4SnGkhFmWH/TtUexIo84s=
Subject key identifier:   97:8E:62:6F:86:15:50:03:40:DA:F1:3B:B4:A7:37:9D:4E:77:32:17
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0CD96E8B134DFB8353061260A79FAFB3EA33C0CB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232332e302f32342d3234203d3e20323133313836.roa
Signing time:             Fri 25 Aug 2023 12:39:10 +0000
ROA not before:           Fri 25 Aug 2023 12:34:10 +0000
ROA not after:            Fri 23 Aug 2024 12:39:10 +0000
asID:                     213186
IP address blocks:        157.254.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Aug 2023 07:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d9:6e:8b:13:4d:fb:83:53:06:12:60:a7:9f:af:b3:ea:33:c0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 25 12:34:10 2023 GMT
            Not After : Aug 23 12:39:10 2024 GMT
        Subject: CN=978E626F8615500340DAF13BB4A7379D4E773217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:5a:8a:e1:6c:b6:1f:bf:b0:ac:e2:aa:e4:
                    ab:9c:dc:6f:6d:5d:de:ac:16:2d:ce:81:27:1f:48:
                    39:7b:ed:85:80:e8:7e:c2:c0:cf:4a:85:94:12:4e:
                    e2:7b:b4:a2:8d:cd:f0:f0:bd:36:15:ba:b3:c1:51:
                    5b:9c:c1:44:b9:fb:6d:68:b5:b7:ae:d7:2f:d8:ee:
                    b0:67:6b:b9:40:be:9f:38:5e:f4:37:41:53:33:e4:
                    e6:af:fb:78:31:a1:4d:37:07:19:d3:83:e7:7f:e0:
                    2f:82:c4:fe:19:58:23:8f:6f:e0:6a:77:34:51:fd:
                    f0:49:19:74:69:e2:cb:45:2e:c2:88:67:f9:62:38:
                    13:09:62:a3:8b:db:93:ae:19:04:da:b1:bf:05:1f:
                    8d:da:84:17:c1:1e:95:7d:e3:53:89:ce:8d:ce:25:
                    09:f5:06:95:ab:71:60:10:3a:6a:2c:4f:e4:a2:9b:
                    ea:1b:a1:ea:e0:8a:8b:13:73:d8:3d:aa:0f:6f:4c:
                    9b:cd:78:d7:ab:67:00:c2:6c:f5:99:0e:c8:1c:be:
                    ea:a3:2c:73:c9:ed:fe:29:f4:4f:67:72:d6:28:75:
                    cc:d0:7b:9b:4c:9b:6a:d5:c1:26:7c:c5:0a:97:7f:
                    e5:05:9f:04:a3:78:66:87:a8:50:5b:b1:63:ee:50:
                    e0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8E:62:6F:86:15:50:03:40:DA:F1:3B:B4:A7:37:9D:4E:77:32:17
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232332e302f32342d3234203d3e20323133313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7b:be:15:97:db:e1:c9:a4:66:18:55:38:b1:13:ea:03:01:
         51:6b:af:5b:aa:df:ac:1c:74:bb:66:b5:e0:07:a8:73:79:c3:
         ce:a3:85:aa:49:a2:6b:7e:5e:e4:9e:59:0b:0a:f3:5c:d7:2e:
         ae:59:c3:37:68:e0:9d:8e:b5:d0:08:84:c8:54:ad:80:38:cf:
         01:5b:52:59:b7:08:25:3d:71:75:3b:a9:01:7a:05:85:93:a4:
         c0:bc:d9:83:2b:91:af:7a:80:4e:1f:c8:24:ea:dc:50:5b:38:
         48:3b:12:5c:d1:a0:d4:36:b6:62:a4:ed:b6:25:56:9c:63:76:
         0d:6c:7b:a9:07:29:d2:f6:5f:34:74:af:e4:8b:c7:67:28:e5:
         d0:d0:37:49:41:52:e9:17:4a:a4:10:d4:1d:e6:59:ff:4d:4b:
         42:96:b4:de:9b:a1:f0:42:f7:d9:b2:c1:f3:8d:88:2e:26:f9:
         36:40:5c:61:6f:06:d8:3c:f3:aa:3d:c4:f7:99:85:e2:8a:fd:
         9b:e4:0e:f6:a2:f2:da:90:c5:8f:c3:f5:c8:d2:bd:53:ed:d1:
         d6:b4:a3:c3:87:6d:31:b6:ff:86:14:53:da:21:66:83:9a:0b:
         f3:88:75:77:fd:e3:0f:5a:d8:12:48:da:d3:a9:8a:ad:b7:48:
         a3:1e:98:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----