Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232332e302f32342d3234203d3e20383334.roa
File:                     3135372e3235342e3232332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          XTfFN0a+0NJHiJNQ6etpS92j/psz/aZqcOC62L0vzkA=
Subject key identifier:   A1:9F:70:91:22:2E:7A:D5:DF:97:09:4F:60:AC:92:B3:EA:1E:1D:AB
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3D08FF8F109841B6882CB09D6F7D6AA672AC9D8C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232332e302f32342d3234203d3e20383334.roa
Signing time:             Mon 14 Aug 2023 12:00:02 +0000
ROA not before:           Mon 14 Aug 2023 11:55:02 +0000
ROA not after:            Mon 12 Aug 2024 12:00:02 +0000
asID:                     834
IP address blocks:        157.254.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:08:ff:8f:10:98:41:b6:88:2c:b0:9d:6f:7d:6a:a6:72:ac:9d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 14 11:55:02 2023 GMT
            Not After : Aug 12 12:00:02 2024 GMT
        Subject: CN=A19F7091222E7AD5DF97094F60AC92B3EA1E1DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:21:b6:03:8e:de:3b:06:29:ca:18:05:21:
                    5d:84:d3:33:e7:d6:4f:55:73:3e:05:0f:db:e7:6c:
                    28:0f:e2:7f:ab:85:e1:5e:56:73:c6:6a:71:fe:14:
                    51:49:d2:2b:35:60:34:25:e9:c0:40:f8:6a:04:ef:
                    e1:95:d7:09:ae:6a:21:f5:4d:1e:8a:57:a4:00:7a:
                    f3:0b:fb:75:d9:19:7f:0f:48:53:52:9a:a7:02:0d:
                    38:89:b2:56:4f:c2:02:04:55:e5:19:da:00:73:77:
                    46:ad:13:b2:18:41:d5:0a:40:29:5f:ed:c9:b7:f1:
                    f6:e5:d4:d4:0d:75:75:25:95:9a:01:8e:38:c5:33:
                    dd:85:41:42:0a:03:5f:2d:a2:3c:be:ba:45:02:a5:
                    b0:12:42:2d:26:f8:5a:47:15:07:58:1d:73:01:2f:
                    10:83:81:d6:98:ba:8d:1b:57:95:29:02:5e:18:1f:
                    cd:e6:aa:cc:0a:62:8d:59:3f:13:09:07:3c:1b:5e:
                    6c:93:47:ee:a2:db:b6:a3:f9:72:7d:78:f6:17:a3:
                    3b:4a:d9:dc:c0:56:b3:24:b7:ea:e5:a1:0a:88:26:
                    06:4c:4e:17:da:b3:5d:95:de:f1:63:63:2f:31:1f:
                    18:85:16:96:46:c5:dc:a7:2b:99:8d:a2:90:2e:6c:
                    a0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9F:70:91:22:2E:7A:D5:DF:97:09:4F:60:AC:92:B3:EA:1E:1D:AB
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:c3:09:dd:c1:5d:5d:47:5d:c9:ef:dd:1c:84:a2:08:a7:c8:
         23:fe:14:6b:7e:08:39:a5:5b:d1:c1:e3:03:cf:cf:19:06:14:
         d6:d7:27:76:f9:d6:54:18:42:78:18:27:77:d7:65:a9:cc:f7:
         ab:b0:30:00:ff:36:e6:19:82:6d:03:e7:64:b1:57:7c:e0:45:
         3d:cd:c5:a6:4b:b4:10:38:6d:9a:cd:bb:e8:ca:20:14:bb:6e:
         f4:6d:e9:de:00:87:6c:77:7b:cc:5a:7b:76:50:19:30:b1:d3:
         85:e2:07:e5:cf:9e:3d:f4:9d:b3:2f:84:e2:09:12:e1:a3:ae:
         3f:d8:52:4d:d2:68:bd:51:3e:2d:20:d7:9a:a4:5f:84:d4:79:
         58:6c:84:79:48:62:93:d2:64:6c:ac:8b:5a:e9:6f:c1:1c:1b:
         46:1d:35:4e:ef:b2:9d:30:33:76:01:ea:17:20:2d:3e:88:7f:
         94:bb:6a:2a:07:16:a4:94:44:e1:03:32:e8:b6:73:9b:59:32:
         13:cc:47:1b:7d:3a:f3:98:97:c1:02:54:d4:7c:27:43:5e:57:
         92:ce:25:87:54:2c:5a:70:16:ec:5e:50:63:99:aa:3c:bf:58:
         32:d6:5b:9b:b8:f6:40:23:93:eb:79:54:b8:80:76:fa:69:af:
         b5:9b:54:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----