Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e203631333137.roa
File:                     3135372e3235342e3232352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          WHR9dc+K7x8IoH7OwCQ+D7DW3+4QEQhU+apZgfHVQ5E=
Subject key identifier:   E5:D2:39:4E:99:7C:82:63:9D:21:82:71:E5:BA:C5:6B:4C:63:F2:0E
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       52713DE4033A9FC3012DA36E19371735529EF584
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 07 Aug 2023 15:09:09 +0000
ROA not before:           Mon 07 Aug 2023 15:04:09 +0000
ROA not after:            Mon 05 Aug 2024 15:09:09 +0000
asID:                     61317
IP address blocks:        157.254.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:71:3d:e4:03:3a:9f:c3:01:2d:a3:6e:19:37:17:35:52:9e:f5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug  7 15:04:09 2023 GMT
            Not After : Aug  5 15:09:09 2024 GMT
        Subject: CN=E5D2394E997C82639D218271E5BAC56B4C63F20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d9:7c:d1:69:de:8b:f8:3d:8a:20:ae:dc:f6:
                    ea:bc:48:49:cb:e1:59:18:d0:af:94:d1:e6:1e:d5:
                    ad:11:79:b0:b6:01:a0:91:77:89:21:8c:dc:4a:9e:
                    88:a4:73:92:60:2f:c8:ed:96:1d:2d:56:02:58:f3:
                    e5:2b:01:a1:53:3e:ed:90:c9:af:8a:80:00:c7:75:
                    e6:45:29:93:83:6b:ea:7d:a1:d9:54:0a:57:fc:32:
                    77:23:55:90:7a:9a:dc:48:bb:d1:b3:fb:78:23:b2:
                    f5:12:00:e6:e5:96:5c:e5:f1:da:a5:6c:e9:ae:08:
                    85:c7:cb:6c:5d:97:24:01:b1:87:0e:da:9d:97:3f:
                    5a:6e:ca:e7:65:76:49:2f:30:20:be:80:08:4a:3a:
                    d6:f4:cf:f0:f4:3b:3b:d8:e8:52:df:77:23:78:1a:
                    69:92:f1:4e:1e:66:2b:52:62:06:71:f2:3a:43:a7:
                    b8:78:8f:4e:7f:f1:1e:61:ff:84:47:07:de:f2:73:
                    84:7e:8b:cf:da:4e:2a:03:0d:c4:de:47:c9:07:9d:
                    5c:66:99:1d:17:61:b9:9e:77:57:21:41:2d:b3:73:
                    ac:da:eb:5a:2e:fc:b5:4f:d7:09:09:9a:98:c9:4e:
                    2c:66:38:3f:54:94:c2:03:c3:1b:ca:c0:5e:79:91:
                    6e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D2:39:4E:99:7C:82:63:9D:21:82:71:E5:BA:C5:6B:4C:63:F2:0E
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:90:a6:9b:28:9a:ca:89:78:a0:d1:b0:d9:49:26:a6:e5:04:
         82:2f:5d:be:5f:f1:91:bb:4b:f0:8d:2a:c9:f2:a9:a3:c9:87:
         89:42:26:db:45:4e:43:74:cc:bc:e6:f2:d2:e2:8c:f1:c1:d4:
         0e:57:d0:2d:67:40:6f:e2:7c:06:4f:c0:b7:95:92:cf:e0:8d:
         0c:cd:40:02:f0:6a:05:dc:5a:6d:96:1c:20:33:b1:07:1e:1f:
         0b:62:8d:7a:b9:33:85:1f:75:00:bf:60:c8:15:dc:1c:1e:32:
         69:51:9e:f7:f7:f3:6c:ea:44:62:08:ac:3e:72:99:68:52:92:
         61:91:4e:fe:d3:db:6a:06:70:8b:da:30:57:23:a5:5b:8c:a0:
         a3:df:92:23:b9:a4:6a:ed:5e:65:03:24:00:8a:c4:32:ab:8f:
         ff:9f:d5:b7:04:73:87:68:11:0b:79:a9:d2:77:5e:4a:f9:7d:
         85:67:03:dc:11:bd:18:dd:f6:3e:cf:8b:e6:2f:05:5b:4b:c5:
         ea:95:a5:78:f0:05:2a:bd:a5:81:37:e2:d5:f8:c7:22:31:5d:
         64:dc:f9:44:b6:19:3e:3c:32:29:35:53:08:52:b7:62:75:21:
         e4:61:f9:7e:dc:6a:a5:63:e2:b1:b0:34:ac:7d:d4:25:73:93:
         f3:1d:27:68
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUUnE95AM6n8MBLaNuGTcXNVKe9YQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwODA3MTUwNDA5WhcNMjQwODA1MTUwOTA5
WjAzMTEwLwYDVQQDEyhFNUQyMzk0RTk5N0M4MjYzOUQyMTgyNzFFNUJBQzU2QjRD
NjNGMjBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdl80Wnei/g9
iiCu3PbqvEhJy+FZGNCvlNHmHtWtEXmwtgGgkXeJIYzcSp6IpHOSYC/I7ZYdLVYC
WPPlKwGhUz7tkMmvioAAx3XmRSmTg2vqfaHZVApX/DJ3I1WQeprcSLvRs/t4I7L1
EgDm5ZZc5fHapWzprgiFx8tsXZckAbGHDtqdlz9absrnZXZJLzAgvoAISjrW9M/w
9Ds72OhS33cjeBppkvFOHmYrUmIGcfI6Q6e4eI9Of/EeYf+ERwfe8nOEfovP2k4q
Aw3E3kfJB51cZpkdF2G5nndXIUEts3Os2utaLvy1T9cJCZqYyU4sZjg/VJTCA8Mb
ysBeeZFuEQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFOXSOU6ZfIJjnSGCceW6xWtM
Y/IOMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjMyMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7hMA0GCSqGSIb3DQEB
CwUAA4IBAQA5kKabKJrKiXig0bDZSSam5QSCL12+X/GRu0vwjSrJ8qmjyYeJQibb
RU5DdMy85vLS4ozxwdQOV9AtZ0Bv4nwGT8C3lZLP4I0MzUAC8GoF3FptlhwgM7EH
Hh8LYo16uTOFH3UAv2DIFdwcHjJpUZ739/Ns6kRiCKw+cploUpJhkU7+09tqBnCL
2jBXI6VbjKCj35IjuaRq7V5lAyQAisQyq4//n9W3BHOHaBELeanSd15K+X2FZwPc
Eb0Y3fY+z4vmLwVbS8XqlaV48AUqvaWBN+LV+MciMV1k3PlEthk+PDIpNVMIUrdi
dSHkYfl+3GqlY+KxsDSsfdQlc5PzHSdo
-----END CERTIFICATE-----