Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233302e302f32342d3234203d3e20313335373532.roa
File:                     3135372e3235342e3233302e302f32342d3234203d3e20313335373532.roa (raw, json)
Hash identifier:          81exSy2QMZ+412w3uh+785PRBSUAqyH8QUUC2SDb1as=
Subject key identifier:   0F:64:E4:56:E3:7D:85:BF:6F:05:D2:12:84:6F:4C:1C:5D:37:BB:11
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       49B856CECE59B7C8FDBC4FC93058044BA791F41D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233302e302f32342d3234203d3e20313335373532.roa
Signing time:             Wed 01 Mar 2023 09:08:51 +0000
ROA not before:           Wed 01 Mar 2023 09:03:51 +0000
ROA not after:            Wed 28 Feb 2024 09:08:51 +0000
asID:                     135752
IP address blocks:        157.254.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b8:56:ce:ce:59:b7:c8:fd:bc:4f:c9:30:58:04:4b:a7:91:f4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar  1 09:03:51 2023 GMT
            Not After : Feb 28 09:08:51 2024 GMT
        Subject: CN=0F64E456E37D85BF6F05D212846F4C1C5D37BB11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:54:4c:67:c2:99:ef:0b:40:ba:99:88:33:37:
                    86:ad:4d:a7:8d:e9:5d:8a:66:3d:fa:ae:f1:49:bd:
                    10:af:17:5c:34:2f:51:a6:9a:d3:f8:8e:6d:c5:d3:
                    b8:18:c7:b9:2e:dd:a4:06:b2:90:a0:32:72:7c:06:
                    72:bd:a6:25:d9:78:32:0f:64:82:5e:df:59:65:cc:
                    29:0f:f0:93:7c:6e:95:dc:d1:b6:cb:6f:c7:91:07:
                    fa:7b:f1:ad:51:47:b4:84:5d:e0:77:06:1b:bb:55:
                    45:3c:bd:71:a6:78:29:54:58:21:86:32:88:2c:3a:
                    ae:c9:d6:b1:4d:a6:95:9c:76:1c:07:3b:79:26:fe:
                    2b:c5:53:05:c7:1d:37:35:b4:cf:ca:4f:eb:43:d9:
                    e7:46:93:19:c9:0a:25:92:d9:45:07:2b:73:d4:07:
                    01:bc:d2:43:88:ca:2c:0e:6f:d5:02:c1:85:8b:c3:
                    65:8c:12:38:5c:0c:bc:1c:fe:68:73:f5:52:6f:6c:
                    6a:14:1e:46:cb:61:ce:c9:74:f0:37:d0:42:29:df:
                    db:dd:fb:8e:e6:a4:df:ff:92:d7:8c:1a:58:cc:58:
                    cc:d2:e0:27:7b:af:5e:f3:f7:d5:d5:53:2c:06:20:
                    b8:8b:db:19:10:60:6b:24:cd:fa:cb:c3:c1:3d:c8:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:64:E4:56:E3:7D:85:BF:6F:05:D2:12:84:6F:4C:1C:5D:37:BB:11
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233302e302f32342d3234203d3e20313335373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:29:00:55:1b:22:bf:07:ad:7a:7c:94:cf:a5:11:0c:75:cd:
         ef:ff:d6:c2:86:e0:3e:9e:3f:0f:6f:06:d9:29:67:a0:aa:77:
         72:8a:d6:99:1a:7b:ff:1f:b0:ad:c9:64:83:f5:f6:2b:04:22:
         b6:cd:bd:29:1c:fa:19:0c:df:b2:cc:03:0a:b0:c5:9d:ba:3a:
         75:f3:50:78:c2:bd:f5:d6:21:11:53:bd:28:41:20:7b:4d:a5:
         c2:29:1f:34:54:17:71:df:83:f8:57:75:d0:a1:a3:20:8d:34:
         f2:57:1e:ee:dc:70:c0:27:b8:c2:34:b5:97:ed:23:29:c5:55:
         06:20:2f:1c:32:6d:15:94:8f:e6:e7:12:45:49:88:82:b2:7f:
         49:ec:8a:c2:0c:4c:26:ec:0c:99:4c:32:36:59:4c:fd:ce:c4:
         1e:42:eb:02:46:c2:32:62:2f:a5:08:4b:f7:23:67:d3:8c:94:
         b5:b0:58:f8:d3:b8:02:ce:1e:98:57:8c:6d:81:3e:45:00:ae:
         d8:c0:3e:f5:92:51:5a:fa:eb:e2:ae:19:55:90:36:05:58:b5:
         2e:bd:7d:f1:4e:7f:2e:cc:9d:23:8b:08:28:de:d9:01:7d:68:
         a4:67:7f:56:ba:16:53:97:f5:7d:c8:2f:22:bf:bc:fd:52:da:
         7a:a7:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----