Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233302e302f32342d3234203d3e20383334.roa
File:                     3135372e3235342e3233302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          /8vt+hl4qBWAXhA8u4v5hPm0lifjEKiRZgFGn6B5B9Y=
Subject key identifier:   1B:18:A6:33:43:27:3F:96:28:C8:CC:EC:5F:95:07:26:B1:5F:B3:89
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2C44707CBF2DCA836009D17A0D0D86627FC4AECC
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233302e302f32342d3234203d3e20383334.roa
Signing time:             Fri 05 May 2023 00:00:06 +0000
ROA not before:           Thu 04 May 2023 23:55:06 +0000
ROA not after:            Fri 03 May 2024 00:00:06 +0000
asID:                     834
IP address blocks:        157.254.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:44:70:7c:bf:2d:ca:83:60:09:d1:7a:0d:0d:86:62:7f:c4:ae:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  4 23:55:06 2023 GMT
            Not After : May  3 00:00:06 2024 GMT
        Subject: CN=1B18A63343273F9628C8CCEC5F950726B15FB389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:39:f4:49:04:79:b6:36:a5:0f:06:d0:cc:
                    16:01:b9:24:0b:c1:40:3f:f1:b0:1e:80:2b:12:74:
                    bd:78:0a:bf:c3:4f:57:91:0a:f5:dc:1e:30:14:52:
                    ec:a8:e1:3c:14:42:84:bc:4c:d0:ad:37:09:2f:80:
                    aa:ab:4e:ad:39:6b:5d:a6:27:75:3f:90:e7:9e:52:
                    b0:b2:92:df:fc:62:e6:b5:a2:52:be:f7:4c:d9:ac:
                    7e:68:5c:16:21:43:8f:ce:0c:6c:d6:5e:61:2f:4f:
                    3f:f0:29:d1:6d:c3:28:d1:0c:69:5c:75:4e:0e:de:
                    bf:1f:53:55:af:9c:92:95:ee:e1:07:93:eb:fa:ea:
                    c8:df:d9:6b:0d:5c:72:5b:99:49:de:d2:16:23:85:
                    94:5a:fe:a9:e3:62:e5:54:da:c3:bf:6f:83:3a:54:
                    a5:58:31:68:1a:ae:7e:b2:4b:2d:73:a5:fb:47:14:
                    45:cd:0f:b4:21:e3:e4:ee:fb:a1:0f:d1:11:c1:b2:
                    6a:cd:1e:5d:74:ef:30:b6:22:41:36:e2:92:4a:98:
                    63:19:0a:0f:c1:1f:42:86:2f:62:28:64:7d:c4:78:
                    a7:74:f2:e9:34:ad:8d:58:b5:82:da:10:06:3c:ab:
                    43:5b:48:0f:2a:5b:f0:23:9c:c8:ba:12:28:9a:5b:
                    a0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:18:A6:33:43:27:3F:96:28:C8:CC:EC:5F:95:07:26:B1:5F:B3:89
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:bb:65:e4:96:2b:c1:ce:53:68:0b:c4:c8:4b:a1:64:e7:bf:
         32:a4:67:41:5c:0d:47:56:94:c6:d0:34:2b:47:df:56:3d:c0:
         2a:26:d7:31:e6:62:e2:55:fd:6d:ba:0b:98:ca:9d:fd:71:88:
         05:c8:59:a3:c8:14:4e:c6:b5:92:ff:d7:fc:bd:78:4b:b7:be:
         2d:7a:7a:df:f3:8c:c8:72:3d:f4:4b:a4:08:a1:f8:36:63:2a:
         08:87:eb:a3:66:23:d5:05:8b:da:9b:73:dc:50:41:64:2b:f4:
         87:84:ca:81:cc:38:19:a2:83:bc:f3:d0:5a:ee:2f:bf:d2:3e:
         a0:f1:fb:20:7c:f2:7a:16:40:5c:7b:8a:6f:17:d4:56:f0:f6:
         73:a5:c8:c9:67:bc:3f:a8:ed:36:42:4b:09:8d:de:d0:7f:b1:
         36:e1:e0:2d:4b:d8:2d:68:87:4c:e9:50:ce:c1:45:17:af:fc:
         ad:61:a7:1d:be:bf:01:66:59:f9:fd:52:44:eb:c2:0d:80:c6:
         dc:5b:03:74:69:60:bd:28:db:10:77:b7:e2:0a:a7:5b:02:39:
         8e:9c:7d:ad:12:84:62:10:fc:9f:cc:07:c8:23:c9:b1:55:9e:
         90:6c:fc:3c:f2:20:4f:8b:05:c2:84:7d:7f:92:53:de:19:72:
         05:82:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----