Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233382e302f32332d3234203d3e203139343337.roa
File:                     3135372e3235342e3233382e302f32332d3234203d3e203139343337.roa (raw, json)
Hash identifier:          yzp+7rTB3pPyR1uVTVh8GyAK+1rDRRbEBeFWo+Yq+l8=
Subject key identifier:   18:BC:8E:88:7B:22:95:0F:06:D4:39:1F:77:57:4D:EB:9E:9F:08:A3
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       10C3B7D8A521D92144519FE4A1487F66C6071793
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233382e302f32332d3234203d3e203139343337.roa
Signing time:             Sat 25 Mar 2023 04:29:18 +0000
ROA not before:           Sat 25 Mar 2023 04:24:18 +0000
ROA not after:            Sat 23 Mar 2024 04:29:18 +0000
asID:                     19437
IP address blocks:        157.254.238.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c3:b7:d8:a5:21:d9:21:44:51:9f:e4:a1:48:7f:66:c6:07:17:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 25 04:24:18 2023 GMT
            Not After : Mar 23 04:29:18 2024 GMT
        Subject: CN=18BC8E887B22950F06D4391F77574DEB9E9F08A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:ea:15:1c:bc:78:c7:3e:4c:a0:c2:ce:6e:
                    24:4d:6d:30:29:33:82:86:24:4c:c8:f4:3c:0d:be:
                    2f:d9:eb:1c:24:16:f0:4b:07:dd:18:b5:68:42:90:
                    c4:93:31:30:be:a5:e0:ed:c5:27:0d:1d:5e:95:6b:
                    4e:cd:fa:e7:2e:96:c9:86:5e:26:b0:7d:39:b6:a6:
                    a9:10:67:a5:a6:bf:20:08:bc:40:5f:fa:e2:0c:c6:
                    cb:82:d5:05:e4:a4:b4:52:e9:30:d2:5a:e6:b1:1e:
                    35:4e:c7:2d:a5:a1:fc:2e:95:fe:cf:3b:5c:6f:79:
                    e5:b6:66:39:57:e4:7c:75:bb:de:c8:0f:97:ac:d7:
                    d3:7d:f4:8e:8a:2d:54:d3:1f:05:22:a5:84:ba:f9:
                    81:a5:e8:16:c3:ae:5d:81:3f:59:3d:59:af:b6:c8:
                    3b:d1:81:a8:2d:4c:b0:9a:eb:9e:d3:5c:3d:a9:b9:
                    8c:d8:3a:33:14:d3:08:94:21:60:90:e5:7d:ea:ff:
                    80:5a:b8:d5:8e:a7:9b:95:90:31:fb:ab:4f:c4:60:
                    d8:89:a7:f3:bb:7f:e6:fd:d3:85:11:ed:68:36:f5:
                    3d:2e:23:e9:cc:ad:50:14:48:84:a9:f5:37:22:58:
                    63:96:a5:7b:53:97:7d:f4:61:d3:72:0f:22:3b:a3:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BC:8E:88:7B:22:95:0F:06:D4:39:1F:77:57:4D:EB:9E:9F:08:A3
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233382e302f32332d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:d5:08:6c:38:76:ea:6a:91:a2:ba:54:dd:4a:9c:da:8f:aa:
         6a:c3:60:2b:51:d7:c7:d2:c6:f2:56:53:2a:45:75:71:2b:c9:
         50:76:2b:b7:fc:5c:90:ab:f2:a4:8a:c8:eb:68:92:bc:0b:26:
         a1:55:50:89:12:b5:78:d7:88:0b:bf:7f:fb:00:c2:e6:e7:a7:
         a7:c3:76:ce:43:d4:d5:b3:85:f9:7a:e5:84:cf:b3:9c:f0:d9:
         34:5b:83:ee:e1:3f:2f:b7:d4:11:87:66:e9:d3:62:c1:e6:80:
         9c:66:60:3f:c8:33:7a:32:0c:a2:94:e6:a8:c2:2a:8c:e3:7e:
         4d:c5:fe:fb:a9:c0:9d:04:f2:ff:bf:97:48:2d:93:67:c5:ee:
         16:3e:1d:42:bb:9e:bc:0b:81:a1:36:65:8f:08:17:47:0c:ca:
         e0:cf:b8:4c:aa:92:37:c7:bc:c4:e5:3b:be:70:99:52:59:93:
         81:a1:db:9e:2f:70:e2:64:a9:69:1d:78:3d:d3:65:d5:e5:07:
         00:51:9f:5c:e3:5a:9e:c3:ae:db:5c:f1:9c:24:2b:06:73:e5:
         97:6d:55:7a:c2:67:11:69:ae:a3:d8:a0:98:b0:8a:d1:0d:fc:
         6c:50:55:ef:cb:9c:0d:ff:99:4a:fe:e7:af:cf:f2:c0:4c:ee:
         1a:1e:3e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----