Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e36342e302f32322d3234203d3e20333938343635.roa
File:                     3135372e3235342e36342e302f32322d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          +gQAwk7K03TdookXFSKytHcb+oFd95T0ueVJElpUhFI=
Subject key identifier:   CE:9D:DD:A4:0F:A0:67:BF:49:A8:63:B7:DB:C2:79:CA:04:AF:E8:87
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3BCCBA9A4244D0917FEF124F10AD7F6428AE2209
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e36342e302f32322d3234203d3e20333938343635.roa
Signing time:             Mon 14 Aug 2023 14:01:55 +0000
ROA not before:           Mon 14 Aug 2023 13:56:55 +0000
ROA not after:            Mon 12 Aug 2024 14:01:55 +0000
asID:                     398465
IP address blocks:        157.254.64.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Aug 2023 13:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cc:ba:9a:42:44:d0:91:7f:ef:12:4f:10:ad:7f:64:28:ae:22:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 14 13:56:55 2023 GMT
            Not After : Aug 12 14:01:55 2024 GMT
        Subject: CN=CE9DDDA40FA067BF49A863B7DBC279CA04AFE887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:48:9b:61:a9:4d:1c:91:0f:48:bf:5a:4d:
                    e7:aa:6b:ae:96:6d:5f:a0:22:e5:8e:2a:1b:6a:ee:
                    bf:0e:5e:e0:65:b1:5c:96:4d:20:f3:10:96:6c:30:
                    fc:bb:71:45:1c:a4:ff:6d:ad:e6:70:d3:b4:11:b4:
                    48:e5:79:13:d7:0c:04:8b:6f:f2:b0:b7:20:16:4f:
                    c7:5c:91:b2:23:03:7b:53:01:44:5e:26:6d:c9:16:
                    18:b6:5a:f7:35:b0:7b:52:91:c3:0f:c7:3b:1e:22:
                    3c:e3:61:cc:e1:60:3a:8f:bc:c7:c2:e0:3e:41:63:
                    98:72:11:4d:89:d6:bd:05:5b:bd:a3:a0:30:c5:f1:
                    e6:d9:d1:2f:9b:f8:9a:c0:97:f3:06:cb:43:a3:5b:
                    b7:77:ab:5b:04:1b:a2:2e:6b:8c:bb:b6:10:36:ee:
                    fc:01:7b:86:93:6d:5b:c1:dd:64:bf:65:2f:b2:dd:
                    0f:5c:f8:d0:3d:71:dc:bc:3e:d9:9d:9f:29:7c:48:
                    8f:00:23:38:02:e3:64:5c:39:a2:30:d9:a1:7d:2e:
                    0c:3f:a0:db:e7:cd:9f:80:4a:e6:04:48:5c:1c:23:
                    27:e4:c5:79:a0:fb:b4:22:07:11:89:cf:77:99:db:
                    d2:6e:33:67:8b:fc:2d:e2:28:53:bf:69:ff:64:36:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9D:DD:A4:0F:A0:67:BF:49:A8:63:B7:DB:C2:79:CA:04:AF:E8:87
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e36342e302f32322d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:75:f6:cb:43:0c:dd:d9:89:f7:6c:79:7b:8c:51:1e:5c:e1:
         2e:65:d6:ab:bb:98:02:6c:38:36:dd:d4:9c:56:7f:9b:bd:9a:
         a7:79:78:8e:f2:3f:4f:c9:91:1d:a7:5e:cf:64:25:b7:b0:4a:
         ec:07:41:e7:db:5f:a2:87:10:57:fd:a6:42:d5:3a:bc:06:66:
         7f:f8:de:71:0b:e7:cb:04:54:4c:3e:c5:3b:c8:48:cd:e5:ea:
         cd:b5:90:17:c7:11:8b:b8:6c:20:57:4a:56:a7:e0:7c:47:ef:
         b7:9f:7e:32:29:1f:ce:a4:66:c8:cc:ce:fd:4e:a9:a5:6f:8b:
         6d:d7:b0:cf:cf:7f:d3:54:ab:3b:63:d3:e1:5d:de:cb:c8:a4:
         6a:9d:18:79:17:a8:6e:25:e4:43:06:4c:98:de:19:a7:bd:f0:
         47:7b:d7:d6:1e:2b:0a:16:51:43:ff:ff:8e:19:de:ab:aa:97:
         e0:e7:c8:0a:48:f3:ca:4e:a4:c1:8f:b1:08:ce:43:76:b2:29:
         c4:ee:e4:a0:d0:19:52:24:7a:f7:65:80:fc:e4:b1:12:4c:aa:
         6b:3f:86:de:47:6c:4c:fe:35:64:25:7c:3a:8c:7c:8b:9a:f8:
         98:3f:86:f5:ce:ca:81:13:26:4d:ec:ad:c9:e6:a4:36:33:17:
         eb:8c:cc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----