Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e36342e302f32322d3234203d3e20383334.roa
File:                     3135372e3235342e36342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          vXh8CvmTc0gFzxElec+WjUn/dtVTDy0HdBUO3lYwIP4=
Subject key identifier:   80:42:42:5F:A5:FB:26:70:BE:36:1E:47:AA:CF:3D:DA:FA:42:C4:4F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       08D9B0865994A273F74884C5BE419FB87B6F8DEE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e36342e302f32322d3234203d3e20383334.roa
Signing time:             Mon 21 Aug 2023 13:00:06 +0000
ROA not before:           Mon 21 Aug 2023 12:55:06 +0000
ROA not after:            Mon 19 Aug 2024 13:00:06 +0000
asID:                     834
IP address blocks:        157.254.64.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Aug 2023 07:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d9:b0:86:59:94:a2:73:f7:48:84:c5:be:41:9f:b8:7b:6f:8d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 21 12:55:06 2023 GMT
            Not After : Aug 19 13:00:06 2024 GMT
        Subject: CN=8042425FA5FB2670BE361E47AACF3DDAFA42C44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:e7:7d:d6:65:16:89:87:99:ce:f5:3b:f1:
                    ce:bc:0b:54:33:d8:68:6e:70:27:e8:eb:1f:fd:a4:
                    7e:06:e6:41:11:31:1f:a6:01:8d:bb:cb:71:46:81:
                    ae:0b:65:2c:d2:23:e1:49:59:b7:c1:4c:82:eb:6f:
                    d2:cb:4c:fa:ee:2e:f1:9c:df:db:1f:e1:dd:82:67:
                    a9:37:ba:3f:cc:8d:88:68:83:30:6d:d8:9e:15:25:
                    55:ee:de:70:d7:2e:f4:da:ca:ec:ef:ec:39:fe:5a:
                    ed:02:9f:ea:a4:8d:14:c5:53:d3:cb:ef:6d:04:34:
                    1c:80:e8:99:29:3f:cc:ec:b2:b4:d9:93:92:15:9c:
                    66:d3:45:7a:cd:17:31:35:e6:f2:95:5f:12:8f:56:
                    92:ea:b7:29:1a:cc:92:32:7d:49:b0:e9:99:d9:20:
                    d1:c7:e8:b7:9c:cc:3b:8f:fb:e1:9a:af:3f:37:5c:
                    a4:c5:d3:20:17:ab:60:dd:3a:2c:5d:c7:dd:df:38:
                    bc:4a:03:75:79:8f:0c:69:a1:75:14:54:8f:a7:08:
                    51:ac:e2:a6:58:f0:53:0a:25:d6:aa:d2:33:ac:d0:
                    eb:e6:db:cd:6b:b9:43:03:cf:6a:2e:2a:be:67:65:
                    84:8a:10:8a:59:0e:22:e0:e9:6b:8c:6c:33:ed:19:
                    dd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:42:42:5F:A5:FB:26:70:BE:36:1E:47:AA:CF:3D:DA:FA:42:C4:4F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e36342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:7c:69:01:34:53:e5:d3:4a:70:bf:da:eb:ca:8e:b2:08:
         c5:af:a2:9f:c3:be:c5:ca:e9:90:42:be:16:3b:a9:42:12:9b:
         5a:a7:57:19:d8:49:b3:da:4c:6e:06:4d:6f:80:2d:d0:05:b4:
         e2:a7:a5:71:83:37:b0:49:18:13:49:a9:4e:c4:fe:13:80:b8:
         d4:16:98:b7:b6:9c:04:68:0b:d6:81:4d:f7:60:c1:d2:a0:4f:
         9f:0c:f1:e5:6f:f0:97:60:df:34:6f:20:e3:62:fa:59:56:9e:
         c5:1a:1a:ff:2a:25:d4:41:1c:e1:a1:f7:a1:b9:7e:a3:2f:b9:
         d2:33:64:6e:61:98:ab:bb:af:dd:f3:5f:51:fa:ce:23:bf:ff:
         4e:1e:10:41:18:cd:02:08:34:43:46:55:46:b0:7d:49:f4:b5:
         38:b7:89:03:d3:b2:6d:09:ac:ac:b0:88:aa:3d:dd:1a:c4:f6:
         6f:be:f1:b7:ea:92:b9:e5:17:c6:cb:62:68:3d:a8:9a:68:ff:
         74:0f:1f:55:cd:d9:aa:f4:a9:3c:26:35:e9:02:b8:c2:53:17:
         47:20:ba:af:84:35:bd:f3:01:7b:43:5f:e6:98:41:a5:1b:77:
         8f:49:01:0b:70:d6:e7:1e:db:6f:06:92:a6:88:26:15:59:37:
         00:e8:69:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----