Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e38302e302f32302d3234203d3e20333939303733.roa
File:                     3135372e3235342e38302e302f32302d3234203d3e20333939303733.roa (raw, json)
Hash identifier:          gBLwGyPHjwSgdXmA6MOSCTvJ6jQgIVTx2PDl4+YZVBw=
Subject key identifier:   62:31:B6:EF:59:AD:62:99:7D:76:94:DC:09:96:DA:C6:A6:34:6D:BE
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       25C204CCAA63016096E1F96D070642820048C021
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e38302e302f32302d3234203d3e20333939303733.roa
Signing time:             Tue 29 Aug 2023 14:06:40 +0000
ROA not before:           Tue 29 Aug 2023 14:01:40 +0000
ROA not after:            Tue 27 Aug 2024 14:06:40 +0000
asID:                     399073
IP address blocks:        157.254.80.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Aug 2023 07:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c2:04:cc:aa:63:01:60:96:e1:f9:6d:07:06:42:82:00:48:c0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 29 14:01:40 2023 GMT
            Not After : Aug 27 14:06:40 2024 GMT
        Subject: CN=6231B6EF59AD62997D7694DC0996DAC6A6346DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:21:e0:f7:2c:ee:f7:93:68:0b:48:16:9e:3b:
                    03:d8:76:d3:2c:d9:95:16:6f:6a:51:67:93:03:69:
                    3d:5f:c8:01:75:0a:58:32:22:44:28:51:85:a6:49:
                    2e:44:a8:77:74:6e:3e:f3:b3:9c:81:f3:88:87:5d:
                    66:f2:28:19:9e:55:70:87:10:93:c9:8d:b6:52:ac:
                    f5:eb:ab:3c:ea:ee:b9:74:ea:2c:d9:e1:79:13:c3:
                    5b:b9:09:d8:b5:01:b0:36:7f:79:ed:49:23:ce:1b:
                    81:07:e6:ff:b1:5d:df:8f:25:0b:90:fa:a8:6f:16:
                    ad:ad:a3:e4:14:6d:67:4c:0e:8c:94:0c:94:ce:a8:
                    8b:0b:5d:97:d3:65:86:41:2f:65:b8:f6:2f:19:9a:
                    1a:f5:fb:22:ac:2c:33:2c:84:c7:97:ff:68:49:e4:
                    55:6d:fd:9b:27:ac:51:57:43:b2:a3:f8:99:f2:87:
                    ed:52:b5:bf:b1:3b:9b:e9:1e:43:c6:19:9b:da:56:
                    19:fe:1c:9c:7a:f4:bf:e9:66:be:64:ac:cb:64:69:
                    1c:2b:3e:dd:0a:39:0d:7e:b5:f0:94:b3:57:52:44:
                    bc:87:8c:05:cd:cd:9c:e2:3a:91:26:da:d0:f0:1c:
                    f7:c4:64:83:bc:25:86:bb:76:98:6c:8d:cf:60:fe:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:31:B6:EF:59:AD:62:99:7D:76:94:DC:09:96:DA:C6:A6:34:6D:BE
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e38302e302f32302d3234203d3e20333939303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:43:79:97:fb:f8:95:61:4e:3c:71:19:ed:6b:f0:64:87:6f:
         61:0a:fe:84:75:b9:ea:92:b2:3c:b7:cc:8f:8a:51:0b:5c:9e:
         dc:4a:6b:bd:0d:b5:b9:21:ab:fd:1e:25:0a:9a:4d:f2:0a:3e:
         54:3c:82:bc:ce:d1:a8:f7:1c:b3:35:0b:22:00:74:6e:bf:e1:
         14:54:5f:7f:84:80:00:fc:29:fe:58:7b:10:42:97:a3:4a:0d:
         da:f3:6c:a8:93:4f:34:fa:b7:92:24:b4:71:55:54:92:6f:13:
         16:3e:d5:35:bc:49:15:89:dd:47:d5:6f:bd:34:3e:bf:53:ba:
         e6:c6:61:93:58:69:36:95:2a:6e:13:de:72:6f:8c:3e:3f:81:
         0c:dd:82:f7:90:31:18:28:80:91:4b:56:6c:b9:57:5b:51:2f:
         1c:f1:fb:53:e6:b2:d0:8d:07:4e:b3:3b:c5:5f:25:96:a8:d8:
         d4:8c:75:2c:13:35:e5:b6:fb:1a:02:5d:ca:aa:ff:c9:91:92:
         11:e8:35:26:72:42:66:a4:07:6f:72:d6:4b:2b:21:05:30:7d:
         f6:71:cf:61:db:f5:71:a5:93:7f:1f:01:d2:da:3c:40:eb:7e:
         13:33:e9:e6:84:37:8d:75:58:e0:bb:70:18:3c:08:b1:b8:b4:
         4c:ac:68:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----