Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS12189.roa
File:                     AS12189.roa (raw, json)
Hash identifier:          y46xyr041udBxh/IFEyro2wiIuxEqlZa2obvqD/59iA=
Subject key identifier:   44:EA:2F:93:8D:F3:54:90:66:7C:0F:8E:8D:1D:46:2C:EE:16:DB:96
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       37C8B05BC1F4702F520371610A472F04E7CAD2DD
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS12189.roa
Signing time:             Fri 22 Dec 2023 23:07:35 +0000
ROA not before:           Fri 22 Dec 2023 23:02:35 +0000
ROA not after:            Fri 20 Dec 2024 23:07:35 +0000
asID:                     12189
IP address blocks:        157.254.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Dec 2023 19:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c8:b0:5b:c1:f4:70:2f:52:03:71:61:0a:47:2f:04:e7:ca:d2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 22 23:02:35 2023 GMT
            Not After : Dec 20 23:07:35 2024 GMT
        Subject: CN=44EA2F938DF35490667C0F8E8D1D462CEE16DB96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:22:fc:40:8a:25:1e:b4:a3:dc:90:63:81:f2:
                    ce:d3:0a:0e:f5:3d:52:9f:ca:06:de:d3:14:ad:f4:
                    c6:54:9c:cb:0f:60:da:3f:8e:f3:1c:ae:ec:a4:79:
                    74:b5:0a:d7:37:ae:3b:07:93:e6:3c:5a:6e:42:26:
                    fa:23:dd:d0:ea:cf:7c:56:6f:21:e2:57:80:8c:47:
                    c2:15:12:f2:99:60:e3:13:3b:0f:a1:dc:46:b1:44:
                    d8:4d:9c:d5:a8:67:a5:e0:d3:38:41:95:af:b9:35:
                    f3:1f:71:0f:82:e5:50:cf:4f:1e:a8:87:ed:1a:19:
                    70:a4:dd:bf:6f:6b:d1:ee:d1:a9:ba:af:c2:8b:72:
                    2c:c0:19:5c:f1:2d:d0:81:87:1d:22:d3:bb:fa:fe:
                    c5:a3:ad:f4:80:d6:25:23:7b:05:1f:6b:24:7a:2b:
                    f3:7f:09:b9:ce:bb:17:18:86:20:32:36:72:00:73:
                    ae:07:bd:f0:e3:fe:8e:9e:d9:58:00:e8:75:dc:5f:
                    c1:00:7a:44:00:0f:00:a2:12:6d:51:33:ce:10:d5:
                    27:37:60:0c:f8:b6:dd:53:f5:08:69:f0:2f:e7:0f:
                    c9:81:96:66:8d:ce:a0:6d:1e:cf:21:7e:58:b6:8a:
                    29:73:40:1d:7b:77:5b:f7:e8:a8:c0:84:5e:c1:75:
                    48:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EA:2F:93:8D:F3:54:90:66:7C:0F:8E:8D:1D:46:2C:EE:16:DB:96
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS12189.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:51:6d:03:a6:2e:3b:d4:53:f0:53:98:09:95:0f:16:38:c4:
         4e:23:c3:62:df:52:58:32:4a:65:76:db:49:d1:6b:fa:18:46:
         5c:aa:12:31:42:38:68:7d:69:32:f2:83:95:c8:85:d8:2f:da:
         29:40:78:fe:db:cf:d3:04:a7:4c:2c:8c:5f:a7:5c:bd:ab:42:
         f5:88:7f:06:2e:4e:8e:ca:ba:2f:71:0d:33:ff:9c:3e:0c:44:
         56:d1:99:d1:4a:e7:38:5c:12:23:26:4d:28:29:7d:b3:db:aa:
         26:67:ab:d6:c6:8f:f1:ca:92:f6:57:17:62:a1:36:0f:73:73:
         13:87:eb:e4:1d:ad:b3:69:03:c4:91:3b:98:ad:67:d5:9e:f4:
         c9:4a:74:34:62:3a:cb:57:2b:b4:c9:b4:b1:57:1b:d1:72:f5:
         81:13:c8:71:e8:e7:78:55:c7:51:d4:2e:71:14:08:29:4d:99:
         88:ee:05:54:8c:ce:0d:f6:fe:2e:7d:b5:99:98:f0:4b:73:3c:
         76:42:89:a7:1a:5f:4c:46:43:37:e9:80:16:dd:6c:21:e3:2d:
         ee:f9:5e:17:a0:86:7b:f7:d9:e0:57:4e:a3:e9:8e:7d:0f:36:
         31:cf:57:66:31:39:0e:08:9e:f9:f8:da:50:08:cb:90:70:a5:
         50:a6:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----