Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS138997.roa
File:                     AS138997.roa (raw, json)
Hash identifier:          sYjFC8C+fxj9Ik1UrhFwL5ZSSbaZeabscOA1q5SE14k=
Subject key identifier:   F1:C7:43:E2:63:A6:A4:DD:ED:6E:7D:24:C6:4D:4C:DF:46:25:D9:19
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1A958F7399BF9128E5ED5D8CB4F94DA3D334AD36
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS138997.roa
Signing time:             Fri 13 Oct 2023 04:02:55 +0000
ROA not before:           Fri 13 Oct 2023 03:57:55 +0000
ROA not after:            Fri 11 Oct 2024 04:02:55 +0000
asID:                     138997
IP address blocks:        157.254.38.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 21 Oct 2023 04:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:95:8f:73:99:bf:91:28:e5:ed:5d:8c:b4:f9:4d:a3:d3:34:ad:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct 13 03:57:55 2023 GMT
            Not After : Oct 11 04:02:55 2024 GMT
        Subject: CN=F1C743E263A6A4DDED6E7D24C64D4CDF4625D919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:5a:ee:10:a1:88:57:bb:c5:b9:35:bd:c7:
                    08:3a:f3:9b:b0:ce:d4:59:74:16:31:1b:19:87:42:
                    3d:bc:29:09:23:ac:74:d4:13:a6:50:1e:ea:3e:30:
                    c2:4f:1f:5e:02:2d:f1:82:8d:88:aa:a8:a7:8d:0d:
                    ca:11:04:64:67:fd:8a:1f:4c:4a:c7:83:39:94:51:
                    39:fe:8b:34:34:68:fd:b4:0e:b3:a2:34:8b:01:94:
                    3e:16:ef:08:3d:f6:38:51:f5:51:08:8e:3c:85:ec:
                    15:f0:85:43:3b:c1:87:31:ee:e5:20:de:40:54:6c:
                    4c:ca:dc:82:8a:e4:47:eb:d9:16:9b:d0:e3:f0:ff:
                    da:40:8d:28:71:24:29:1a:1c:3f:17:ef:08:39:ba:
                    3f:b2:2e:f5:21:83:a2:f2:a3:af:58:a0:51:61:0a:
                    f9:34:ae:e5:9b:62:43:22:c1:b2:88:e0:f5:b0:53:
                    97:ee:93:1b:b4:44:a1:36:ed:64:6c:e5:fc:e0:2f:
                    fa:d0:d9:b1:2a:6a:d0:b8:0f:c3:32:7d:e3:60:74:
                    17:7f:08:40:44:37:9e:ba:cf:a8:b2:d5:2a:97:c7:
                    f0:80:dc:68:0e:4e:b3:03:da:4f:d9:92:f2:36:32:
                    21:a1:ae:35:6a:8d:91:78:50:91:10:ff:42:92:db:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C7:43:E2:63:A6:A4:DD:ED:6E:7D:24:C6:4D:4C:DF:46:25:D9:19
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS138997.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:17:f8:28:b0:7e:8c:7e:c9:48:be:70:4d:46:16:ce:63:8d:
         07:a6:fc:be:92:d5:f6:57:e1:d4:6e:3b:dd:32:f8:ba:e2:e4:
         97:b2:35:20:c2:67:4c:f7:aa:2e:9e:37:fe:7d:3b:34:73:87:
         dc:95:0f:b8:64:eb:3a:1f:f5:b5:23:20:ab:bf:4b:af:30:a5:
         0e:88:6b:94:70:d6:7e:60:3a:3c:f6:5d:f7:51:52:fa:7a:19:
         26:5f:d6:2b:8a:7c:77:68:3f:73:f7:7b:79:b6:78:5f:fd:e0:
         69:ae:fd:0a:34:71:32:07:59:30:19:3e:1f:e9:21:63:18:ca:
         b2:99:ba:b5:32:49:b7:66:c7:4a:86:74:63:eb:1c:5e:62:93:
         fd:95:5c:62:c6:fb:c5:50:02:d6:c4:c3:08:a0:d7:b9:54:8a:
         ca:e9:49:c5:3e:10:32:5a:a4:1e:db:12:cd:8b:6a:ff:1a:db:
         ec:ef:be:2d:b2:b9:df:10:a2:e9:08:9b:d6:7c:35:e8:2a:96:
         eb:5b:99:83:9b:06:7e:0a:11:96:44:94:67:f0:94:e1:8d:42:
         66:1f:ed:a0:f6:6d:70:d9:3f:ab:a4:f1:3a:21:8d:92:3e:12:
         4b:37:db:56:fd:81:ef:a4:bf:2a:ab:0f:e9:eb:bd:0d:cb:60:
         2d:cf:99:20
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUGpWPc5m/kSjl7V2MtPlNo9M0rTYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMxMDEzMDM1NzU1WhcNMjQxMDExMDQwMjU1
WjAzMTEwLwYDVQQDEyhGMUM3NDNFMjYzQTZBNERERUQ2RTdEMjRDNjRENENERjQ2
MjVEOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqila7hChiFe7
xbk1vccIOvObsM7UWXQWMRsZh0I9vCkJI6x01BOmUB7qPjDCTx9eAi3xgo2Iqqin
jQ3KEQRkZ/2KH0xKx4M5lFE5/os0NGj9tA6zojSLAZQ+Fu8IPfY4UfVRCI48hewV
8IVDO8GHMe7lIN5AVGxMytyCiuRH69kWm9Dj8P/aQI0ocSQpGhw/F+8IObo/si71
IYOi8qOvWKBRYQr5NK7lm2JDIsGyiOD1sFOX7pMbtEShNu1kbOX84C/60NmxKmrQ
uA/DMn3jYHQXfwhARDeeus+ostUql8fwgNxoDk6zA9pP2ZLyNjIhoa41ao2ReFCR
EP9Ckts8YwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFPHHQ+JjpqTd7W59JMZNTN9G
JdkZMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzEzODk5Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ3+JjANBgkqhkiG9w0BAQsFAAOC
AQEAkxf4KLB+jH7JSL5wTUYWzmONB6b8vpLV9lfh1G473TL4uuLkl7I1IMJnTPeq
Lp43/n07NHOH3JUPuGTrOh/1tSMgq79LrzClDohrlHDWfmA6PPZd91FS+noZJl/W
K4p8d2g/c/d7ebZ4X/3gaa79CjRxMgdZMBk+H+khYxjKspm6tTJJt2bHSoZ0Y+sc
XmKT/ZVcYsb7xVAC1sTDCKDXuVSKyulJxT4QMlqkHtsSzYtq/xrb7O++LbK53xCi
6Qib1nw16CqW61uZg5sGfgoRlkSUZ/CU4Y1CZh/toPZtcNk/q6TxOiGNkj4SSzfb
Vv2B76S/KqsP6eu9DctgLc+ZIA==
-----END CERTIFICATE-----