Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS197537.roa
File:                     AS197537.roa (raw, json)
Hash identifier:          OKGY6giUSYZCf2FKtvZTOdn8oOmNppr3pdiFI5DyGTI=
Subject key identifier:   FC:EC:FB:4E:54:CC:99:5C:99:AB:95:5B:2C:2F:51:1B:01:D3:81:72
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       462B3035706155262EFCA10D53490156C652FEE9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS197537.roa
Signing time:             Fri 24 May 2024 08:19:15 +0000
ROA not before:           Fri 24 May 2024 08:14:15 +0000
ROA not after:            Fri 23 May 2025 08:19:15 +0000
asID:                     197537
IP address blocks:        157.254.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 10:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2b:30:35:70:61:55:26:2e:fc:a1:0d:53:49:01:56:c6:52:fe:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 24 08:14:15 2024 GMT
            Not After : May 23 08:19:15 2025 GMT
        Subject: CN=FCECFB4E54CC995C99AB955B2C2F511B01D38172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:eb:92:d8:dd:04:73:0c:30:c0:3e:ad:83:
                    c9:49:12:cb:c9:34:fa:63:c9:39:77:fa:2b:3c:40:
                    0b:4b:98:3f:99:f0:01:76:9a:d9:b0:08:d4:e0:5b:
                    ac:23:5d:fd:49:5e:80:ef:57:2a:bd:c9:ca:ca:e8:
                    59:3e:e1:6c:48:6b:c8:d3:12:0c:83:40:ac:3a:72:
                    f5:3a:10:25:fc:6c:bc:71:0a:d8:c4:5f:5b:a5:90:
                    95:45:4e:ec:66:c7:38:21:57:79:01:ec:52:ba:21:
                    92:b6:29:6c:8a:28:18:38:55:a0:b0:33:c0:0b:8e:
                    98:38:35:62:02:24:ee:b5:af:df:e8:e5:1d:c4:5c:
                    1a:27:31:2d:78:24:f7:89:cb:7b:d0:ca:e5:1e:27:
                    c8:7f:e6:d9:28:6d:96:4d:d4:c4:ad:f2:3a:aa:0b:
                    52:9c:8a:24:84:8c:a2:7c:5a:ac:a0:3a:fb:c1:b8:
                    06:a4:da:53:33:c7:dc:49:98:2f:9e:4c:52:3e:b1:
                    64:e8:f2:47:03:91:09:b3:e5:35:d1:e8:76:1f:7d:
                    39:2b:03:2f:e8:12:a9:d8:9e:d4:4d:9f:eb:8d:02:
                    61:2d:15:b2:af:69:20:5e:7d:f4:c5:29:6c:85:65:
                    f4:6f:7c:34:50:2c:cf:4d:99:c0:3a:b4:48:50:c5:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EC:FB:4E:54:CC:99:5C:99:AB:95:5B:2C:2F:51:1B:01:D3:81:72
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS197537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:a5:53:7d:8b:ef:d5:d7:87:8d:cf:0b:46:b6:c1:1f:2c:08:
         82:e3:0d:2b:c8:6c:12:43:8a:f2:ef:c0:1b:90:50:7c:03:92:
         9f:a4:d1:1b:e2:1c:42:c4:56:a0:2f:6b:d3:da:e9:55:61:40:
         08:3d:9c:e4:a1:1f:9c:85:4d:d7:ee:5b:df:b4:37:b2:88:81:
         28:2d:ec:81:13:d9:a0:15:ad:72:f9:81:c2:7e:a1:53:26:55:
         f9:a7:b6:62:3b:cc:0a:4c:b8:62:bd:d9:a1:05:96:38:aa:bb:
         1f:ca:01:76:69:d7:f6:3a:d2:36:fc:a0:f9:35:8c:cc:ac:aa:
         9a:d1:e1:a1:87:ae:cf:6d:3a:8c:a7:95:27:dd:e1:cc:e3:d9:
         32:19:0d:3f:ea:ee:ce:5b:c8:56:7f:d4:60:37:93:f7:c4:df:
         41:48:31:e4:3d:9a:3d:47:87:86:e0:1b:cf:94:5b:57:bc:a7:
         54:a4:53:1c:59:f9:fb:19:8c:ed:fc:00:0e:31:c1:0a:df:b8:
         77:33:12:56:7e:d4:a6:f0:f3:d3:c3:f3:e5:b8:1c:6f:0d:c5:
         1b:42:ab:de:8b:15:e3:4b:36:ec:35:0c:ba:5d:39:18:15:48:
         49:c9:38:28:3b:e3:a6:83:0a:e1:a2:22:c9:e9:be:29:ca:5f:
         68:4e:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----