Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS203377.roa
File:                     AS203377.roa (raw, json)
Hash identifier:          VCe3RAOaHVxhLoyovdUT0zbdMtEVT5DXqow5wk7i7qQ=
Subject key identifier:   6D:91:90:4F:6A:0A:8F:24:18:78:04:E8:B1:08:EB:10:23:49:C0:B8
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2F7B78F642BD8B97575452AF9C611FAF96175AF6
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS203377.roa
Signing time:             Thu 14 Sep 2023 14:07:18 +0000
ROA not before:           Thu 14 Sep 2023 14:02:18 +0000
ROA not after:            Thu 12 Sep 2024 14:07:18 +0000
asID:                     203377
IP address blocks:        157.254.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 14 Oct 2023 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7b:78:f6:42:bd:8b:97:57:54:52:af:9c:61:1f:af:96:17:5a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 14 14:02:18 2023 GMT
            Not After : Sep 12 14:07:18 2024 GMT
        Subject: CN=6D91904F6A0A8F24187804E8B108EB102349C0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9e:f5:73:93:9b:3d:4c:88:95:dd:93:9e:58:
                    85:e5:14:58:3a:5b:ee:45:77:e3:56:ee:79:be:d2:
                    4a:b3:c7:b5:ac:a5:d3:6d:08:28:29:35:ab:d9:07:
                    37:1f:21:6a:63:e2:3b:ad:8b:ed:b8:40:6e:52:cd:
                    02:93:37:a1:3f:76:12:29:95:43:e0:07:18:14:57:
                    e3:bd:a3:02:25:db:4c:11:7b:46:39:44:9b:c3:b1:
                    b3:ef:79:ec:96:de:c8:24:75:28:68:69:54:14:51:
                    3c:9d:b0:b4:1c:5b:25:76:69:d5:88:65:96:e1:7c:
                    c4:2c:4f:d9:dd:a9:b7:4e:9d:d4:a5:83:77:29:2e:
                    97:94:9c:4c:99:3f:c9:e0:22:55:a1:d3:58:aa:7e:
                    77:0e:bf:20:4a:4a:57:ec:a1:75:e4:35:06:1e:f5:
                    86:ba:98:df:a8:70:f2:c2:f5:68:0f:e1:f4:db:7c:
                    83:b6:c2:f9:0c:9a:81:7f:34:5d:e8:e5:4f:35:64:
                    2e:91:40:1a:c1:77:6b:4d:43:68:45:9d:ff:fb:ff:
                    0a:b3:d8:d7:fe:ca:91:a7:9a:b4:7c:44:ee:1a:99:
                    d2:21:ab:92:a9:6e:c5:2a:d7:50:52:3e:37:2a:76:
                    a6:6a:96:86:d6:fe:c9:f7:39:af:b2:1d:d6:d4:37:
                    5c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:91:90:4F:6A:0A:8F:24:18:78:04:E8:B1:08:EB:10:23:49:C0:B8
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS203377.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:98:42:36:a4:1b:4a:e7:8a:6a:c8:99:62:5e:e0:89:c3:0e:
         1a:91:0c:01:02:02:67:da:1b:4d:3d:68:68:a0:ee:ea:5f:cf:
         e3:3b:6c:96:58:97:4d:31:b9:d3:45:57:e7:ff:c6:eb:04:cc:
         07:ad:a5:e4:71:65:06:21:bd:48:b7:45:da:5f:ae:87:92:d9:
         68:b7:24:ce:b1:f4:d0:40:ad:6b:3d:7b:b8:1f:e2:26:d9:af:
         a4:c7:f7:ac:dc:8c:cc:8c:ee:be:8e:e8:2e:e5:57:c9:56:4a:
         c5:dd:eb:ff:32:7c:f1:c9:86:b2:01:f5:99:45:df:ff:c1:dc:
         29:d6:1f:f3:a4:6d:1d:e5:3f:8b:3b:44:3c:8f:3c:0a:6c:da:
         82:3c:06:b3:34:1c:55:49:a9:cd:e8:5e:88:7a:18:29:33:c0:
         3e:82:3b:f4:bc:a7:a7:cc:0c:e9:7b:55:15:a0:02:bb:41:16:
         29:8d:32:d3:94:7b:76:18:8f:89:18:53:1f:a1:9e:2f:d1:2c:
         c2:e2:1e:83:44:e5:f3:52:c2:e0:a8:0b:82:04:5b:8d:c1:ed:
         b7:69:db:9d:5c:11:28:8d:79:87:98:1c:d8:7c:7c:ce:5e:da:
         43:df:a4:fe:5d:ad:71:e6:2b:e1:27:33:88:18:e4:01:7a:a4:
         da:4a:b1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----