Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20454.roa
File:                     AS20454.roa (raw, json)
Hash identifier:          eHSg5CpifSn4sbnNOuFo0at2HpibO0kdGyjesJ/G4BI=
Subject key identifier:   08:80:02:C6:E2:A4:C0:A0:D0:5D:E9:F5:B0:4D:36:F5:E0:99:84:61
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       459A8C667DCDC5C05905891C79211BA5CB48E664
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20454.roa
Signing time:             Fri 29 Dec 2023 19:02:56 +0000
ROA not before:           Fri 29 Dec 2023 18:57:56 +0000
ROA not after:            Fri 27 Dec 2024 19:02:56 +0000
asID:                     20454
IP address blocks:        157.254.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 21 Jan 2024 15:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9a:8c:66:7d:cd:c5:c0:59:05:89:1c:79:21:1b:a5:cb:48:e6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 29 18:57:56 2023 GMT
            Not After : Dec 27 19:02:56 2024 GMT
        Subject: CN=088002C6E2A4C0A0D05DE9F5B04D36F5E0998461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:10:75:12:d2:04:0f:a4:77:76:f6:41:0a:
                    7b:5f:ec:63:1d:e8:c1:cb:f6:d7:95:92:2d:89:00:
                    1d:ff:dd:b9:d5:a9:4e:72:7f:b6:1d:8a:73:92:2e:
                    a5:4b:84:71:b9:17:dc:13:35:8b:74:82:36:10:fc:
                    6c:5a:97:2c:9c:98:c6:81:1c:e9:31:14:b4:e5:c8:
                    f3:f3:3a:4b:d3:94:ca:a3:ae:21:d0:27:d3:8e:e1:
                    1b:5a:1d:19:2b:ba:b9:a8:ef:54:4a:1e:cc:7b:b0:
                    ab:c6:89:dc:ee:44:63:03:9a:7d:54:0a:d5:3d:5f:
                    ba:22:18:ef:03:7a:a6:64:6e:30:f2:6b:03:51:02:
                    7a:ce:af:c0:aa:83:92:62:89:91:f3:ba:b9:dd:30:
                    77:69:c7:af:c4:13:90:89:90:65:c9:ee:e9:e8:0c:
                    1e:33:78:fa:31:26:49:95:20:9a:42:c1:9f:9c:a3:
                    b3:a1:72:9e:63:44:f3:c5:64:fd:6b:f8:6d:1b:d9:
                    18:37:d3:3d:72:6b:44:b9:58:d7:a5:3c:01:a0:9e:
                    58:65:f7:2c:78:89:48:51:a7:85:83:cb:d0:db:d1:
                    53:f9:d5:06:be:23:e7:fe:7e:0c:89:bf:91:52:21:
                    d7:7f:ba:c0:7f:14:24:fe:f2:dd:ff:16:35:ca:ea:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:80:02:C6:E2:A4:C0:A0:D0:5D:E9:F5:B0:4D:36:F5:E0:99:84:61
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:29:60:f8:6b:76:8e:25:7a:64:6b:83:04:d8:2d:a2:ae:45:
         db:95:bf:e3:83:9e:e5:3a:ce:0b:42:57:b5:ac:fa:f4:33:a4:
         fa:a3:bb:a4:85:6f:4c:2e:8f:f4:b1:20:61:27:6e:27:69:82:
         6e:bb:05:58:d0:63:a9:a4:17:b5:71:0d:e8:b6:b7:30:64:d3:
         d1:15:3b:ff:f5:75:de:0a:59:62:58:ee:0a:14:c0:d5:89:14:
         44:15:46:2d:b4:54:98:7c:18:46:f1:8e:8b:d8:2d:74:54:c5:
         83:77:96:dd:6d:1b:ec:00:92:97:eb:86:13:74:2c:5e:e1:6e:
         45:40:9b:bd:2f:b3:95:70:5d:0d:75:d0:c9:a3:d0:6f:30:9a:
         b6:96:83:46:59:6f:55:20:ef:10:59:6e:81:df:1a:76:57:64:
         0b:e3:cd:91:c9:b6:38:d8:d9:b8:13:14:a7:d6:91:e6:01:df:
         0c:71:40:38:9f:e0:93:a5:c5:4c:63:4a:7d:23:ca:a2:c8:98:
         86:4e:4c:4f:29:31:e0:9f:21:ff:01:21:48:bf:d4:df:e8:70:
         90:14:f8:3e:61:2f:48:08:7b:29:29:6d:dd:84:1a:cc:98:47:
         7c:fa:c2:38:83:7f:60:0d:2f:d6:a2:1e:c2:c0:31:1d:fc:90:
         82:aa:2a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----