Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS206505.roa
File:                     AS206505.roa (raw, json)
Hash identifier:          4tNj08Vu2Ihd1stwlE094iVvPSscVHWZ6yQkAMwgPto=
Subject key identifier:   74:8A:E7:17:85:F2:4D:AD:21:F9:27:1A:2A:6A:B9:FA:E2:38:0A:4D
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1294BA47CD54363789550BF533193126D7F371D5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS206505.roa
Signing time:             Thu 31 Aug 2023 07:52:06 +0000
ROA not before:           Thu 31 Aug 2023 07:47:06 +0000
ROA not after:            Thu 29 Aug 2024 07:52:06 +0000
asID:                     206505
IP address blocks:        157.254.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 May 2024 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:94:ba:47:cd:54:36:37:89:55:0b:f5:33:19:31:26:d7:f3:71:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:06 2023 GMT
            Not After : Aug 29 07:52:06 2024 GMT
        Subject: CN=748AE71785F24DAD21F9271A2A6AB9FAE2380A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:fc:9b:b2:93:84:29:bf:a0:ac:18:df:e5:
                    29:80:43:6b:8d:fb:a4:a9:99:a2:9e:5e:d3:d3:0e:
                    5f:41:db:0f:56:93:95:8f:77:e6:f4:29:84:db:39:
                    8a:0d:0a:56:dd:93:ad:b5:a5:ac:d1:f5:33:a9:7c:
                    f8:f2:5f:5c:77:f8:ad:00:1f:94:8e:e4:18:ad:84:
                    4c:21:22:ab:f7:bd:47:29:f8:31:01:6d:05:4a:2f:
                    72:6c:da:83:9e:46:2b:56:f6:20:2f:d1:ff:f2:45:
                    20:15:90:99:ff:25:34:7e:dd:cb:ea:a9:88:bd:55:
                    52:7a:65:4f:fd:bb:3e:5e:55:85:4a:eb:64:1c:8f:
                    74:20:16:f4:1a:1d:56:4f:6d:f1:d5:75:d0:e3:e1:
                    a8:bd:ff:5e:a6:86:01:61:bd:12:30:f0:c4:ad:e7:
                    89:04:5d:f5:96:39:85:16:eb:44:d9:7e:dc:a2:f3:
                    b9:cc:c1:56:e9:62:f3:1e:70:61:3f:37:f1:9b:89:
                    8d:c1:1f:e2:d6:87:81:d4:a9:8c:65:e0:10:bb:11:
                    21:34:3c:73:47:5d:c5:a8:ae:b3:05:1a:c5:13:c5:
                    a1:d8:f6:88:77:b9:af:5b:20:33:d4:71:66:38:a3:
                    15:c1:61:36:12:e0:44:87:00:6e:f3:f0:b9:2c:34:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8A:E7:17:85:F2:4D:AD:21:F9:27:1A:2A:6A:B9:FA:E2:38:0A:4D
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS206505.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:9d:fc:99:ba:5e:fd:8f:4f:35:71:d9:f1:dc:d7:d8:2a:a4:
         21:a6:c6:52:06:82:7a:ce:91:f7:a9:ad:d8:40:cd:42:eb:7a:
         9d:81:35:85:e0:7d:d9:64:f3:0b:4f:55:eb:03:1a:38:71:4e:
         b3:40:4e:64:c9:66:13:f7:e9:a7:dd:a2:7e:3b:74:89:57:94:
         d7:6a:06:7e:c3:39:bc:b8:de:a1:00:cc:d8:22:75:a7:71:ad:
         3d:26:16:54:91:b6:22:8f:c7:27:65:49:6e:93:48:7f:4f:18:
         5f:61:b0:9a:16:db:28:44:6a:4c:b0:4e:72:7e:9d:3a:6c:e1:
         22:c5:bd:42:fe:73:a6:9b:83:0c:67:89:6c:25:ff:31:33:47:
         51:95:68:06:f5:88:8c:db:5a:69:31:1a:51:a7:25:a1:96:5a:
         c1:16:f0:6c:9c:a6:10:1c:a9:c9:3e:53:6b:db:65:ab:3b:c5:
         fb:33:25:de:18:03:b0:51:5a:12:f4:f6:c5:f1:cf:a4:fd:25:
         76:65:88:aa:f1:76:2b:fa:31:80:7b:c0:b6:12:7d:c4:44:9d:
         7f:04:e2:3d:95:a2:0e:1c:2d:47:52:df:4d:81:d9:b9:1a:04:
         9a:21:79:5f:3c:63:78:7c:c5:f4:3e:2d:c3:79:e4:63:87:28:
         69:84:45:89
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUEpS6R81UNjeJVQv1MxkxJtfzcdUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwODMxMDc0NzA2WhcNMjQwODI5MDc1MjA2
WjAzMTEwLwYDVQQDEyg3NDhBRTcxNzg1RjI0REFEMjFGOTI3MUEyQTZBQjlGQUUy
MzgwQTREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgT8m7KThCm/
oKwY3+UpgENrjfukqZminl7T0w5fQdsPVpOVj3fm9CmE2zmKDQpW3ZOttaWs0fUz
qXz48l9cd/itAB+UjuQYrYRMISKr971HKfgxAW0FSi9ybNqDnkYrVvYgL9H/8kUg
FZCZ/yU0ft3L6qmIvVVSemVP/bs+XlWFSutkHI90IBb0Gh1WT23x1XXQ4+Govf9e
poYBYb0SMPDEreeJBF31ljmFFutE2X7covO5zMFW6WLzHnBhPzfxm4mNwR/i1oeB
1KmMZeAQuxEhNDxzR13FqK6zBRrFE8Wh2PaId7mvWyAz1HFmOKMVwWE2EuBEhwBu
8/C5LDR2yQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFHSK5xeF8k2tIfknGipqufri
OApNMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzIwNjUwNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+2jANBgkqhkiG9w0BAQsFAAOC
AQEAB538mbpe/Y9PNXHZ8dzX2CqkIabGUgaCes6R96mt2EDNQut6nYE1heB92WTz
C09V6wMaOHFOs0BOZMlmE/fpp92ifjt0iVeU12oGfsM5vLjeoQDM2CJ1p3GtPSYW
VJG2Io/HJ2VJbpNIf08YX2GwmhbbKERqTLBOcn6dOmzhIsW9Qv5zppuDDGeJbCX/
MTNHUZVoBvWIjNtaaTEaUacloZZawRbwbJymEBypyT5Ta9tlqzvF+zMl3hgDsFFa
EvT2xfHPpP0ldmWIqvF2K/oxgHvAthJ9xESdfwTiPZWiDhwtR1LfTYHZuRoEmiF5
XzxjeHzF9D4tw3nkY4coaYRFiQ==
-----END CERTIFICATE-----