Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS211061.roa
File:                     AS211061.roa (raw, json)
Hash identifier:          FtePGl/4WmSomF+rVeWeIGGTlQiBCIy0ckJg3F9NSvM=
Subject key identifier:   E7:B5:AF:7A:4F:9B:6F:BE:F4:1E:AE:E1:AC:D9:B7:85:A2:A3:B7:4E
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       55AB2DFF556F5B056406539ECA335349A7838D22
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS211061.roa
Signing time:             Thu 31 Aug 2023 07:52:10 +0000
ROA not before:           Thu 31 Aug 2023 07:47:10 +0000
ROA not after:            Thu 29 Aug 2024 07:52:10 +0000
asID:                     211061
IP address blocks:        157.254.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Feb 2024 00:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ab:2d:ff:55:6f:5b:05:64:06:53:9e:ca:33:53:49:a7:83:8d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:10 2023 GMT
            Not After : Aug 29 07:52:10 2024 GMT
        Subject: CN=E7B5AF7A4F9B6FBEF41EAEE1ACD9B785A2A3B74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:49:80:21:9e:f1:13:cf:03:62:a1:bd:1d:
                    96:a8:d7:2d:3f:40:84:91:ed:ac:c1:4e:b0:4c:19:
                    45:4c:6e:54:fc:6a:32:c9:1e:39:e2:aa:1a:63:f2:
                    34:62:11:81:56:b5:f4:1d:b2:69:14:2a:c6:ba:c1:
                    87:08:57:f8:84:6b:d5:28:35:0b:f3:d3:bb:45:ec:
                    8e:44:08:99:20:61:7a:78:cc:ca:bf:f6:39:b4:d5:
                    a1:5b:96:14:61:4d:bb:ec:9e:1d:19:86:64:c6:ba:
                    c6:36:e0:e7:40:70:c8:a1:bf:e8:4c:b7:c0:34:4d:
                    54:b5:65:48:3e:01:3b:bc:bf:55:f3:65:7f:7e:9d:
                    a2:d6:f2:8a:fa:a0:91:ec:86:73:49:42:33:b8:42:
                    9c:c1:5a:96:c3:ef:15:b6:7e:87:b0:12:38:56:31:
                    38:1e:32:9a:8d:d7:1f:ac:eb:28:40:cf:af:da:78:
                    75:25:09:90:0e:3b:91:e5:17:43:c4:a5:3d:f6:09:
                    b6:17:6d:41:88:41:cb:10:58:d7:96:f6:19:b7:6c:
                    43:f0:44:bb:21:8a:dd:7d:df:4e:89:66:98:bb:6d:
                    7d:c2:41:e6:1b:0f:fe:2e:12:7e:6b:85:c1:a8:29:
                    9b:14:19:7f:0a:bc:07:6a:7c:de:bc:35:96:ac:28:
                    96:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B5:AF:7A:4F:9B:6F:BE:F4:1E:AE:E1:AC:D9:B7:85:A2:A3:B7:4E
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS211061.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:8d:0b:68:dd:e6:5b:9e:d9:63:e3:66:5a:b3:7e:02:0c:3b:
         59:93:39:0f:31:a9:91:49:4b:d7:b3:ed:49:58:89:20:83:3b:
         c2:eb:95:42:3e:21:0a:85:1f:c2:a4:56:bd:a5:27:a4:7e:f8:
         c9:e4:d6:99:17:af:21:e9:ea:a2:5b:59:60:c5:08:dd:c9:55:
         9b:d3:60:7d:53:d0:6e:3c:0f:8c:56:98:58:eb:4d:29:08:3b:
         18:66:ba:f3:c6:d8:d5:2c:a1:9e:a4:45:da:81:0b:ec:ed:be:
         52:58:42:21:71:25:33:af:6b:be:3f:8a:b9:3e:ff:65:5c:75:
         86:69:b2:45:d5:bb:e1:e8:e6:c0:62:d1:2c:7b:5f:e9:ae:4d:
         ea:17:7a:03:5c:45:3e:6c:ea:f9:de:3c:8f:89:bb:84:4d:e7:
         e8:f2:95:2a:52:4a:26:9e:bd:7f:dd:a6:3a:ee:0d:26:42:f0:
         ac:7d:ec:a6:a7:99:7b:29:07:db:82:86:78:a6:57:61:e2:5b:
         d3:4a:f4:a6:41:18:75:b6:8c:6c:06:67:31:99:2d:fa:c5:d7:
         db:e3:60:96:ec:3a:b7:63:12:bb:21:93:7a:e1:a8:1e:e1:bd:
         72:95:48:e6:83:a2:f1:4e:6a:3b:92:87:ab:96:d4:8e:9d:ad:
         e5:f6:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----