Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215622.roa
File:                     AS215622.roa (raw, json)
Hash identifier:          MDWJgl75WKyIkrXUWX0/kgyToFLf0t7aqSIuK+ooE+s=
Subject key identifier:   30:D2:55:EA:22:2C:BC:A2:16:13:51:B5:7F:7C:FE:15:59:9F:FA:32
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       485324FC0D5670651FCC8519DAB30F6E5F3BF607
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215622.roa
Signing time:             Wed 22 May 2024 18:27:39 +0000
ROA not before:           Wed 22 May 2024 18:22:39 +0000
ROA not after:            Wed 21 May 2025 18:27:39 +0000
asID:                     215622
IP address blocks:        157.254.252.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 00:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:53:24:fc:0d:56:70:65:1f:cc:85:19:da:b3:0f:6e:5f:3b:f6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 22 18:22:39 2024 GMT
            Not After : May 21 18:27:39 2025 GMT
        Subject: CN=30D255EA222CBCA2161351B57F7CFE15599FFA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:70:35:19:60:f1:94:cc:56:d5:b6:02:c0:2e:
                    e7:d3:53:4f:bb:ec:0d:c7:49:57:55:4b:ba:2a:e6:
                    0b:96:6a:d7:e4:14:8e:85:05:b9:f5:9c:d7:9c:d0:
                    be:d7:f5:35:b7:6b:53:42:75:7f:19:1b:27:4c:8a:
                    82:c7:06:e1:9e:ed:3c:d5:a3:4f:a0:f1:1e:db:58:
                    1c:73:4d:63:a5:50:62:60:2e:bc:90:de:08:23:b8:
                    3b:27:3b:3b:11:8a:dd:5b:f0:dc:0d:cd:7a:2e:a0:
                    e2:cd:0a:10:02:20:0a:f3:3c:7e:84:5b:9e:12:48:
                    8b:2c:76:94:87:23:3f:7a:c4:10:ba:76:57:49:ad:
                    5f:76:f9:be:62:80:a3:46:b5:5c:f4:0d:92:76:27:
                    34:2c:74:93:a3:28:40:c6:d1:12:40:75:f7:9b:04:
                    a1:2d:57:c2:b1:63:fd:2d:ec:d3:9a:5a:17:9f:82:
                    a2:c0:28:c7:76:a9:7e:d8:25:52:d3:d1:fe:a1:2f:
                    e4:41:6b:0b:d2:ca:e2:d8:75:a8:9e:56:77:9a:21:
                    10:ef:a8:f5:7b:bc:f3:d7:15:67:37:4d:ae:8f:23:
                    2e:c0:72:1d:2a:57:91:73:2e:0f:72:e1:d3:d1:be:
                    5a:4d:02:79:b7:e1:ac:db:47:71:8d:ab:66:34:17:
                    ee:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D2:55:EA:22:2C:BC:A2:16:13:51:B5:7F:7C:FE:15:59:9F:FA:32
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215622.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:9b:cc:99:29:53:d1:cc:39:19:95:ae:05:2f:fc:32:25:7d:
         74:90:46:a7:5d:aa:c1:2d:d8:86:ac:09:02:e2:f9:fa:71:69:
         db:6a:4a:20:33:29:c0:ef:2d:ed:ad:e3:53:ea:84:79:54:18:
         44:08:dc:90:63:ad:e3:e2:3e:99:3e:a0:9e:87:8e:63:3b:82:
         66:fe:35:0d:99:f0:43:78:25:23:cb:f7:5e:b8:26:b1:55:c5:
         64:31:70:76:4a:21:39:a4:dc:2e:f7:1a:bb:eb:e3:7c:09:d7:
         05:81:f4:e4:26:66:58:9f:3c:ce:60:a6:34:a5:53:30:3a:c6:
         bb:e3:e4:39:65:34:1b:73:77:90:ab:f8:47:fd:45:c0:2e:71:
         e4:0b:47:37:1a:f5:c0:1c:9a:37:1f:8b:32:28:d7:fb:cd:0a:
         39:b5:e0:e9:4a:72:c5:ad:57:ed:aa:a9:dd:10:78:7b:46:c1:
         40:fd:ec:a0:e1:fa:b4:8a:98:7d:f6:0f:75:6f:28:ae:33:e1:
         bd:65:12:ad:b4:10:d6:07:d2:19:8a:a7:a1:c5:2a:85:36:62:
         2c:57:11:59:31:19:69:98:9f:51:6b:03:6f:37:8f:87:2f:a4:
         a5:0b:de:cc:1e:06:20:4b:2e:f6:d3:90:fa:47:ff:af:88:20:
         87:c4:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----