Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21743.roa
File:                     AS21743.roa (raw, json)
Hash identifier:          No4FFArVTcCl73rYk29tLZUKLmee6y+Qv8UjLSO6jos=
Subject key identifier:   91:77:E2:5D:C4:C7:1A:31:06:64:D6:60:31:C7:8C:78:81:BA:64:99
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1D6EA18C62A3F15E383B5D9CB1617B5AB8A1A9A1
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21743.roa
Signing time:             Mon 11 Mar 2024 05:13:20 +0000
ROA not before:           Mon 11 Mar 2024 05:08:20 +0000
ROA not after:            Mon 10 Mar 2025 05:13:20 +0000
asID:                     21743
IP address blocks:        157.254.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 10:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6e:a1:8c:62:a3:f1:5e:38:3b:5d:9c:b1:61:7b:5a:b8:a1:a9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 11 05:08:20 2024 GMT
            Not After : Mar 10 05:13:20 2025 GMT
        Subject: CN=9177E25DC4C71A310664D66031C78C7881BA6499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:da:37:40:f7:01:aa:85:20:f4:92:b5:05:
                    36:a4:37:7b:78:17:46:2b:87:5d:15:fc:5c:d3:49:
                    5a:99:fa:3a:52:1c:f4:56:6c:b6:82:b7:66:6d:94:
                    b6:3d:79:49:16:e1:1a:15:21:bb:f9:d1:2c:e9:71:
                    c6:82:84:01:c0:42:18:07:9d:48:32:69:5a:e7:1e:
                    3c:32:05:35:b6:7d:44:be:8c:6f:e0:64:81:cd:04:
                    ee:01:9e:d3:a4:6a:a1:b5:da:25:b8:97:68:67:7b:
                    76:00:0c:0a:38:83:ae:99:34:68:85:76:b7:b7:28:
                    31:dc:66:c9:19:fe:dd:8a:d3:99:fc:44:19:db:41:
                    ec:fb:da:2d:fe:a4:68:7a:d1:d1:d0:a3:4c:35:b9:
                    99:1e:5a:f9:d9:8b:7f:b2:c2:73:ed:da:21:cc:d0:
                    e2:17:6e:56:84:4c:eb:d5:d9:f3:72:de:9e:0c:18:
                    04:f2:ac:7b:84:f7:41:30:0d:95:d0:06:cd:56:fb:
                    d1:df:55:47:51:ff:31:d1:ba:7d:56:8b:3a:b5:a2:
                    79:af:e3:44:21:70:55:33:8f:de:22:9b:ed:8f:27:
                    40:7b:e6:3b:c1:11:7d:ba:14:ca:33:12:e4:2e:25:
                    4f:d2:36:3d:4b:fd:aa:eb:eb:b8:70:77:93:be:0a:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:77:E2:5D:C4:C7:1A:31:06:64:D6:60:31:C7:8C:78:81:BA:64:99
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21743.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:45:d9:02:9f:87:07:70:9f:8d:35:8a:65:1e:5c:19:f7:73:
         f2:bc:e2:39:53:b8:06:d0:2d:c0:0b:51:e7:ab:66:5c:44:a2:
         c6:df:6c:27:15:cb:73:dc:ea:5c:83:80:89:15:c2:b5:8c:03:
         56:e1:56:a6:79:63:39:3e:c0:e5:de:20:66:3d:97:04:41:39:
         24:5f:31:f4:8d:0d:fa:e5:e0:f5:ad:79:50:f3:76:a2:3e:32:
         79:38:50:05:95:c6:7d:ad:b7:f0:b6:5e:d1:a6:4f:a0:76:d7:
         92:de:6c:b0:89:be:d1:d4:0f:af:63:db:e0:8e:57:4c:0e:41:
         9e:39:e3:14:b6:bd:89:c6:15:40:6f:1d:41:1c:05:f7:bd:a9:
         8a:eb:06:7e:c2:81:68:5a:b6:c6:96:ce:0c:ed:3e:e1:54:49:
         c1:82:c9:13:c8:59:90:79:07:80:71:39:24:38:da:a2:27:38:
         52:f5:23:1f:32:57:1e:97:5a:2c:ad:d3:22:cc:2b:e1:a0:50:
         e9:8b:56:87:1d:ad:d1:4d:e1:c8:f6:e3:e1:0f:50:14:a4:ee:
         91:7b:18:8a:29:89:5c:01:e8:e8:f0:c6:49:b7:48:77:ad:e4:
         c0:c7:37:5f:24:fd:22:cc:2d:1c:6f:a8:f3:eb:be:f1:d7:bb:
         f7:a6:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----