Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS22781.roa
File:                     AS22781.roa (raw, json)
Hash identifier:          4+3A0hTKeFF/Br1fuCoXiX7NvyHfnEiHECiNx+4ZCbc=
Subject key identifier:   E3:25:6A:2C:A1:7C:97:86:74:A0:11:A5:84:B7:96:AC:52:65:9D:94
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       63B5E1F554B48FDA92B95936E3E530B087A2276E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS22781.roa
Signing time:             Sun 17 Sep 2023 14:52:24 +0000
ROA not before:           Sun 17 Sep 2023 14:47:24 +0000
ROA not after:            Sun 15 Sep 2024 14:52:24 +0000
asID:                     22781
IP address blocks:        157.254.16.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b5:e1:f5:54:b4:8f:da:92:b9:59:36:e3:e5:30:b0:87:a2:27:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 17 14:47:24 2023 GMT
            Not After : Sep 15 14:52:24 2024 GMT
        Subject: CN=E3256A2CA17C978674A011A584B796AC52659D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:36:86:e9:45:67:dc:bc:e5:1e:bb:6d:97:
                    06:37:b1:cc:37:83:ef:d7:15:83:55:ee:e5:4f:7a:
                    bc:fd:c8:ab:74:05:f4:7e:22:13:fa:35:0d:3f:e6:
                    52:12:fb:48:2b:e1:e0:8b:54:43:a4:aa:98:f5:db:
                    98:8e:f3:e0:6f:0d:f4:8d:7c:30:63:73:c5:bc:94:
                    13:23:bc:22:2c:21:ee:89:63:04:ac:8c:2a:d6:56:
                    54:0a:bb:a9:be:f6:34:3e:7c:b9:09:76:c1:9a:fa:
                    de:92:7a:04:9d:be:96:fd:f4:bd:a8:0a:f0:e4:31:
                    71:2d:54:5f:c1:e6:d6:58:83:cf:b1:01:2d:70:e1:
                    2c:b8:db:7d:e5:4f:bc:ac:7c:3a:60:02:e1:7a:4c:
                    dc:4a:68:7d:cf:ff:39:0e:98:ae:d4:da:b0:aa:ee:
                    5b:3f:f5:0b:ee:05:c7:37:61:23:68:27:52:82:83:
                    68:9a:0d:11:6a:89:02:9b:b0:be:1c:8d:42:dc:15:
                    5a:92:c8:d4:79:12:9d:01:25:fa:c3:30:78:68:b4:
                    e6:57:25:ab:50:f9:ad:82:7f:bc:21:e9:4c:81:7b:
                    d1:e4:22:9a:eb:3a:76:d5:db:95:1d:fd:cf:3b:54:
                    3b:89:a6:e4:3b:a1:0c:4a:bb:8c:3e:8a:eb:00:41:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:25:6A:2C:A1:7C:97:86:74:A0:11:A5:84:B7:96:AC:52:65:9D:94
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS22781.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:a3:83:b7:cb:60:08:c1:48:2f:9f:cf:d9:74:ac:47:9d:5a:
         a7:7f:d6:1e:52:45:c0:2f:3e:92:f3:ce:fb:e0:70:2f:f7:9d:
         ee:79:3d:ab:89:1d:02:e4:a4:51:00:57:e4:ca:05:e2:69:96:
         ca:a6:92:ed:e1:6e:01:ca:ae:ad:73:e9:8e:b3:6f:26:2a:bf:
         87:2b:da:67:fb:12:69:11:53:8f:bb:ee:0e:62:50:98:30:bc:
         1a:81:9c:67:eb:60:1f:98:cc:b8:6a:cd:11:ae:4d:53:61:8b:
         15:b2:7e:98:19:32:85:59:a4:29:46:c3:c0:f9:06:3e:12:ae:
         13:fc:bf:a3:c2:13:b7:ba:66:64:7c:96:a9:7e:80:07:f3:e1:
         33:47:32:08:f2:44:a9:ac:88:c8:b3:52:ce:c7:8c:5a:98:17:
         40:9f:d5:1e:43:59:22:d5:ea:1b:15:4c:71:ac:d9:9c:72:0c:
         5f:f6:96:63:8f:88:8a:87:16:66:45:48:23:91:58:13:70:56:
         b6:3a:b8:42:c5:2b:44:41:ae:9b:47:28:d7:2a:55:ab:5e:84:
         e3:2e:04:99:22:3d:d1:ab:33:34:2b:b8:97:af:d8:ee:b4:3b:
         0b:7c:54:0b:d4:27:8d:b4:8f:07:08:57:fe:97:fc:4e:10:f3:
         36:4d:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----