Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS24768.roa
File:                     AS24768.roa (raw, json)
Hash identifier:          Cz0JcdWeSZBWzaMNFSESXiM0rzGsW4QwTCpWhYcNtns=
Subject key identifier:   BB:43:06:DC:25:DD:6D:1D:3A:A1:4D:53:DF:F4:1B:A5:41:03:3E:A1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       562B5F7B855DE21ADF5C8D711E17176FF1BD4BA7
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS24768.roa
Signing time:             Wed 15 Nov 2023 12:45:05 +0000
ROA not before:           Wed 15 Nov 2023 12:40:05 +0000
ROA not after:            Wed 13 Nov 2024 12:45:05 +0000
asID:                     24768
IP address blocks:        157.254.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 00:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2b:5f:7b:85:5d:e2:1a:df:5c:8d:71:1e:17:17:6f:f1:bd:4b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov 15 12:40:05 2023 GMT
            Not After : Nov 13 12:45:05 2024 GMT
        Subject: CN=BB4306DC25DD6D1D3AA14D53DFF41BA541033EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e8:86:f9:7d:40:a7:3c:85:84:d3:b4:b5:cc:
                    2a:41:d0:7b:9c:6c:21:1e:53:bc:fd:b0:fd:73:f4:
                    48:c0:42:c1:3c:d9:19:e9:22:8f:83:e3:e0:cf:7f:
                    dc:e7:3f:fc:c8:e6:8d:94:b3:35:7b:0b:c3:ea:bc:
                    51:6f:46:fa:1a:2a:ce:d3:00:07:a0:5a:d8:85:55:
                    c1:38:cb:72:44:14:c1:33:f4:0d:00:a2:4b:d6:0b:
                    f7:72:d5:d3:0d:24:86:0b:d8:f2:f8:e8:e4:68:10:
                    38:01:cc:21:17:cb:42:21:eb:4f:6f:52:34:34:36:
                    7e:bd:a0:b4:f5:8a:8e:ab:3d:92:6a:4a:8a:c3:bc:
                    80:d7:05:87:69:7a:66:fe:53:e8:f3:52:20:f8:f7:
                    5c:39:be:46:d1:35:c4:b7:7c:76:19:ef:39:87:85:
                    4a:01:b0:21:69:47:2a:fb:e2:fa:9e:8a:b8:13:4a:
                    5a:3d:04:ab:cd:64:38:62:6f:78:20:19:60:0c:f5:
                    94:b6:df:d2:d0:1b:12:e9:d1:6d:fa:2c:00:3b:2c:
                    c5:9f:51:07:cc:cd:43:ca:4b:98:76:6f:6e:b6:fc:
                    48:a8:4e:ab:eb:b7:1f:49:48:c4:b2:bf:b1:85:ae:
                    8a:f6:07:1d:4d:f2:6f:61:47:ca:cf:5a:87:98:c1:
                    9e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:43:06:DC:25:DD:6D:1D:3A:A1:4D:53:DF:F4:1B:A5:41:03:3E:A1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS24768.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:61:27:03:36:56:48:31:5a:4f:69:95:f9:51:9b:8e:5f:6f:
         89:72:64:11:73:f2:b1:b1:b9:f1:f5:5b:ee:22:fd:86:6a:c4:
         eb:2b:2c:cb:af:e9:c1:0e:33:38:fc:27:43:d8:d8:5a:42:60:
         2e:8e:ca:c3:44:ce:a4:12:52:62:6a:fa:fa:94:c6:1e:89:a9:
         19:d6:d0:83:7c:51:5d:92:f6:cf:ce:6e:96:69:4c:da:65:90:
         0f:8b:07:c6:ac:c7:48:51:02:70:7b:0e:d4:19:91:b7:17:0f:
         7d:28:32:a5:e8:65:e9:35:be:9e:c5:55:40:6f:7b:23:da:12:
         fb:e5:61:27:b4:27:af:76:8e:f7:04:8b:48:6a:d7:a5:99:66:
         20:f9:d2:37:47:44:11:3e:2e:6c:c1:3c:1d:96:9f:87:ff:7d:
         03:97:18:8c:c5:40:4e:93:83:3d:b6:9a:8d:5f:88:ba:d7:8f:
         97:94:23:84:25:5c:6d:a2:a8:10:a2:65:81:a7:45:ff:4d:2c:
         0a:ec:1c:44:b6:56:6f:59:78:9b:39:a3:1d:ce:4e:42:9d:6e:
         4f:ac:01:ed:02:81:dc:81:45:59:2e:c9:f4:66:b4:db:2e:88:
         01:44:7f:63:4b:07:31:d4:06:e7:8d:f9:02:a7:40:d5:49:e4:
         10:22:5b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----