Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS398465.roa
File:                     AS398465.roa (raw, json)
Hash identifier:          DHSWvxPRZhaMpD2z7j5VCsSxvO5ox/pzE+HM8kLnXIE=
Subject key identifier:   1E:A6:A9:5A:04:E6:FB:05:2B:39:FB:76:9D:D6:1F:C1:93:E6:61:4A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       691C0B6592A4C55501FEDAE409205F0B4E06F5FD
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS398465.roa
Signing time:             Mon 22 Jan 2024 16:52:33 +0000
ROA not before:           Mon 22 Jan 2024 16:47:33 +0000
ROA not after:            Mon 20 Jan 2025 16:52:33 +0000
asID:                     398465
IP address blocks:        157.254.4.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 00:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1c:0b:65:92:a4:c5:55:01:fe:da:e4:09:20:5f:0b:4e:06:f5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 22 16:47:33 2024 GMT
            Not After : Jan 20 16:52:33 2025 GMT
        Subject: CN=1EA6A95A04E6FB052B39FB769DD61FC193E6614A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:26:57:df:ef:f2:8e:65:df:20:46:01:6c:
                    52:f8:f7:46:46:f2:e3:fc:25:ea:a4:f2:55:2d:1f:
                    6c:43:30:84:7f:97:87:91:a1:46:82:d9:1e:9b:1f:
                    14:43:68:aa:ce:1b:65:6b:da:9d:8f:77:8e:7c:7a:
                    ac:30:a9:fa:7c:ae:7c:4a:42:0a:9a:0c:91:59:49:
                    b9:8e:53:1b:54:c5:8d:ca:bf:8a:f4:4d:00:f6:cc:
                    9a:ad:00:18:af:d3:a8:08:aa:2e:48:73:8f:14:21:
                    c1:6c:ce:cf:7c:85:03:ba:d2:94:6f:d3:d8:43:d5:
                    72:fa:0b:f5:22:55:86:ed:b4:90:05:09:71:98:d4:
                    4f:4c:2a:0a:ce:e0:05:0f:0f:71:b4:ef:d7:40:07:
                    46:af:3d:23:c9:38:03:d2:15:a9:c1:74:c9:c8:2a:
                    37:42:2d:41:a8:d8:e3:6d:3a:4d:e7:e1:a9:f7:e7:
                    b8:f9:5a:37:03:9a:f9:96:7e:63:3d:56:e1:36:5e:
                    52:78:77:ba:e7:c1:92:2f:f5:46:bb:31:0e:69:a4:
                    02:a7:de:fb:38:72:e2:6d:72:ce:53:af:9d:d1:a1:
                    fc:e0:51:2a:8a:b3:45:72:96:bb:1c:d4:a4:30:57:
                    60:69:3d:f1:d6:d7:63:19:1f:2d:4d:81:e1:6a:80:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A6:A9:5A:04:E6:FB:05:2B:39:FB:76:9D:D6:1F:C1:93:E6:61:4A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS398465.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:3b:eb:0c:e2:aa:44:50:8c:45:65:0d:c1:55:e5:90:b1:1a:
         f7:a1:4b:24:9e:72:5b:6a:dc:e1:f7:a5:5e:a3:3a:6a:10:47:
         1e:19:b7:06:32:0e:25:6f:76:19:fa:af:c5:95:f9:27:8e:69:
         97:c6:c4:c6:81:8f:85:46:0c:81:8b:96:ea:05:b2:f6:2c:2d:
         2c:30:f8:6b:11:14:f9:63:3d:24:2b:28:be:ac:fe:46:7e:04:
         63:da:6c:77:b9:f4:d8:9f:71:cf:59:87:2a:06:c0:15:10:4f:
         14:ec:4a:79:71:91:cf:06:f4:85:a7:75:bd:11:65:b1:6d:4a:
         f8:29:75:79:d7:13:dd:03:b7:5d:91:3e:79:4e:b4:50:c8:d5:
         dd:9e:ac:f1:e0:93:28:4a:91:bb:50:cc:b6:a7:d8:e9:52:c7:
         6e:d7:0d:90:b9:a8:05:3c:e5:86:d2:a5:be:8c:db:cb:3d:f6:
         dd:4f:f4:31:9c:ae:a8:ab:d9:3b:a3:fd:e1:db:62:71:39:d9:
         b1:a4:55:15:ec:5e:47:be:8c:01:d4:8d:e6:56:f6:35:b7:a7:
         26:b4:e8:f0:c9:4f:eb:d7:3d:02:60:cf:41:bf:34:46:76:96:
         68:c2:e4:9b:a7:12:ae:bd:ee:79:7c:1a:3a:83:71:82:b9:68:
         b5:57:86:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----