Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS53616.roa
File:                     AS53616.roa (raw, json)
Hash identifier:          yHWBBgzJlspnwAcnso1+0wxr5Kd2qSSG5viqcw1CL1g=
Subject key identifier:   E2:BA:81:3E:94:E7:49:96:E6:14:A2:0D:CD:5B:0F:2C:DB:EF:D8:67
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7CC08F64501CD4731684B6F84236D37A22E1CEC8
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS53616.roa
Signing time:             Thu 31 Aug 2023 07:52:12 +0000
ROA not before:           Thu 31 Aug 2023 07:47:12 +0000
ROA not after:            Thu 29 Aug 2024 07:52:12 +0000
asID:                     53616
IP address blocks:        157.254.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 Nov 2023 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c0:8f:64:50:1c:d4:73:16:84:b6:f8:42:36:d3:7a:22:e1:ce:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:12 2023 GMT
            Not After : Aug 29 07:52:12 2024 GMT
        Subject: CN=E2BA813E94E74996E614A20DCD5B0F2CDBEFD867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:bb:07:e2:85:b6:a7:84:ca:8a:31:ed:21:
                    88:d4:91:f9:eb:17:fc:ff:0f:48:77:d4:ef:09:f3:
                    c5:4c:e4:d8:b6:a1:f8:4b:6e:d3:76:18:13:07:cf:
                    d1:e1:1c:3c:b7:37:59:b2:60:a9:ec:0f:b8:c1:7d:
                    b0:4e:ef:f9:27:3e:33:47:3c:19:77:a0:b4:07:9e:
                    cc:73:40:8a:39:fe:98:0f:77:30:38:64:cb:93:26:
                    1b:59:b8:e4:64:f4:07:db:43:43:a7:c7:a5:e8:75:
                    d5:54:1b:e6:04:a5:58:55:e0:80:d0:7d:92:86:9d:
                    3f:48:a6:6e:29:b0:39:a6:58:79:15:af:e5:96:49:
                    7a:9b:75:30:98:6e:92:bb:95:20:a5:de:54:01:4d:
                    01:ed:22:1d:0f:e7:e7:14:50:65:6b:dd:b0:6e:4d:
                    fa:29:44:e6:d4:34:0e:53:50:39:2d:db:09:ac:24:
                    bd:ba:08:e2:93:03:c7:f8:b9:e4:e4:02:41:9a:f8:
                    33:9a:e8:0f:bc:e6:32:e4:89:c9:22:e3:a0:7b:da:
                    32:7c:bb:8b:e6:03:57:23:35:93:ad:26:4c:8b:2a:
                    9c:0c:6a:de:68:55:15:3b:95:68:c4:e2:53:d4:bb:
                    f0:f8:9d:de:19:8d:03:a7:fc:61:e4:0e:8e:a1:72:
                    e4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BA:81:3E:94:E7:49:96:E6:14:A2:0D:CD:5B:0F:2C:DB:EF:D8:67
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS53616.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:78:93:3a:4d:e9:c2:d2:d3:0a:50:10:b4:ee:39:74:08:e9:
         c0:2d:09:72:e9:a0:94:23:72:98:da:b9:eb:f2:fa:79:2d:f0:
         73:da:6f:eb:13:ae:83:df:ad:89:b5:09:3a:a3:47:b2:b8:ed:
         e8:23:d0:1f:86:5c:bc:bc:d4:03:99:65:3e:d0:87:24:63:dd:
         d0:c2:85:2e:5c:a5:be:67:5e:6c:bf:d9:ca:13:ab:2c:8c:0c:
         2e:56:ed:d0:a4:69:73:6f:45:4a:74:5f:ce:a8:7d:0d:30:04:
         d0:73:47:f4:98:03:77:67:c1:e6:e3:dc:ea:09:c5:7e:41:1d:
         1b:f1:79:75:73:f4:52:9e:19:02:ba:8b:1b:9d:ca:e8:a6:47:
         27:dc:8f:a7:78:0b:ce:78:84:f1:f8:47:4f:18:77:5b:04:e4:
         c6:d6:8d:06:33:f0:81:8f:a4:6d:80:6c:48:fc:87:f2:36:15:
         59:5d:37:a2:92:01:ca:ab:af:ed:23:5b:97:dc:5b:21:e4:47:
         f6:c9:32:89:2a:db:48:4b:03:35:66:42:f0:13:bf:94:2f:6a:
         2d:49:30:b1:19:bf:df:e4:3f:4a:c8:1c:79:38:c6:43:f5:c4:
         fc:a5:2e:c1:4d:aa:43:34:01:9e:90:a4:33:b8:e4:9c:59:12:
         06:f8:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----