Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS64267.roa
File:                     AS64267.roa (raw, json)
Hash identifier:          BjslKBXk6cj7yRPPWsRi0m7rtWZ5qQLQLw1pkIFLnAg=
Subject key identifier:   DC:2B:F6:F7:1A:52:9E:7A:8C:06:7E:69:78:F3:1F:B8:CA:2C:0B:96
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       CEC71BA223FBEF740EE1454F02BB8AF319373A
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS64267.roa
Signing time:             Tue 19 Dec 2023 16:49:18 +0000
ROA not before:           Tue 19 Dec 2023 16:44:18 +0000
ROA not after:            Tue 17 Dec 2024 16:49:18 +0000
asID:                     64267
IP address blocks:        157.254.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Jan 2024 00:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ce:c7:1b:a2:23:fb:ef:74:0e:e1:45:4f:02:bb:8a:f3:19:37:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 19 16:44:18 2023 GMT
            Not After : Dec 17 16:49:18 2024 GMT
        Subject: CN=DC2BF6F71A529E7A8C067E6978F31FB8CA2C0B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:08:f0:03:74:25:19:9f:2a:f9:66:2e:1e:
                    06:e2:a6:c5:7c:df:6d:9a:d0:3c:c9:f3:31:15:ac:
                    ed:ee:0e:af:7e:4a:23:94:6e:3c:86:40:02:17:33:
                    83:83:97:58:39:82:98:b6:c2:0c:9f:69:6f:bb:82:
                    d1:80:fe:29:8b:9f:05:1c:ba:55:b3:f0:70:9d:78:
                    68:3d:70:68:64:1a:38:46:fb:9a:aa:d7:44:a4:c8:
                    c3:97:6c:f4:46:ec:0a:14:ca:63:65:6f:45:77:6f:
                    d8:89:e7:01:e1:bf:a9:f3:3e:2b:81:8c:1c:b4:b0:
                    75:cc:84:22:35:f7:66:58:d4:dc:23:1d:83:ea:77:
                    fd:77:f8:2b:d8:b5:9e:23:40:6f:03:26:ed:3d:41:
                    b0:dd:66:fb:da:e8:3c:0e:48:14:df:6f:80:b4:12:
                    83:f8:9e:a7:77:e0:57:11:f6:c9:0e:92:36:86:f7:
                    dd:3c:85:f3:01:a4:de:ea:11:fb:05:a2:e5:36:d2:
                    be:8e:66:13:74:4c:42:17:21:a4:20:37:09:bb:91:
                    b2:91:53:b0:b4:c3:98:12:3c:62:30:1e:ba:52:42:
                    88:83:5e:0c:d3:cc:82:68:9e:0d:bf:04:7d:74:b3:
                    e4:84:9a:b2:92:7b:52:f7:ef:3d:fd:25:78:42:69:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2B:F6:F7:1A:52:9E:7A:8C:06:7E:69:78:F3:1F:B8:CA:2C:0B:96
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS64267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:64:97:42:2e:9f:49:ce:06:27:be:46:85:1b:95:d1:58:33:
         a5:8a:64:c0:bb:1e:3a:27:b6:b0:59:0a:a1:ad:08:b8:ef:8e:
         93:da:83:57:2a:a4:16:11:1b:76:17:07:34:da:ff:8a:32:b0:
         cb:48:63:97:84:1f:e7:05:5a:b0:71:ff:a1:74:1f:80:8a:57:
         16:d8:18:36:3d:d1:ee:a9:1a:42:a0:69:74:7f:bb:a6:ef:8b:
         0c:dd:e0:eb:f3:f3:f7:de:9e:3f:14:12:67:c5:ee:7a:5b:08:
         54:e8:89:5c:8b:be:59:48:fe:a0:e8:bc:dc:b6:6f:d0:f4:7b:
         e3:a1:ef:b7:c8:30:aa:95:0c:4e:8f:57:ab:84:c4:9b:db:7c:
         64:b8:01:15:26:31:7e:e1:9b:ce:23:8a:4b:66:ed:c3:58:ee:
         87:73:1d:bc:90:64:97:4a:39:a5:a8:95:d7:1e:b9:6d:a0:a8:
         ec:c7:7d:fa:49:bf:c7:3a:c7:19:ee:06:33:b1:e5:c0:3d:09:
         f6:b2:93:ab:02:d3:8b:fa:ad:63:4c:6c:0a:9e:94:4d:21:eb:
         f0:ec:74:c3:94:b3:84:24:e5:66:c4:df:f2:a8:ea:8a:89:b8:
         0f:0d:a8:dd:59:96:0a:cc:8c:8c:82:bf:ec:a6:44:41:fa:8a:
         fd:fe:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----