Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS64289.roa
File:                     AS64289.roa (raw, json)
Hash identifier:          asS9Vl4NOLR29BXJ1k5bOhET20PuGoP6qr2DchKEtVU=
Subject key identifier:   2B:10:19:29:1B:27:61:35:20:D1:AF:C2:5A:FF:0C:9F:A7:EE:FF:63
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2B04561A432990928BA9A366783FB34A0F19FEA2
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS64289.roa
Signing time:             Thu 25 Jan 2024 06:12:37 +0000
ROA not before:           Thu 25 Jan 2024 06:07:37 +0000
ROA not after:            Thu 23 Jan 2025 06:12:37 +0000
asID:                     64289
IP address blocks:        157.254.28.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 25 Feb 2024 00:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:04:56:1a:43:29:90:92:8b:a9:a3:66:78:3f:b3:4a:0f:19:fe:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 25 06:07:37 2024 GMT
            Not After : Jan 23 06:12:37 2025 GMT
        Subject: CN=2B1019291B27613520D1AFC25AFF0C9FA7EEFF63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:5a:74:36:8d:ba:92:86:03:09:e0:48:8a:
                    95:82:e0:65:55:34:1d:27:24:85:46:10:1c:7e:80:
                    d3:33:f2:b4:4c:42:a6:97:41:74:da:b3:0f:29:ee:
                    db:37:71:ab:f0:6b:32:d2:35:c4:e8:78:d2:7d:b7:
                    02:f8:4f:ee:55:c0:59:bd:48:b3:31:af:8d:f9:b9:
                    28:84:3d:8d:b6:38:f1:b6:a0:72:75:35:10:2e:ff:
                    15:d2:7c:0a:3d:61:e7:63:d1:44:02:3c:53:c4:96:
                    5e:d3:35:77:d5:41:8d:3c:d2:a4:8e:bb:8a:26:95:
                    88:65:e3:a4:f2:d0:a4:f7:7a:49:20:50:f0:6d:0f:
                    fa:35:3f:94:fb:45:12:25:6d:42:4a:de:11:0b:fa:
                    17:97:96:07:6a:28:d6:7d:58:83:19:8c:1a:f7:e0:
                    7e:53:3f:f9:9f:a1:70:b5:05:68:9f:f5:07:b2:57:
                    de:65:44:ee:14:49:3e:09:70:69:5f:d1:9e:2f:36:
                    c4:16:84:a0:35:54:22:72:b8:5d:6c:9f:00:01:c0:
                    7c:35:4a:70:10:65:f2:b0:be:25:68:7b:a3:40:c4:
                    5a:8d:79:70:ce:a3:ef:f4:79:9f:0d:5e:5f:6d:22:
                    1e:77:80:ac:47:22:5e:93:65:d4:4a:00:49:8a:b7:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:10:19:29:1B:27:61:35:20:D1:AF:C2:5A:FF:0C:9F:A7:EE:FF:63
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS64289.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:ad:cf:50:dd:3b:d4:e0:05:81:f5:e7:5f:fa:b1:4e:e9:75:
         34:2c:30:89:f8:40:01:dd:7d:7b:37:3a:66:0e:39:54:7a:af:
         85:59:bb:4a:77:a9:f6:42:8f:3f:65:88:a9:c9:bd:74:9d:93:
         56:7a:33:ae:c3:3b:67:db:50:51:d0:f5:43:91:b9:cd:6e:26:
         20:06:7a:ad:2f:74:88:75:5d:c5:6a:d6:b2:51:fd:fb:3e:60:
         36:6a:4d:2f:91:c7:e9:72:bd:c3:a2:3d:0f:8d:96:67:ee:b1:
         92:44:29:55:8a:35:a4:ec:eb:98:08:e9:2b:ae:f7:92:00:35:
         3e:c2:60:a0:ac:69:7a:0a:c4:f1:69:e9:98:29:9c:a5:81:81:
         61:5c:ed:03:8d:dc:81:13:a5:19:18:1d:b2:d8:90:78:30:87:
         53:f9:e6:31:7e:75:9e:df:de:7a:f3:b3:15:26:79:7c:57:11:
         25:8c:66:7e:dc:e9:ee:2f:b9:a4:f0:d0:94:cd:78:4a:d4:ec:
         6c:bd:72:64:48:73:1c:e5:1c:a8:63:c1:84:54:81:6e:11:7e:
         a9:45:7b:a8:d7:07:a8:4f:20:a5:13:53:30:16:e2:33:f0:60:
         2e:7a:29:ef:1e:a9:87:01:a6:54:8b:aa:c9:0a:5f:76:47:bf:
         2f:ad:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----