Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7489.roa
File:                     AS7489.roa (raw, json)
Hash identifier:          8vq9SortoDulDzZBHCP3uMRRT8Har6qNBH3VrdRHUeE=
Subject key identifier:   82:EA:C9:13:B2:60:22:53:D8:D1:5C:81:77:C5:21:F9:BA:80:1A:70
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       45414838E12B1E22A30DA7538828A1BB076C18D7
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7489.roa
Signing time:             Thu 31 Aug 2023 07:52:05 +0000
ROA not before:           Thu 31 Aug 2023 07:47:05 +0000
ROA not after:            Thu 29 Aug 2024 07:52:05 +0000
asID:                     7489
IP address blocks:        157.254.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 24 May 2024 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:41:48:38:e1:2b:1e:22:a3:0d:a7:53:88:28:a1:bb:07:6c:18:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:05 2023 GMT
            Not After : Aug 29 07:52:05 2024 GMT
        Subject: CN=82EAC913B2602253D8D15C8177C521F9BA801A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:56:99:3e:5d:58:ba:53:85:78:71:9e:1b:de:
                    40:5b:67:0a:43:1e:ff:a1:2c:07:59:58:13:6f:78:
                    d9:db:ea:6f:5b:b8:7d:73:29:19:a9:10:41:95:c1:
                    d9:7b:c6:c4:1d:8b:ac:24:5c:c0:4f:15:f9:8d:86:
                    c3:24:ac:cc:44:e7:47:af:20:e6:75:b6:8d:80:03:
                    17:3c:ee:e3:10:e8:31:ce:46:48:ea:ec:e6:86:71:
                    fd:e1:32:e2:0f:4a:0d:47:af:52:48:1d:72:d7:5b:
                    7e:59:7d:15:90:61:7f:8a:b1:03:5b:bb:89:f8:c7:
                    32:00:9b:d2:d8:d3:82:86:54:56:a0:6f:03:b6:c2:
                    3c:ff:f7:c9:a7:2f:ed:59:ff:5a:37:08:5b:ca:1b:
                    02:fa:a1:f9:38:a0:44:6e:c9:37:01:4c:8f:50:d6:
                    4d:e4:f8:da:fc:b4:86:77:b6:61:25:2d:e7:f8:8e:
                    96:a0:bd:36:2d:8b:84:d2:66:f0:c2:bb:74:e3:a0:
                    d7:db:c3:65:df:9d:92:3b:cd:ec:97:6b:f1:8f:de:
                    d8:e7:e4:c5:18:38:7c:76:f0:aa:9d:4f:4e:da:68:
                    e0:f8:8b:6a:7b:8c:1c:03:e7:91:ab:03:17:10:d0:
                    e8:23:27:73:ec:50:01:2b:90:82:d2:f7:d5:f8:3b:
                    1f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EA:C9:13:B2:60:22:53:D8:D1:5C:81:77:C5:21:F9:BA:80:1A:70
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7489.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:84:72:ff:ef:9d:f7:61:ec:33:d3:67:3a:6d:db:17:1a:c7:
         e9:18:c7:79:b2:e6:29:5d:3c:a7:03:e8:3c:91:91:b9:78:3d:
         53:87:b5:d4:ff:09:78:e6:29:59:63:0a:2e:df:d1:fa:c7:a5:
         04:c1:36:a7:2f:36:5b:58:d9:44:3f:9e:dc:53:0e:a7:e2:85:
         23:50:37:3a:a5:71:47:b9:f6:b4:ae:22:5e:56:80:d3:bb:16:
         8c:63:c6:73:10:de:9b:8b:c0:0b:b6:44:a7:47:1c:2c:35:04:
         bd:fc:a1:90:ad:42:7c:02:f7:4b:73:d3:44:e4:3b:31:7f:be:
         ab:b2:c5:95:8b:98:f6:15:37:e0:00:89:d5:2f:ac:f9:59:fa:
         9e:f2:61:72:b3:10:6a:d8:2c:64:14:e9:8a:36:f1:e1:35:40:
         44:92:01:6f:7d:80:45:00:c2:e4:59:9d:86:1b:27:d3:c4:f8:
         93:61:7c:db:73:2f:12:5c:f5:81:c7:e9:57:ad:81:18:77:25:
         71:6d:d4:3a:50:65:e6:de:1f:53:78:74:8f:98:b2:56:1e:55:
         90:cd:77:2b:e2:f1:8e:ac:e8:d5:cf:47:fa:fa:f8:9e:4c:af:
         b5:61:ed:15:49:92:2d:7c:8b:47:43:e6:9c:21:cf:a8:4f:28:
         25:a7:e3:7e
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIURUFIOOErHiKjDadTiCihuwdsGNcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwODMxMDc0NzA1WhcNMjQwODI5MDc1MjA1
WjAzMTEwLwYDVQQDEyg4MkVBQzkxM0IyNjAyMjUzRDhEMTVDODE3N0M1MjFGOUJB
ODAxQTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0laZPl1YulOF
eHGeG95AW2cKQx7/oSwHWVgTb3jZ2+pvW7h9cykZqRBBlcHZe8bEHYusJFzATxX5
jYbDJKzMROdHryDmdbaNgAMXPO7jEOgxzkZI6uzmhnH94TLiD0oNR69SSB1y11t+
WX0VkGF/irEDW7uJ+McyAJvS2NOChlRWoG8DtsI8//fJpy/tWf9aNwhbyhsC+qH5
OKBEbsk3AUyPUNZN5Pja/LSGd7ZhJS3n+I6WoL02LYuE0mbwwrt046DX28Nl352S
O83sl2vxj97Y5+TFGDh8dvCqnU9O2mjg+Itqe4wcA+eRqwMXENDoIydz7FABK5CC
0vfV+DsfewIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFILqyROyYCJT2NFcgXfFIfm6
gBpwMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzc0ODkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/qgwDQYJKoZIhvcNAQELBQADggEB
ACeEcv/vnfdh7DPTZzpt2xcax+kYx3my5ildPKcD6DyRkbl4PVOHtdT/CXjmKVlj
Ci7f0frHpQTBNqcvNltY2UQ/ntxTDqfihSNQNzqlcUe59rSuIl5WgNO7FoxjxnMQ
3puLwAu2RKdHHCw1BL38oZCtQnwC90tz00TkOzF/vquyxZWLmPYVN+AAidUvrPlZ
+p7yYXKzEGrYLGQU6Yo28eE1QESSAW99gEUAwuRZnYYbJ9PE+JNhfNtzLxJc9YHH
6VetgRh3JXFt1DpQZebeH1N4dI+YslYeVZDNdyvi8Y6s6NXPR/r6+J5Mr7Vh7RVJ
ki18i0dD5pwhz6hPKCWn434=
-----END CERTIFICATE-----