Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS8100.roa
File:                     AS8100.roa (raw, json)
Hash identifier:          Ioc4/e7lSRuiy4vBX4Ew/jYUbn/F1Oelc559XjhcEVU=
Subject key identifier:   23:2D:E1:68:54:59:20:2E:32:7E:9F:84:1A:F0:16:8A:76:BE:86:A3
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       24A0FDB37E97A4E92B42D9B4DE9775E42394E119
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS8100.roa
Signing time:             Thu 14 Sep 2023 01:44:30 +0000
ROA not before:           Thu 14 Sep 2023 01:39:30 +0000
ROA not after:            Thu 12 Sep 2024 01:44:30 +0000
asID:                     8100
IP address blocks:        157.254.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 Nov 2023 08:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a0:fd:b3:7e:97:a4:e9:2b:42:d9:b4:de:97:75:e4:23:94:e1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 14 01:39:30 2023 GMT
            Not After : Sep 12 01:44:30 2024 GMT
        Subject: CN=232DE1685459202E327E9F841AF0168A76BE86A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:8e:5a:19:f1:b1:20:e1:63:fd:49:d2:3f:
                    c6:1a:ea:93:be:39:08:87:a3:fa:27:f4:50:fe:a2:
                    53:54:8f:3a:e5:96:5e:3b:43:ca:bc:f0:e4:3f:9b:
                    cb:bb:e2:05:e7:66:57:22:73:d2:bd:ed:9b:76:bf:
                    7b:c0:0e:b9:14:1f:fd:17:66:19:3b:26:b7:36:f8:
                    af:60:0f:b7:07:ab:18:1e:51:0c:60:2a:64:16:3d:
                    73:17:cd:c5:fb:f0:9b:cd:f7:34:de:ca:e8:de:8c:
                    8c:3f:3a:2b:da:19:fa:88:72:3a:27:95:12:b0:33:
                    6d:34:06:3a:c7:ee:a0:96:43:c0:8f:9c:b0:9f:28:
                    c1:0a:e8:41:71:36:a0:8f:68:c9:50:bf:57:04:de:
                    f1:ae:ef:c8:8e:a5:b3:e4:05:17:6e:06:79:70:61:
                    0c:22:25:b9:81:cb:ec:dd:4d:f4:11:d7:0b:5d:c2:
                    3c:94:60:bf:f1:84:da:7c:ba:83:d3:dc:1b:31:c8:
                    72:3c:b3:35:6a:fa:d0:ad:fd:fd:79:22:f2:a7:17:
                    4b:ca:4b:70:a7:ef:52:62:17:62:1b:8c:f0:7d:9b:
                    7a:86:41:ce:a5:a9:1c:35:24:94:5a:ed:85:0c:22:
                    52:d6:18:47:83:66:07:1c:55:65:79:bf:f1:93:30:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2D:E1:68:54:59:20:2E:32:7E:9F:84:1A:F0:16:8A:76:BE:86:A3
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS8100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b9:1d:80:36:fc:21:dc:19:44:b0:7a:cd:85:b4:e4:dd:75:
         3b:73:8a:3d:37:b0:a0:90:a2:15:35:de:83:11:c4:e2:c2:21:
         3f:7d:c8:58:9d:5c:31:e9:aa:b3:ec:5c:74:ec:48:82:98:eb:
         2a:b6:b1:a5:5b:58:44:71:ec:5e:4c:6e:c2:23:07:7d:b5:61:
         71:58:01:df:df:0a:17:f5:fd:16:6d:d8:30:ba:c3:e4:1c:ca:
         99:59:e5:8a:27:f8:4e:4c:33:d8:03:bb:a4:2e:0b:3b:0d:14:
         4a:f8:43:c4:00:eb:fc:21:16:9a:25:de:cb:40:aa:2b:49:b2:
         dc:02:fc:95:ea:20:27:bd:1f:74:47:c3:62:c4:ed:c9:e4:11:
         d4:23:81:18:e4:1c:53:d8:79:29:ed:cb:74:84:9f:10:1a:2e:
         40:46:5c:23:73:60:7f:ef:f7:69:f1:32:5f:85:9f:c8:95:49:
         3a:cf:7f:9a:d7:61:34:87:75:44:36:9c:0c:d3:9a:af:0a:60:
         56:38:08:d3:48:0c:da:4e:27:aa:db:24:0f:66:b9:eb:2b:0b:
         f7:85:89:10:6d:17:c3:01:16:4d:09:f2:0b:cb:83:8b:43:e3:
         d6:97:2b:9d:9d:17:40:30:95:1d:e8:6d:a7:25:f1:c9:0d:7f:
         c0:a8:1b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----