Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS10753.roa
File:                     AS10753.roa (raw, json)
Hash identifier:          tPeJ503NBMvXwaipNZBrwo3fHtoPYKIoWhbrVbNLjHo=
Subject key identifier:   48:F6:AA:CC:FF:66:7F:E6:B0:4F:5E:9E:D1:EB:10:01:D0:D1:6F:4F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1322512C83D98D90F58EBA89B9E61FB74484C8F8
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS10753.roa
Signing time:             Sat 23 Sep 2023 14:17:30 +0000
ROA not before:           Sat 23 Sep 2023 14:12:30 +0000
ROA not after:            Sat 21 Sep 2024 14:17:30 +0000
asID:                     10753
IP address blocks:        157.254.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 03 Mar 2024 00:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:22:51:2c:83:d9:8d:90:f5:8e:ba:89:b9:e6:1f:b7:44:84:c8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 23 14:12:30 2023 GMT
            Not After : Sep 21 14:17:30 2024 GMT
        Subject: CN=48F6AACCFF667FE6B04F5E9ED1EB1001D0D16F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:68:63:85:8a:72:4e:bb:30:58:39:30:c7:
                    2c:fd:c4:5f:4f:81:54:6e:94:65:aa:76:1a:f7:5a:
                    c3:b5:03:fa:35:3f:28:67:80:a0:56:63:1c:83:62:
                    fd:b5:33:c6:1c:02:72:85:b7:f1:76:a0:2b:ea:72:
                    15:b7:ba:8e:04:ed:0c:e5:06:d0:ae:67:82:c7:5e:
                    a3:82:13:c1:07:d5:ee:5a:8e:e8:b2:52:8d:a7:26:
                    2c:bd:9d:dc:02:8e:7c:68:15:3f:ac:ec:22:dc:4e:
                    f9:fb:61:82:c9:a1:b2:e2:c6:76:c8:0c:fa:fe:aa:
                    e2:5e:05:a0:7c:41:9e:6f:25:b6:2b:c4:11:3b:3e:
                    1b:e2:3a:0f:e7:a0:56:8d:9b:24:36:e9:9d:aa:85:
                    81:e4:90:15:fe:3f:c8:6c:42:96:8b:2a:f4:96:c7:
                    e5:1f:f7:fb:5b:8e:8f:b2:1c:fa:86:c8:06:e3:bf:
                    0e:b4:18:ef:4e:0d:03:70:6f:2f:8f:5b:48:bb:51:
                    7f:f6:5b:58:b7:1c:11:98:83:4b:0c:72:d1:e3:ad:
                    d7:be:fa:38:fa:0f:74:cd:fc:e4:dc:bd:57:ba:b5:
                    10:54:d2:c6:8a:99:aa:7e:58:38:00:2a:93:bd:3e:
                    fb:41:37:5b:73:e8:7b:97:c5:1a:f4:39:4b:d1:a2:
                    41:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F6:AA:CC:FF:66:7F:E6:B0:4F:5E:9E:D1:EB:10:01:D0:D1:6F:4F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS10753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:13:62:1d:08:34:15:f6:7a:bf:08:68:15:9c:e9:3b:42:4d:
         7a:a9:db:f1:52:f3:b0:9d:40:fe:c3:ce:6b:d2:fd:84:99:cb:
         a3:3e:4b:cb:d7:08:25:2b:18:43:6a:bc:0d:da:5d:e1:f1:26:
         f7:63:f0:87:03:19:70:5e:96:8a:5c:14:88:ad:eb:b1:bc:aa:
         62:18:f0:b5:31:14:e3:a1:25:d8:5a:16:fa:53:e0:3c:b9:ac:
         9f:8e:b4:40:f3:3c:6d:52:2d:e1:3e:35:f2:a3:61:1d:fb:44:
         13:4e:a6:33:d4:ea:43:d8:22:1b:39:de:34:ed:e2:dc:c4:e0:
         b7:fa:8f:21:ab:96:58:dc:8b:16:e8:93:cc:3a:84:3d:b5:cb:
         6e:68:09:ae:f6:f5:5e:1e:09:17:a6:3f:74:35:96:1f:e5:20:
         cc:d3:44:b8:a8:73:5e:7c:f9:ee:ab:ac:7c:d4:88:58:8a:59:
         60:1b:87:0e:f1:87:39:7c:bc:17:be:91:0c:43:9d:8b:d9:69:
         fb:05:65:19:bd:17:f3:c5:37:85:c5:b2:43:93:f6:2c:d9:f2:
         3f:d1:09:0d:e7:b0:c5:35:4d:42:f5:22:fa:5d:7f:83:15:db:
         08:d2:e1:5e:02:5e:66:73:54:72:a4:ba:20:41:e7:22:0c:bd:
         ca:1c:ea:b0
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUEyJRLIPZjZD1jrqJueYft0SEyPgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwOTIzMTQxMjMwWhcNMjQwOTIxMTQxNzMw
WjAzMTEwLwYDVQQDEyg0OEY2QUFDQ0ZGNjY3RkU2QjA0RjVFOUVEMUVCMTAwMUQw
RDE2RjRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/9oY4WKck67
MFg5MMcs/cRfT4FUbpRlqnYa91rDtQP6NT8oZ4CgVmMcg2L9tTPGHAJyhbfxdqAr
6nIVt7qOBO0M5QbQrmeCx16jghPBB9XuWo7oslKNpyYsvZ3cAo58aBU/rOwi3E75
+2GCyaGy4sZ2yAz6/qriXgWgfEGebyW2K8QROz4b4joP56BWjZskNumdqoWB5JAV
/j/IbEKWiyr0lsflH/f7W46Pshz6hsgG478OtBjvTg0DcG8vj1tIu1F/9ltYtxwR
mINLDHLR463Xvvo4+g90zfzk3L1XurUQVNLGipmqflg4ACqTvT77QTdbc+h7l8Ua
9DlL0aJB5wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFEj2qsz/Zn/msE9entHrEAHQ
0W9PMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzEwNzUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf6YMA0GCSqGSIb3DQEBCwUAA4IB
AQB/E2IdCDQV9nq/CGgVnOk7Qk16qdvxUvOwnUD+w85r0v2EmcujPkvL1wglKxhD
arwN2l3h8Sb3Y/CHAxlwXpaKXBSIreuxvKpiGPC1MRTjoSXYWhb6U+A8uayfjrRA
8zxtUi3hPjXyo2Ed+0QTTqYz1OpD2CIbOd407eLcxOC3+o8hq5ZY3IsW6JPMOoQ9
tctuaAmu9vVeHgkXpj90NZYf5SDM00S4qHNefPnuq6x81IhYillgG4cO8Yc5fLwX
vpEMQ52L2Wn7BWUZvRfzxTeFxbJDk/Ys2fI/0QkN57DFNU1C9SL6XX+DFdsI0uFe
Al5mc1RypLogQeciDL3KHOqw
-----END CERTIFICATE-----