Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15353.roa
File:                     AS15353.roa (raw, json)
Hash identifier:          tFSoniPB4jUz2kIQTg9zpJkq6o09WCH+WW0JqYJz8XE=
Subject key identifier:   27:C6:E1:F1:17:A5:67:AB:CD:6E:64:0E:20:EB:12:F6:20:D6:7F:0A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       462A67D2B1980386A659B86C04D5D64C724386CE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15353.roa
Signing time:             Fri 31 May 2024 00:52:00 +0000
ROA not before:           Fri 31 May 2024 00:47:00 +0000
ROA not after:            Fri 30 May 2025 00:52:00 +0000
asID:                     15353
IP address blocks:        157.254.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 10:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2a:67:d2:b1:98:03:86:a6:59:b8:6c:04:d5:d6:4c:72:43:86:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 31 00:47:00 2024 GMT
            Not After : May 30 00:52:00 2025 GMT
        Subject: CN=27C6E1F117A567ABCD6E640E20EB12F620D67F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:ef:bb:fd:2c:32:8e:66:35:18:23:10:e5:
                    59:e3:98:39:1e:c0:6c:42:2a:76:bf:19:0d:d1:ab:
                    2f:53:49:ff:01:4f:c5:72:74:dd:2e:ca:eb:26:65:
                    00:34:ed:31:eb:d4:44:55:40:3b:0f:f6:5f:a5:57:
                    f6:4b:58:7b:40:25:f4:3f:20:c6:b7:3c:de:4a:18:
                    f4:be:e8:d5:29:33:7c:d7:51:9c:84:39:cc:92:0b:
                    b3:d2:e3:3c:3e:da:a8:64:b5:41:6a:3f:e0:cd:ec:
                    82:9a:a1:3c:1e:da:f0:68:0e:f0:1f:27:82:53:e5:
                    ea:f2:d3:8b:12:5a:f1:d9:96:2f:60:bc:b4:95:42:
                    ea:87:61:9e:0a:5e:08:ac:82:d5:70:42:43:72:c0:
                    d2:2e:b9:60:09:4f:e4:fe:77:9f:3e:55:35:0b:eb:
                    a6:31:f1:59:96:78:5f:8d:0a:62:4a:5c:5f:de:d7:
                    d0:4f:1f:4e:d4:5e:e8:15:70:7a:5e:15:d4:50:73:
                    60:f1:fe:f9:54:77:27:3d:44:cb:ad:7c:d5:7b:78:
                    6b:23:73:19:fb:27:7a:e7:0b:9e:a6:b7:41:6a:c5:
                    1c:16:4c:40:21:1d:d2:50:13:4a:61:48:8e:ea:4f:
                    34:61:0a:c6:39:18:66:76:a9:9a:db:21:e2:98:3a:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:E1:F1:17:A5:67:AB:CD:6E:64:0E:20:EB:12:F6:20:D6:7F:0A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15353.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b0:e6:be:bd:34:58:06:b0:60:44:9d:df:37:48:23:64:b8:
         a1:20:a1:73:fd:49:bb:ae:36:b7:8d:6d:31:24:a0:17:1f:88:
         c1:f5:a2:90:a2:52:b7:64:36:a7:e6:19:ba:d6:37:60:c2:0d:
         51:82:9d:85:a3:dc:2c:c6:70:34:10:8a:82:a9:51:9f:23:a3:
         a1:15:ce:69:5e:23:03:05:c8:74:bb:9c:45:51:2c:04:dc:01:
         86:34:3d:bf:59:74:96:7a:eb:d6:8e:f9:c6:54:04:a7:92:40:
         58:aa:9a:70:c9:d4:d9:6b:d8:90:c1:8a:88:37:fc:6c:c8:71:
         e6:30:da:fd:ae:87:dc:69:e7:73:88:06:3a:19:74:bf:96:b9:
         d6:a6:59:3f:4e:e1:6d:2f:3c:96:2d:18:99:d4:38:3e:ad:5b:
         e1:c6:32:11:43:aa:49:a0:a6:df:da:e0:18:a0:d5:df:75:25:
         54:27:60:f4:f5:29:bf:2c:df:e7:2a:21:63:38:14:ae:66:b3:
         f0:13:53:e8:68:1e:e3:c3:8b:33:5e:a8:41:d1:57:d1:ad:51:
         f7:c8:5e:07:c7:59:e8:f4:4a:f5:b1:96:48:f6:af:b5:f5:29:
         f2:5c:c7:d6:a7:e5:7f:40:72:56:3a:cf:97:2a:1c:49:e9:04:
         71:d6:2a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----