Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401227.roa
File:                     AS401227.roa (raw, json)
Hash identifier:          +KDXC/aYAUmrq1a6VX/DKURIxmZWcArgSxByszhPp0Q=
Subject key identifier:   18:08:69:54:FF:BB:84:16:40:7C:F2:00:57:9E:E9:2F:4C:AC:36:63
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       69ED8EABC6FEBCEE9A24EC4FE12C08CEEE1444EB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401227.roa
Signing time:             Thu 15 Aug 2024 13:39:05 +0000
ROA not before:           Thu 15 Aug 2024 13:34:05 +0000
ROA not after:            Thu 14 Aug 2025 13:39:05 +0000
asID:                     401227
IP address blocks:        157.254.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ed:8e:ab:c6:fe:bc:ee:9a:24:ec:4f:e1:2c:08:ce:ee:14:44:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 15 13:34:05 2024 GMT
            Not After : Aug 14 13:39:05 2025 GMT
        Subject: CN=18086954FFBB8416407CF200579EE92F4CAC3663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:32:92:9a:ea:aa:ed:7e:a8:35:91:06:09:
                    bb:06:5e:42:04:b9:75:f8:d6:74:27:90:5c:97:10:
                    8f:24:19:e1:26:e3:72:39:32:71:36:9f:76:5e:c4:
                    12:ec:49:a7:83:bc:7e:bb:ba:71:d5:5b:d5:0d:cd:
                    9d:94:71:59:ff:21:0c:94:cc:be:11:e1:7c:21:7b:
                    2d:6f:39:16:f0:9b:de:46:8c:cc:0f:b6:d4:9a:af:
                    6c:3d:ab:03:84:94:eb:62:f1:7a:e7:d4:13:9d:7a:
                    83:76:69:2d:8f:07:1c:5b:e4:ac:30:58:27:64:92:
                    d7:93:fd:5f:e2:63:5c:9f:fb:6e:ca:3f:c0:cb:c0:
                    5d:4d:3f:b1:cd:a8:29:57:ed:1c:79:1e:e4:4f:a0:
                    b3:b5:0c:ac:04:97:fb:c5:65:3f:3a:40:bf:f5:37:
                    8e:ad:13:63:33:bc:4c:e3:74:2e:55:b0:43:3c:e3:
                    8d:d4:1d:04:8c:fb:69:ef:46:09:5e:0a:83:0a:15:
                    52:7e:8a:94:67:f6:27:a9:2c:96:c1:4f:a3:b5:66:
                    cc:91:41:23:ee:d2:83:39:24:b3:31:7d:e1:4a:37:
                    56:f0:c6:51:64:fe:50:cf:7c:29:0f:af:a7:fd:ab:
                    c4:18:23:cc:f5:12:4e:07:58:7f:92:04:f0:65:90:
                    f7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:08:69:54:FF:BB:84:16:40:7C:F2:00:57:9E:E9:2F:4C:AC:36:63
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401227.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c8:aa:c1:ca:d5:0e:c5:f9:3b:95:df:25:bb:b2:e3:b5:05:
         01:c0:ee:bc:c1:b7:da:dc:a6:c5:aa:2c:11:d7:32:3f:f6:77:
         7e:d9:75:fc:95:e1:0b:13:71:d9:c6:68:42:21:e6:a1:03:88:
         90:b6:0e:09:2b:12:85:e2:87:7b:a1:ad:43:0d:6b:e8:49:bd:
         48:c3:d0:95:59:f3:45:db:28:04:8b:ad:9e:b7:09:dc:84:28:
         55:ba:ee:b5:6a:5a:3c:d6:7e:76:7f:a9:69:14:45:ca:d9:8d:
         64:03:dc:74:1d:69:58:b2:80:c9:4f:df:23:1d:6c:95:4b:a4:
         2c:a1:2f:88:74:7c:59:05:ad:da:d6:ac:f6:8d:a0:56:d6:87:
         c5:36:63:3a:14:da:70:c5:57:bf:1b:12:e0:94:2f:d8:d0:b1:
         2d:cc:1f:c8:54:da:2b:3e:07:03:54:bc:66:34:72:64:23:b1:
         8c:46:d1:d6:22:b1:ca:9d:c7:6d:12:5b:51:cd:94:39:35:3c:
         2c:b2:fb:c7:15:8e:a7:e1:09:f7:60:bc:f3:b8:dc:73:28:16:
         6b:cf:c1:3c:4b:3d:70:23:9f:51:1c:36:ee:34:91:7e:93:80:
         41:0b:a9:33:c5:a4:9d:92:99:f3:be:fc:ff:99:60:ad:0e:2f:
         1d:1a:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----