Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21cdb5fd-1029-3046-b73d-4b2a15fec00d.roa
File:                     21cdb5fd-1029-3046-b73d-4b2a15fec00d.roa (raw, json)
Hash identifier:          aCeaGU0P6/JCa/gMAQfiM+I77KWnaY4lvZNfsFrvRr0=
Subject key identifier:   67:9C:7E:05:18:15:94:3A:15:C5:AA:80:0B:2F:9B:14:29:55:32:CF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843905534E6C694D53664071D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21cdb5fd-1029-3046-b73d-4b2a15fec00d.roa
Signing time:             Mon 16 Oct 2023 01:00:15 +0000
ROA not before:           Mon 16 Oct 2023 01:00:15 +0000
ROA not after:            Sun 14 Jan 2024 02:00:15 +0000
asID:                     7018
IP address blocks:        50.114.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:90:55:34:e6:c6:94:d5:36:64:07:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 16 01:00:15 2023 GMT
            Not After : Jan 14 02:00:15 2024 GMT
        Subject: CN=eb5f3234-135b-466e-a4cc-3c94ece43700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:ff:64:a9:38:42:07:9f:a3:e1:e1:40:1b:
                    97:36:f8:62:78:ea:19:7e:97:b6:e1:50:18:73:ed:
                    33:35:1f:02:24:af:0f:80:ab:2d:03:d2:19:5c:4e:
                    fb:41:40:9e:36:6f:26:ca:22:b8:fb:7f:09:25:36:
                    fd:47:fb:0e:e8:be:92:34:01:66:c5:9d:4d:30:91:
                    a8:3b:2c:19:b0:23:19:6c:e4:b1:9f:96:ee:7d:b9:
                    49:fa:8d:80:56:76:56:7b:bf:bb:58:68:0a:4a:73:
                    72:d0:40:09:d5:64:0f:7f:fa:6e:ca:59:d4:23:30:
                    13:f8:7b:a5:d4:e7:a3:91:88:f1:6b:7b:92:0d:c2:
                    ae:d5:c4:46:72:1e:7f:d6:f8:5f:7f:84:86:84:e2:
                    c5:b8:26:d7:d7:28:16:95:69:4e:26:1f:bd:98:91:
                    98:10:36:7f:8f:8b:2a:70:eb:25:27:9b:78:7a:87:
                    15:32:9c:25:ac:b2:c0:d4:1e:ba:27:32:dd:20:5b:
                    ea:7c:76:d0:17:0f:be:73:4b:84:9b:25:51:4f:a5:
                    ef:b7:bb:ef:c5:3c:05:2f:c1:77:08:b7:48:39:4d:
                    7b:6b:76:28:f2:e4:a1:03:82:b5:87:25:62:07:90:
                    fe:9e:46:fc:38:9f:ee:66:9b:0a:e7:51:ef:1d:41:
                    0b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9C:7E:05:18:15:94:3A:15:C5:AA:80:0B:2F:9B:14:29:55:32:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21cdb5fd-1029-3046-b73d-4b2a15fec00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:11:33:56:27:28:fc:1c:b7:f6:60:93:99:c9:36:81:77:cb:
         e7:0f:65:17:33:6e:1d:57:eb:6f:bb:da:fe:0f:a8:f1:11:78:
         5a:8d:44:b5:9c:2c:4a:cd:46:c0:81:e8:b7:96:6b:8b:f1:be:
         7d:ee:be:a8:98:e6:63:9a:9c:05:85:5b:36:68:a6:9b:3c:47:
         dd:53:5a:35:37:8e:3b:40:0e:a3:92:39:2b:e0:ab:77:99:6f:
         49:4a:5e:7d:18:91:03:8b:2d:8d:64:2c:e1:f0:0d:df:1d:53:
         0a:62:b8:f6:f4:11:e0:d0:3b:23:a6:1b:0c:87:d9:d6:d6:63:
         7d:d5:d0:35:55:a0:58:ee:86:d6:53:55:80:57:7b:bf:d0:29:
         2f:79:02:b7:d9:70:2b:d2:7e:9d:b9:2f:89:20:09:f8:5f:a2:
         f8:31:04:83:91:60:c5:af:a5:18:cd:c7:df:ea:0c:fe:a9:51:
         35:5d:62:b9:d3:56:3b:78:83:c9:41:a0:1a:49:0e:a3:22:54:
         b1:08:05:71:61:db:a8:b8:29:e2:19:b8:47:a2:57:11:3b:eb:
         ea:98:2d:da:5c:1a:97:64:ea:f7:58:14:eb:d0:f9:35:1c:02:
         0f:3b:f8:25:af:b6:0e:16:e7:b0:03:9b:3f:51:13:2b:17:83:
         30:8b:4c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----