Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3aa7653e-c5be-3979-8390-0cab50f044cd.roa
File:                     3aa7653e-c5be-3979-8390-0cab50f044cd.roa (raw, json)
Hash identifier:          rtMZCPQPlTz33XHSzq1LqFREmxo34VPwdBjhWNv04WY=
Subject key identifier:   99:CD:27:71:52:08:0E:3A:EE:A4:E0:11:BC:B5:1B:FC:D3:A0:B3:F3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843F12D1BC7DA2E3967805C8000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3aa7653e-c5be-3979-8390-0cab50f044cd.roa
Signing time:             Sun 19 Nov 2023 17:32:54 +0000
ROA not before:           Sun 19 Nov 2023 17:32:54 +0000
ROA not after:            Sat 17 Feb 2024 17:32:54 +0000
asID:                     834
IP address blocks:        50.114.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f1:2d:1b:c7:da:2e:39:67:80:5c:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 19 17:32:54 2023 GMT
            Not After : Feb 17 17:32:54 2024 GMT
        Subject: CN=cd763190-2c77-4455-bd5f-69c6cc13a136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:48:67:ac:cb:be:e6:76:2e:32:e9:57:e8:5d:
                    e9:33:a8:b8:55:74:33:d1:f8:ff:1a:cc:f6:0a:0a:
                    aa:05:92:4a:cf:22:97:f0:d8:a7:50:86:0d:19:86:
                    16:e1:f2:5a:35:af:eb:e7:f1:4d:85:50:8a:c3:8a:
                    3a:27:62:ef:f0:9d:bc:5d:75:a5:52:94:6e:4f:86:
                    0c:a5:b3:cc:ad:0f:20:0e:9f:b5:39:2b:ee:e0:a1:
                    a3:5f:20:b4:ef:8f:9d:b8:99:62:77:27:13:a2:10:
                    1f:3b:c7:12:93:17:10:2e:56:dd:37:43:23:00:52:
                    7d:8a:3c:0e:e1:94:98:0d:55:d6:ad:5d:76:7f:5f:
                    04:69:ff:cb:dc:33:cc:d8:89:ae:5d:2a:9c:34:81:
                    33:e5:a1:d2:4b:7f:cd:b7:31:11:86:c8:0e:fd:2c:
                    db:83:7b:e8:91:12:f1:6e:66:97:e9:81:fc:0e:d1:
                    f4:15:60:75:56:7c:42:9a:c2:9a:1c:de:66:fb:ee:
                    c3:fc:43:ab:50:c2:71:0b:f8:37:de:1e:ba:03:f2:
                    37:88:7c:d9:dc:b4:06:eb:15:0e:8e:7d:60:02:82:
                    28:12:dd:df:f8:af:7b:af:97:6e:87:42:23:db:e7:
                    47:07:d7:ba:da:ff:eb:f0:5c:fa:fe:a6:69:32:57:
                    b3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CD:27:71:52:08:0E:3A:EE:A4:E0:11:BC:B5:1B:FC:D3:A0:B3:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3aa7653e-c5be-3979-8390-0cab50f044cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:47:f0:31:13:6f:7c:56:0d:34:b1:3d:e9:a0:14:08:05:f0:
         bf:5a:e2:6f:60:b5:dd:9b:6b:94:56:9d:84:0f:62:32:1e:72:
         f7:54:b0:ee:5a:f5:ea:2b:7a:c6:08:4a:e2:74:9b:a7:96:1e:
         d2:2c:ac:8f:9e:56:8d:a2:9d:8a:21:81:23:03:bb:f9:a9:a2:
         9d:78:aa:11:d7:a7:e8:58:f3:ba:ce:dc:5a:0d:9f:81:4a:34:
         e5:47:3f:72:8e:ac:2b:61:e7:ae:22:f8:a6:4f:b6:56:4d:c4:
         bc:40:3e:61:21:e4:50:74:1a:09:00:0e:a7:5a:da:fb:e7:08:
         6f:92:da:66:df:47:9b:dd:bb:bd:45:d4:0c:f2:90:2a:d9:a6:
         03:01:28:5d:6d:eb:eb:5d:97:92:b4:37:09:55:ff:43:6d:dd:
         b3:5b:4c:f0:0f:22:b5:47:1f:ca:45:39:8a:aa:90:01:1a:ec:
         07:1a:6c:1e:ff:ab:f3:f2:c8:be:85:3a:94:7a:66:dc:3f:5f:
         93:65:9c:ad:ce:33:2f:98:55:59:a2:6e:c0:c9:89:cf:00:88:
         3b:58:fb:75:4c:d4:1f:e8:72:f8:44:df:3c:8c:eb:8c:8c:14:
         9e:68:d6:65:04:2a:16:4c:a0:f0:be:25:30:8c:24:d3:05:a2:
         a5:10:17:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPxLRvH2i45Z4BcgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTExOTE3MzI1NFoXDTI0MDIxNzE3MzI1NFowLzEtMCsGA1UEAxMk
Y2Q3NjMxOTAtMmM3Ny00NDU1LWJkNWYtNjljNmNjMTNhMTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUhnrMu+5nYuMulX6F3pM6i4VXQz0fj/Gsz2
CgqqBZJKzyKX8NinUIYNGYYW4fJaNa/r5/FNhVCKw4o6J2Lv8J28XXWlUpRuT4YM
pbPMrQ8gDp+1OSvu4KGjXyC074+duJlidycTohAfO8cSkxcQLlbdN0MjAFJ9ijwO
4ZSYDVXWrV12f18Eaf/L3DPM2ImuXSqcNIEz5aHSS3/NtzERhsgO/Szbg3vokRLx
bmaX6YH8DtH0FWB1VnxCmsKaHN5m++7D/EOrUMJxC/g33h66A/I3iHzZ3LQG6xUO
jn1gAoIoEt3f+K97r5duh0Ij2+dHB9e62v/r8Fz6/qZpMlezmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnNJ3FSCA467qTgEby1G/zToLPzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2FhNzY1M2UtYzViZS0z
OTc5LTgzOTAtMGNhYjUwZjA0NGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBH8DETb3xWDTSxPemgFAgF8L9a4m9gtd2ba5RWnYQPYjIecvdUsO5a
9eoresYISuJ0m6eWHtIsrI+eVo2inYohgSMDu/mpop14qhHXp+hY87rO3FoNn4FK
NOVHP3KOrCth564i+KZPtlZNxLxAPmEh5FB0GgkADqda2vvnCG+S2mbfR5vdu71F
1AzykCrZpgMBKF1t6+tdl5K0NwlV/0Nt3bNbTPAPIrVHH8pFOYqqkAEa7AcabB7/
q/PyyL6FOpR6Ztw/X5NlnK3OMy+YVVmibsDJic8AiDtY+3VM1B/ocvhE3zyM64yM
FJ5o1mUEKhZMoPC+JTCMJNMFoqUQFxU=
-----END CERTIFICATE-----