Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/49cf42b3-ebf8-3f1e-b3ff-6bd72dcb7c21.roa
File:                     49cf42b3-ebf8-3f1e-b3ff-6bd72dcb7c21.roa (raw, json)
Hash identifier:          N3PDVuGOcihVH/Oel+gGmasIER9srgRvuDMAEN7toCY=
Subject key identifier:   87:73:5C:E7:7F:58:E8:6D:51:66:FB:F4:0C:B0:C9:1B:5F:2C:61:A3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858407EEA6B5D3A1DBC3E41237BC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/49cf42b3-ebf8-3f1e-b3ff-6bd72dcb7c21.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Fri 11 Apr 2025 04:00:00 +0000
asID:                     399976
IP address blocks:        50.114.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:7e:ea:6b:5d:3a:1d:bc:3e:41:23:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Apr 11 04:00:00 2025 GMT
        Subject: CN=eb26f739-291b-4d36-8ed0-b00b269d2a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:41:85:6c:23:7c:6e:8e:89:8b:4b:1a:14:
                    a1:c2:c3:5f:a7:eb:a9:8b:2d:e4:cf:c2:1e:61:b7:
                    18:59:5a:86:71:e5:6d:eb:c8:50:c8:9e:a7:06:f5:
                    37:51:16:35:7d:d2:5f:1e:4c:cb:38:a4:3c:89:14:
                    34:05:dc:f0:19:bd:24:92:f1:9d:c9:21:27:a4:0b:
                    bf:a3:28:96:71:e0:80:2f:d1:ff:a1:ec:8f:2f:35:
                    02:1a:32:1d:20:78:07:ce:30:53:28:d0:29:89:f4:
                    a1:a4:e7:72:a0:56:b2:38:99:f8:c5:35:4d:c8:b2:
                    24:ea:bc:ee:f3:89:09:81:10:4b:39:03:9c:f1:6e:
                    ce:b2:12:fc:a2:58:6e:5e:8c:d5:7c:bd:77:6d:e8:
                    b5:7f:22:9a:e9:8d:b1:5d:f9:68:05:9a:37:96:04:
                    6a:7e:50:52:71:42:ec:01:bd:95:f9:29:61:c6:1b:
                    5c:97:a4:0c:00:17:71:f0:73:0d:3d:f9:20:bc:63:
                    02:55:81:3f:a8:63:d2:21:ab:5f:60:28:c6:8e:7e:
                    65:99:34:e2:c8:ef:b4:3e:2a:9b:50:c2:e4:82:fe:
                    a8:4c:ee:c7:e8:7f:91:38:84:76:5b:16:d2:39:be:
                    f0:34:f7:db:55:16:3c:50:93:c1:18:94:06:75:aa:
                    b1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:73:5C:E7:7F:58:E8:6D:51:66:FB:F4:0C:B0:C9:1B:5F:2C:61:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/49cf42b3-ebf8-3f1e-b3ff-6bd72dcb7c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:28:88:2c:0f:e7:b0:c2:77:a9:98:3b:c1:49:85:12:10:55:
         5d:8d:66:74:81:17:41:40:77:88:eb:b0:5c:48:0e:00:8c:3c:
         a8:e3:dd:0a:34:ac:f6:e6:45:8f:64:0e:5b:b9:5f:21:b2:e8:
         f4:2f:16:f3:ff:05:f7:96:f4:78:95:b1:f6:b5:a9:52:e5:b4:
         6a:6b:88:b0:2d:ec:10:9f:82:59:d9:17:0f:20:39:84:0b:e3:
         62:d4:c9:dc:68:f6:0b:63:ca:9b:e0:5e:44:c9:5a:0e:17:ba:
         35:17:02:a9:eb:03:14:16:6e:72:3b:a3:e6:1c:94:e3:b8:d2:
         69:7c:40:37:44:9e:ba:ec:6f:02:86:ba:f7:61:b5:50:da:86:
         fa:15:d0:4f:f8:79:62:41:d0:2a:41:68:86:11:a0:72:fa:7e:
         62:f9:17:5a:dc:a4:a9:ec:2a:58:51:06:51:75:6b:f7:88:16:
         39:11:e6:94:c8:a7:17:18:4b:89:0f:f8:f1:28:9b:5e:2c:c8:
         55:20:a4:96:e8:45:7b:b1:8b:29:14:b2:77:b0:5a:2c:85:bc:
         01:31:d7:aa:eb:69:dd:22:41:e3:45:71:57:4b:fb:3f:1d:91:
         0c:9f:b5:5e:59:e5:fc:00:de:4f:ec:6d:9b:fb:96:5a:03:2e:
         e4:88:5b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----