Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4efa479c-66c1-3d8e-a51e-8095548ec046.roa
File:                     4efa479c-66c1-3d8e-a51e-8095548ec046.roa (raw, json)
Hash identifier:          po0svibmCwwY2IR6HN6WqhEHo1FLn+5qKLDzpRTJiFA=
Subject key identifier:   5D:38:D8:A7:EC:41:E8:07:0C:0D:4F:B9:1F:14:4D:10:A0:37:7C:4F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583C2DD296DF5FC1D0D15C166580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4efa479c-66c1-3d8e-a51e-8095548ec046.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Mon 11 Mar 2024 04:00:00 +0000
asID:                     19437
IP address blocks:        50.114.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:2d:d2:96:df:5f:c1:d0:d1:5c:16:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Mar 11 04:00:00 2024 GMT
        Subject: CN=ce86cede-592f-439b-8071-580df08634b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:e9:a5:3b:b8:08:a5:19:87:1b:93:b2:ca:
                    0d:11:a0:25:57:5c:37:b0:e4:79:12:2e:d2:9d:0d:
                    54:74:b5:de:f7:84:33:63:9e:01:02:f7:13:17:fd:
                    5f:fd:6e:a7:34:d2:0e:37:76:4c:c8:99:c0:ff:4e:
                    a0:57:e5:5a:89:98:a9:2c:f9:f7:7b:fc:2a:a2:d5:
                    f1:4a:ad:1a:ec:3b:9e:a0:10:f5:49:34:78:5a:cf:
                    94:83:db:86:81:d8:64:ed:57:a6:17:ba:03:33:41:
                    11:a5:b3:83:81:d9:5c:50:34:97:76:ee:7b:47:89:
                    8d:e8:d7:07:00:16:e7:d4:6d:4e:d7:40:fa:58:31:
                    6e:01:98:32:f0:93:fd:94:06:a4:7f:1b:0c:d1:6f:
                    d7:72:e4:38:da:96:c5:74:a3:40:a7:b5:5f:bc:7c:
                    59:c5:05:16:14:f6:d6:32:fb:82:92:39:a4:d2:17:
                    cf:a7:09:c3:ab:1d:e8:b2:6d:dc:7f:d1:0d:3c:5e:
                    f9:a9:95:4f:52:46:d3:ae:a7:d0:cd:21:24:22:62:
                    18:64:52:17:73:89:3a:06:c3:29:10:47:ff:93:ed:
                    47:32:8d:86:ee:de:e7:b6:cf:e1:85:ab:56:65:9b:
                    8b:20:75:8d:9c:2d:16:fd:2c:9b:3f:a6:59:ed:55:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:38:D8:A7:EC:41:E8:07:0C:0D:4F:B9:1F:14:4D:10:A0:37:7C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4efa479c-66c1-3d8e-a51e-8095548ec046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:fd:ce:5e:26:5b:b9:d6:34:67:c7:80:2f:10:0d:5c:eb:70:
         0e:29:ee:bc:69:2c:19:d7:3d:58:1d:8c:ce:55:1b:af:37:b2:
         b0:e9:09:70:20:57:ab:b6:5b:9f:fc:a8:24:14:ac:92:93:95:
         dc:5c:65:b0:17:80:99:9b:32:32:1a:77:48:7b:a3:f7:fd:39:
         38:4c:5a:7b:f6:05:b8:65:a1:fc:95:23:cf:f2:9b:2d:fd:e8:
         b6:b6:ec:20:98:87:32:dc:f4:8e:80:3c:79:12:8c:2a:24:41:
         1f:7f:e2:34:01:2b:68:a6:49:57:cd:64:ff:76:ea:d4:48:b7:
         b7:c7:fc:91:a9:d9:cc:33:54:71:8a:75:8f:c8:c6:42:bf:29:
         b6:f2:e7:51:bb:8a:ab:69:63:4e:62:75:cd:25:e3:94:dc:d5:
         91:48:15:1d:2d:85:b6:33:73:83:5d:3d:f0:9f:60:c4:a7:c9:
         08:7f:4f:89:48:35:6c:a1:5d:53:aa:6d:8d:72:0f:54:56:51:
         ad:3d:45:e8:85:d1:d3:44:0a:b9:51:be:0c:9c:3c:84:8c:fe:
         c9:68:89:ec:40:08:a1:61:17:9c:b6:62:0e:10:e3:ca:f5:c4:
         76:0e:29:6c:b0:75:2a:2e:5c:c4:45:53:29:78:0c:1c:38:c9:
         e3:b2:7b:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDwt0pbfX8HQ0VwWZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTA0MDAwMFoXDTI0MDMxMTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2U4NmNlZGUtNTkyZi00MzliLTgwNzEtNTgwZGYwODYzNGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnATppTu4CKUZhxuTssoNEaAlV1w3sOR5Ei7S
nQ1UdLXe94QzY54BAvcTF/1f/W6nNNION3ZMyJnA/06gV+VaiZipLPn3e/wqotXx
Sq0a7DueoBD1STR4Ws+Ug9uGgdhk7VemF7oDM0ERpbODgdlcUDSXdu57R4mN6NcH
ABbn1G1O10D6WDFuAZgy8JP9lAakfxsM0W/XcuQ42pbFdKNAp7VfvHxZxQUWFPbW
MvuCkjmk0hfPpwnDqx3osm3cf9ENPF75qZVPUkbTrqfQzSEkImIYZFIXc4k6BsMp
EEf/k+1HMo2G7t7nts/hhatWZZuLIHWNnC0W/SybP6ZZ7VUHSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF042KfsQegHDA1PuR8UTRCgN3xPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGVmYTQ3OWMtNjZjMS0z
ZDhlLWE1MWUtODA5NTU0OGVjMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnILMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKr9zl4mW7nWNGfHgC8QDVzrcA4p7rxpLBnXPVgdjM5VG683srDpCXAg
V6u2W5/8qCQUrJKTldxcZbAXgJmbMjIad0h7o/f9OThMWnv2BbhlofyVI8/ymy39
6La27CCYhzLc9I6APHkSjCokQR9/4jQBK2imSVfNZP926tRIt7fH/JGp2cwzVHGK
dY/IxkK/Kbby51G7iqtpY05idc0l45Tc1ZFIFR0thbYzc4NdPfCfYMSnyQh/T4lI
NWyhXVOqbY1yD1RWUa09ReiF0dNECrlRvgycPISM/sloiexACKFhF5y2Yg4Q48r1
xHYOKWywdSouXMRFUyl4DBw4yeOye6Y=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:31 2023 by rpki-client on console-fra.rpki-client.org