Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5ca190f1-d4d1-3ac2-91f1-0e05b02ec1b3.roa
File:                     5ca190f1-d4d1-3ac2-91f1-0e05b02ec1b3.roa (raw, json)
Hash identifier:          50U6ALh0NiRkoWrVK1Exn5E2+1ikK0SWqFOmjD9rM9Q=
Subject key identifier:   12:E5:FA:57:C3:1F:07:A2:2C:DD:B1:D7:A4:FF:86:23:B6:16:8B:AC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841BFB698084E2E0C98146C3540
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5ca190f1-d4d1-3ac2-91f1-0e05b02ec1b3.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 04 Aug 2025 04:00:00 +0000
asID:                     834
IP address blocks:        50.114.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bf:b6:98:08:4e:2e:0c:98:14:6c:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Aug  4 04:00:00 2025 GMT
        Subject: CN=47b9cbc3-2f77-4ed7-be5f-a3f559e357d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:34:a1:61:a2:32:b1:5c:7a:4c:d0:78:b5:
                    7a:68:35:29:e9:78:10:a2:af:08:d7:ef:54:43:44:
                    9e:c3:62:b3:7d:83:72:76:56:71:e1:16:31:42:b2:
                    37:5f:6e:09:67:fe:9d:70:ea:6d:e2:9d:3d:3e:81:
                    28:7b:df:93:a9:8d:ae:66:65:ca:c4:ff:f2:a9:9e:
                    b6:85:e6:ec:e7:ac:9a:3d:26:85:9c:3f:78:36:31:
                    98:7b:47:16:cd:2a:40:13:cb:0c:e3:bb:79:83:8f:
                    ed:1b:c9:2b:3b:9c:4b:af:fd:2e:04:70:a2:81:b5:
                    d5:90:f3:7b:f0:f6:6d:6f:3b:d9:f0:fc:8b:28:a3:
                    0c:81:81:54:86:17:ee:a1:ea:bf:8f:9a:44:20:75:
                    f8:5c:48:9b:25:07:96:84:a7:b1:3a:c8:8f:1a:2f:
                    c9:14:c5:03:e1:ab:cb:01:21:47:e5:4d:fe:d7:34:
                    8e:17:b6:bd:da:77:ba:33:38:16:09:ce:9f:cd:0f:
                    e4:1c:f0:38:5a:a3:bf:87:c9:de:84:67:24:16:d3:
                    7e:91:27:8d:99:c8:ff:f4:29:15:f7:89:a9:af:9f:
                    8f:0e:b8:d3:b3:ff:71:d9:81:4b:aa:71:50:c5:e6:
                    07:54:d6:9c:cf:7a:0c:2c:d3:38:9c:a0:38:08:1e:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E5:FA:57:C3:1F:07:A2:2C:DD:B1:D7:A4:FF:86:23:B6:16:8B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5ca190f1-d4d1-3ac2-91f1-0e05b02ec1b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:3c:9f:d4:e9:96:f8:b8:cf:3a:86:39:46:f8:cb:c2:94:8e:
         b3:48:81:0e:03:03:b5:2a:4a:82:c2:88:b4:aa:57:da:67:b8:
         fb:3a:fc:12:f2:cc:8e:c3:8f:a8:bf:13:3e:50:ca:75:5b:e7:
         95:af:7b:ad:73:46:4a:1e:7f:a7:e0:0a:e6:f0:38:c0:9b:a1:
         4d:14:c1:19:ef:d1:b6:4c:a6:bc:b4:b5:d6:9e:00:10:b8:50:
         b2:4b:ad:cd:c2:b2:07:88:12:ff:14:33:90:49:9c:5c:d8:d0:
         d6:72:da:15:ba:d7:13:d8:c1:15:fc:35:4e:11:a7:06:50:54:
         64:87:79:05:70:ab:45:f6:a4:e0:10:ef:69:c6:1a:ee:32:2c:
         0d:21:59:61:37:cf:5b:b6:f5:02:af:99:78:aa:a1:8e:01:88:
         67:38:6c:dc:15:10:83:7e:b8:cd:4f:e0:cc:30:9b:1d:2d:b9:
         c8:77:08:00:7d:be:a9:b0:06:53:25:97:e2:71:68:0e:48:49:
         f8:7c:db:db:32:de:93:f8:b6:e1:36:51:92:db:b6:cd:2f:69:
         e1:9a:af:14:7e:b6:26:72:08:ea:d1:49:d5:87:c4:01:5b:44:
         fe:c8:f2:a1:7b:4e:88:5d:66:3b:c6:46:11:75:b5:36:da:0d:
         8f:8b:31:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----