Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6005367d-2852-3dc3-997a-33bb005d53ff.roa
File:                     6005367d-2852-3dc3-997a-33bb005d53ff.roa (raw, json)
Hash identifier:          hVRlNXc8NeKSvwVdSlp/nd0uOEYSe/SdaeVdIEZ29WQ=
Subject key identifier:   E6:48:9A:1D:7C:CA:20:F8:07:DB:8C:52:6B:D5:61:93:2E:6B:CB:CA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843D28258694153A5370EF16D16
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6005367d-2852-3dc3-997a-33bb005d53ff.roa
Signing time:             Wed 08 Nov 2023 17:54:35 +0000
ROA not before:           Wed 08 Nov 2023 17:54:35 +0000
ROA not after:            Tue 06 Feb 2024 17:54:35 +0000
asID:                     834
IP address blocks:        50.114.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d2:82:58:69:41:53:a5:37:0e:f1:6d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  8 17:54:35 2023 GMT
            Not After : Feb  6 17:54:35 2024 GMT
        Subject: CN=da2ed9be-05cc-43b2-a0ff-e915a7b9425d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:9f:1c:af:16:b0:84:09:8e:fc:dd:8a:c4:
                    ba:22:17:d6:3e:48:74:e3:97:b1:43:f7:a8:d0:44:
                    8a:a0:f5:6d:ae:9b:2c:b5:56:50:4c:3d:d6:9e:06:
                    88:57:40:2e:23:fd:d0:6f:4d:7b:17:07:df:15:1a:
                    d1:11:5f:13:81:ca:2b:d0:c7:fa:df:db:1b:0a:81:
                    b4:83:96:6e:96:c3:0d:f3:a8:3d:a6:ea:eb:13:c6:
                    b8:99:40:26:e4:4a:95:ce:af:3f:c5:05:e1:35:bb:
                    96:b6:27:39:69:7f:4e:b8:bc:9c:1b:00:f1:c4:93:
                    3a:16:29:40:24:cc:96:12:c7:96:c0:80:b1:42:48:
                    90:51:56:29:49:ec:ce:d0:39:a1:c8:2f:b8:1f:de:
                    ce:c5:2b:73:3c:f2:c5:b4:e4:5f:cb:72:03:f8:0a:
                    b0:04:04:fd:42:60:bf:4d:20:4c:94:c7:1a:f3:93:
                    63:07:85:a5:09:cf:08:0f:88:b7:4a:2b:5f:62:5e:
                    26:00:e7:41:a1:a7:ff:b9:6d:b6:7f:01:81:13:ae:
                    a9:c3:3d:0b:9d:91:69:6b:90:fe:cc:3b:29:e7:56:
                    ea:3c:88:50:ce:36:19:d6:9b:59:a1:9f:20:44:45:
                    a8:17:fc:50:9d:8c:a4:99:12:0c:24:07:34:01:c2:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:48:9A:1D:7C:CA:20:F8:07:DB:8C:52:6B:D5:61:93:2E:6B:CB:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6005367d-2852-3dc3-997a-33bb005d53ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:68:a0:fb:84:78:b0:e2:bb:af:39:30:16:df:eb:ce:ef:7f:
         44:9d:01:17:e9:a2:15:8a:73:ee:96:13:6c:ae:61:75:b3:58:
         20:03:bc:f7:94:a6:69:79:ac:9f:ac:a1:7d:a3:ee:09:54:0b:
         a1:2d:6a:cf:9c:b3:ba:94:e1:36:e8:36:fa:fc:ad:ef:ae:ca:
         d1:48:4f:6b:bf:00:e7:87:d5:05:0b:98:ca:ad:26:03:49:1c:
         67:78:f3:9c:7f:ff:2f:1b:c3:a1:ad:02:8e:70:e4:64:80:ca:
         10:dd:dc:d6:e4:35:d5:d8:a6:75:44:62:b9:ad:e6:01:27:44:
         61:ad:60:1e:0e:04:17:b4:cf:0b:c9:f4:ad:1e:18:c8:1c:7d:
         be:af:bf:f8:93:a2:e6:83:1b:15:ae:39:6b:dc:48:c3:b0:14:
         a4:b3:2f:ad:8f:8f:4b:a5:b0:6b:f5:5d:03:82:36:24:64:a8:
         dc:37:ee:80:c4:47:0f:e5:bc:cf:03:a8:5f:5e:1b:42:ca:f3:
         3c:ec:22:e7:f8:0c:fe:09:2d:12:a3:77:f4:4a:06:64:bc:b3:
         57:fb:cc:84:56:b9:3d:e0:db:07:ad:15:a0:f8:27:71:d2:51:
         7f:7a:50:06:14:82:5d:4e:80:d7:c3:89:74:9f:4c:a0:fa:e3:
         8b:4b:c0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----