Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8056a9e0-db5a-3d44-ba91-d0d87f866ea2.roa
File:                     8056a9e0-db5a-3d44-ba91-d0d87f866ea2.roa (raw, json)
Hash identifier:          dSlyIDbxL+oSRJPuFqe+TUzCoCi885AwF9aafPs4Rqk=
Subject key identifier:   56:50:25:78:FF:B2:B4:99:D6:E1:D8:77:34:17:40:EA:96:F5:22:FA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842CED8563A8B1B7B73E83D0D40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8056a9e0-db5a-3d44-ba91-d0d87f866ea2.roa
Signing time:             Mon 07 Aug 2023 17:37:40 +0000
ROA not before:           Mon 07 Aug 2023 17:37:40 +0000
ROA not after:            Sun 05 Nov 2023 18:37:40 +0000
asID:                     61317
IP address blocks:        50.114.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:d8:56:3a:8b:1b:7b:73:e8:3d:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  7 17:37:40 2023 GMT
            Not After : Nov  5 18:37:40 2023 GMT
        Subject: CN=c49ebdac-9c89-4f90-85cd-0f53ba796b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:03:03:4a:65:57:b3:4d:84:bd:bd:86:83:
                    86:05:3e:45:3a:b7:6f:e5:c3:f3:d0:58:be:e9:29:
                    a9:64:66:c4:a7:aa:1e:8c:f4:3b:9d:2b:fd:4b:3a:
                    3e:77:e2:e1:1b:01:9c:55:ef:fa:7f:6d:1c:01:8c:
                    8e:0f:53:2e:fb:c4:5f:ca:61:7f:e3:a5:76:6e:17:
                    a9:a4:a1:93:ee:65:46:79:b3:48:49:8f:3b:fe:a0:
                    30:88:ba:d5:0b:23:63:91:30:ea:0a:2d:a7:33:3e:
                    d1:56:9d:0a:56:b0:4d:68:d8:9d:43:05:e0:ec:fc:
                    6b:17:27:56:81:19:24:eb:78:6f:4c:84:ed:70:6c:
                    85:3a:85:80:75:8b:40:24:aa:02:c3:1f:e6:aa:cb:
                    cf:6d:38:b3:d5:b8:6b:1e:cf:d9:76:38:fe:66:18:
                    38:c8:b0:e5:49:9d:01:3e:ec:f6:cf:5a:0f:c9:e3:
                    b1:1b:46:2f:d0:52:8c:fc:8a:3f:a1:06:b2:27:f0:
                    22:54:60:49:41:20:5d:fb:2d:f9:03:a8:f6:0a:9d:
                    49:80:e1:67:7a:c2:f1:a5:32:93:22:bf:36:46:de:
                    23:44:66:f7:53:c5:d1:39:78:c9:44:c5:97:70:47:
                    08:cc:a4:f0:74:fc:04:8e:81:30:52:83:d8:d0:9e:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:50:25:78:FF:B2:B4:99:D6:E1:D8:77:34:17:40:EA:96:F5:22:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8056a9e0-db5a-3d44-ba91-d0d87f866ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f7:4e:46:8e:7f:0f:b3:cd:4b:50:b3:98:69:b5:83:e4:19:
         f3:75:37:a5:10:0c:2e:a2:f1:7f:cc:fe:d7:c6:3d:c6:e7:4f:
         cf:49:a6:e2:27:a0:8d:3c:72:f8:7b:5d:68:28:ee:42:d2:ef:
         94:4e:fe:b7:74:75:2b:0f:10:d7:cb:4c:0a:0f:bd:31:eb:4e:
         7b:bc:73:ad:ea:f2:a7:bb:55:09:e5:9d:7a:6f:41:95:df:97:
         05:6e:22:02:85:22:54:6d:aa:1f:cf:a6:5f:05:d4:63:ce:1a:
         f2:1e:97:06:57:00:7a:4d:91:8c:6e:0c:1d:a0:d3:f8:e7:51:
         c4:af:05:56:35:80:93:d7:1c:ea:07:73:8d:f1:13:cd:88:ee:
         f2:16:9c:f0:e8:8e:5e:4e:fd:36:da:fe:4d:e2:35:4f:12:91:
         10:9a:17:77:be:e7:16:cd:66:3d:ed:7f:a6:65:d3:4c:45:f8:
         30:ff:ed:cc:0b:fb:af:ad:c2:2b:7e:da:49:2e:05:18:a8:93:
         d4:f4:be:17:ea:3b:4f:a9:c1:b4:21:47:86:87:a9:06:47:b2:
         a9:e8:7b:8f:5b:af:97:a6:28:79:3c:e9:5b:52:c5:df:4a:69:
         c4:f8:d2:a0:3d:24:13:6e:f9:49:4a:52:a2:1b:d7:96:58:39:
         39:04:c6:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELO2FY6ixt7c+g9DUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgwNzE3Mzc0MFoXDTIzMTEwNTE4Mzc0MFowLzEtMCsGA1UEAxMk
YzQ5ZWJkYWMtOWM4OS00ZjkwLTg1Y2QtMGY1M2JhNzk2YjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKgDA0plV7NNhL29hoOGBT5FOrdv5cPz0Fi+
6SmpZGbEp6oejPQ7nSv9Szo+d+LhGwGcVe/6f20cAYyOD1Mu+8RfymF/46V2bhep
pKGT7mVGebNISY87/qAwiLrVCyNjkTDqCi2nMz7RVp0KVrBNaNidQwXg7PxrFydW
gRkk63hvTITtcGyFOoWAdYtAJKoCwx/mqsvPbTiz1bhrHs/Zdjj+Zhg4yLDlSZ0B
Puz2z1oPyeOxG0Yv0FKM/Io/oQayJ/AiVGBJQSBd+y35A6j2Cp1JgOFnesLxpTKT
Ir82Rt4jRGb3U8XROXjJRMWXcEcIzKTwdPwEjoEwUoPY0J43EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFZQJXj/srSZ1uHYdzQXQOqW9SL6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODA1NmE5ZTAtZGI1YS0z
ZDQ0LWJhOTEtZDBkODdmODY2ZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/3TkaOfw+zzUtQs5hptYPkGfN1N6UQDC6i8X/M/tfGPcbnT89JpuIn
oI08cvh7XWgo7kLS75RO/rd0dSsPENfLTAoPvTHrTnu8c63q8qe7VQnlnXpvQZXf
lwVuIgKFIlRtqh/Ppl8F1GPOGvIelwZXAHpNkYxuDB2g0/jnUcSvBVY1gJPXHOoH
c43xE82I7vIWnPDojl5O/Tba/k3iNU8SkRCaF3e+5xbNZj3tf6Zl00xF+DD/7cwL
+6+twit+2kkuBRiok9T0vhfqO0+pwbQhR4aHqQZHsqnoe49br5emKHk86VtSxd9K
acT40qA9JBNu+UlKUqIb15ZYOTkExm4=
-----END CERTIFICATE-----
Generated at Thu Sep 7 18:19:16 2023 by rpki-client on console-fra.rpki-client.org