Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8156c97b-9a47-349c-be97-3dd64456026f.roa
File:                     8156c97b-9a47-349c-be97-3dd64456026f.roa (raw, json)
Hash identifier:          eEQcPM5SMqBu+5DCDHroDV7f+SxGV/fOfr+k1XaiO9k=
Subject key identifier:   AF:06:06:13:F7:71:63:F4:7D:2B:D4:6F:69:A2:8E:78:AA:65:76:7D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842FB653740870F44721B4AF140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8156c97b-9a47-349c-be97-3dd64456026f.roa
Signing time:             Wed 23 Aug 2023 16:37:06 +0000
ROA not before:           Wed 23 Aug 2023 16:37:06 +0000
ROA not after:            Tue 21 Nov 2023 17:37:06 +0000
asID:                     11798
IP address blocks:        50.114.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:fb:65:37:40:87:0f:44:72:1b:4a:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 23 16:37:06 2023 GMT
            Not After : Nov 21 17:37:06 2023 GMT
        Subject: CN=3d83a271-1ba7-47b6-a306-677167f7677b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:46:e4:da:84:97:9b:1e:b5:a7:54:7a:5f:ee:
                    b0:b8:94:ce:f7:78:49:7a:41:ea:22:a7:bb:c1:99:
                    9a:e5:74:6e:c3:b2:5e:8c:6e:78:c1:8f:87:66:cb:
                    43:b4:ed:34:cd:b7:02:36:da:ba:4d:cf:e5:a1:5b:
                    37:15:c1:1d:25:3c:97:3c:3d:3e:b4:8c:95:db:f5:
                    be:1f:bb:d0:f2:69:86:cb:83:17:d2:0d:92:a7:1d:
                    f9:e3:bc:63:0d:e0:4d:ba:3a:cc:83:58:d1:23:40:
                    3a:91:00:e4:e6:16:03:f8:03:79:2e:17:0f:4d:5c:
                    c4:19:f6:d9:88:56:9d:37:9f:ae:40:46:fe:8a:d1:
                    a1:76:54:ad:7e:77:db:e2:63:38:af:e6:ad:b8:f4:
                    5d:2a:e6:86:29:6e:42:21:d4:4b:b9:0d:c6:cc:ae:
                    c0:9b:e0:a1:42:18:c9:44:bd:e2:09:be:c1:89:cf:
                    dc:99:48:eb:36:7d:7e:aa:60:c0:79:1f:1e:f4:55:
                    3a:4f:64:05:c0:60:d9:af:af:a0:ba:f5:90:1e:79:
                    bb:c9:51:83:47:f7:d0:52:d6:d2:47:16:83:cd:ec:
                    b6:b0:1e:24:aa:20:7d:2d:97:71:5e:3a:00:71:4e:
                    e0:7c:a5:cf:69:31:d1:b8:9f:94:da:18:b4:52:ec:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:06:06:13:F7:71:63:F4:7D:2B:D4:6F:69:A2:8E:78:AA:65:76:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8156c97b-9a47-349c-be97-3dd64456026f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a0:56:79:67:29:70:a2:23:21:92:f4:9f:ad:64:82:0a:71:
         67:f6:d4:40:6b:9d:16:24:c5:4c:92:38:80:6d:c1:56:ca:19:
         00:60:ce:69:6f:0e:18:3c:5d:ca:df:e8:f2:4a:67:d2:98:4e:
         db:ae:86:79:1d:fd:ee:cb:92:31:45:31:29:02:6a:07:d1:8e:
         3d:de:e1:74:d0:b8:b0:eb:3d:62:34:7c:06:f9:f5:52:d2:12:
         d8:66:1e:d0:64:1d:d1:e2:9f:c2:1a:76:25:f1:df:52:59:2b:
         5a:e6:b0:2f:29:38:de:0a:d9:ce:f7:d3:20:fe:3d:b1:ac:4e:
         56:78:78:3c:c0:53:ef:29:14:25:57:85:b4:5e:41:6f:c2:7f:
         22:bc:9f:c5:79:f5:f5:eb:4d:61:7e:a7:63:b2:24:34:12:c2:
         a8:a5:cc:a2:57:47:ea:e0:3d:b9:be:bd:8c:8f:1e:70:41:b5:
         d4:f7:05:f8:b2:eb:6a:97:c5:df:0b:4b:d3:df:a8:0a:d1:3d:
         d6:d4:70:a4:8f:8b:bd:c7:39:d0:4f:96:70:1d:51:2f:eb:9a:
         7d:e1:f9:5f:79:02:b0:be:72:a7:5b:e8:ad:5b:79:98:cf:84:
         24:31:f3:e5:d0:ab:e4:c8:85:04:5c:6c:2d:65:d4:aa:de:b4:
         c8:72:fe:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEL7ZTdAhw9EchtK8UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgyMzE2MzcwNloXDTIzMTEyMTE3MzcwNlowLzEtMCsGA1UEAxMk
M2Q4M2EyNzEtMWJhNy00N2I2LWEzMDYtNjc3MTY3Zjc2NzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkbk2oSXmx61p1R6X+6wuJTO93hJekHqIqe7
wZma5XRuw7JejG54wY+HZstDtO00zbcCNtq6Tc/loVs3FcEdJTyXPD0+tIyV2/W+
H7vQ8mmGy4MX0g2Spx3547xjDeBNujrMg1jRI0A6kQDk5hYD+AN5LhcPTVzEGfbZ
iFadN5+uQEb+itGhdlStfnfb4mM4r+atuPRdKuaGKW5CIdRLuQ3GzK7Am+ChQhjJ
RL3iCb7Bic/cmUjrNn1+qmDAeR8e9FU6T2QFwGDZr6+guvWQHnm7yVGDR/fQUtbS
RxaDzey2sB4kqiB9LZdxXjoAcU7gfKXPaTHRuJ+U2hi0UuztNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8GBhP3cWP0fSvUb2mijniqZXZ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODE1NmM5N2ItOWE0Ny0z
NDljLWJlOTctM2RkNjQ0NTYwMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnK/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWgVnlnKXCiIyGS9J+tZIIKcWf21EBrnRYkxUySOIBtwVbKGQBgzmlv
Dhg8Xcrf6PJKZ9KYTtuuhnkd/e7LkjFFMSkCagfRjj3e4XTQuLDrPWI0fAb59VLS
EthmHtBkHdHin8IadiXx31JZK1rmsC8pON4K2c730yD+PbGsTlZ4eDzAU+8pFCVX
hbReQW/CfyK8n8V59fXrTWF+p2OyJDQSwqilzKJXR+rgPbm+vYyPHnBBtdT3Bfiy
62qXxd8LS9PfqArRPdbUcKSPi73HOdBPlnAdUS/rmn3h+V95ArC+cqdb6K1beZjP
hCQx8+XQq+TIhQRcbC1l1KretMhy/pg=
-----END CERTIFICATE-----