Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87aca147-e600-3d0e-87d8-623742d3dc15.roa
File:                     87aca147-e600-3d0e-87d8-623742d3dc15.roa (raw, json)
Hash identifier:          kOtqrmR8u8miBg3N9D8RKWftUvqYnQ0OXQXr+gqqWn4=
Subject key identifier:   31:5C:7C:0D:C2:19:ED:FE:74:53:51:60:FD:34:0B:C2:C6:70:7F:BD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841DEC796662ED2E0C4857D7400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87aca147-e600-3d0e-87d8-623742d3dc15.roa
Signing time:             Sat 13 May 2023 17:49:55 +0000
ROA not before:           Sat 13 May 2023 17:49:55 +0000
ROA not after:            Fri 11 Aug 2023 17:49:55 +0000
asID:                     834
IP address blocks:        50.114.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:de:c7:96:66:2e:d2:e0:c4:85:7d:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 13 17:49:55 2023 GMT
            Not After : Aug 11 17:49:55 2023 GMT
        Subject: CN=ef55e506-47a0-4376-b54b-12019beff167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:60:4a:c6:bf:80:27:8d:ec:1b:43:03:90:
                    74:28:f3:8e:f6:72:ba:b4:31:d9:f3:f0:9e:9d:97:
                    18:1d:ea:be:af:02:20:70:37:07:70:35:db:7a:e4:
                    08:42:04:10:0f:45:8d:b5:49:a0:5c:74:fe:05:47:
                    3c:c3:81:72:b3:4c:4a:29:36:e3:f9:02:6f:2b:24:
                    99:e3:61:c4:b2:2c:96:18:2f:50:ca:f3:a4:5c:05:
                    41:e5:e8:79:d9:eb:0d:1a:34:5e:87:24:7c:a9:47:
                    53:f3:d8:e6:20:ae:51:81:a9:97:03:ee:bd:79:dc:
                    16:0f:9f:b6:5c:7c:15:fa:b8:4a:b0:f2:27:af:2f:
                    7d:98:e9:e0:f1:8f:8e:2d:5d:59:04:d4:b0:ee:8f:
                    75:9e:18:3e:95:ed:df:eb:d9:c8:b9:e2:3c:2d:8a:
                    9b:bc:7d:96:54:7c:04:5d:49:57:e4:74:7f:0a:3e:
                    61:1b:6a:df:5a:3f:bd:e1:89:b4:36:82:ce:46:22:
                    8e:44:bd:22:fc:ab:1d:b8:5f:35:cc:05:58:8e:80:
                    1a:18:8e:76:94:f2:bf:41:63:94:61:e6:1a:57:a0:
                    fa:f0:c4:5e:b6:38:86:7c:97:ef:0e:a8:4a:59:2c:
                    9e:85:b1:ce:64:4e:2c:c6:62:48:d6:86:57:e6:3d:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5C:7C:0D:C2:19:ED:FE:74:53:51:60:FD:34:0B:C2:C6:70:7F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87aca147-e600-3d0e-87d8-623742d3dc15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:38:d2:b8:2e:2b:b9:a8:8f:7e:d9:76:16:f5:bf:4e:34:70:
         6c:1a:0d:a5:15:e5:83:c8:22:a9:79:00:43:28:dd:02:a3:13:
         65:e6:9d:8a:53:c1:c8:dc:7e:a3:01:2c:c5:3e:54:0c:04:44:
         dc:c2:2e:2b:77:f4:f6:dd:24:f0:de:7d:ac:7c:35:f7:7a:0f:
         d1:a5:40:15:b0:c7:3d:5a:2e:46:f4:d8:f7:42:60:c2:08:80:
         85:a5:ab:b7:fc:77:1c:b8:bb:73:60:2f:a5:0f:67:ea:e0:81:
         d6:e1:9c:da:4e:ba:2e:14:5b:7b:c2:23:5c:c5:35:9a:4c:93:
         0c:8e:20:4e:72:55:a8:b1:bb:e9:92:27:2c:8a:0e:b4:7b:9c:
         99:56:c4:0f:2f:3d:a4:11:c2:9a:21:a7:66:37:aa:d1:e6:2f:
         d1:f2:d2:28:13:db:9f:3f:30:07:01:48:c3:19:90:ff:a3:6d:
         97:4a:38:c0:2d:07:2b:b6:36:e2:ae:f7:56:b8:08:fb:f5:7c:
         49:ec:8a:7e:f1:c4:96:02:41:d0:f8:02:93:b8:cd:a1:f9:65:
         01:9e:ba:6a:a3:d2:f2:0a:66:40:41:f2:47:a3:53:79:40:d6:
         e0:20:be:7d:49:60:ee:93:6d:d8:6e:32:75:4d:db:a2:55:a0:
         a8:da:18:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----