Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a7a7ea6-bee4-387e-913c-151ae2c1eef3.roa
File:                     8a7a7ea6-bee4-387e-913c-151ae2c1eef3.roa (raw, json)
Hash identifier:          Pf930o06qbiA4HhxrZzd6W0iXSETN8KIxq51uRX9U0U=
Subject key identifier:   C1:68:7E:4D:31:3B:91:B1:EA:4E:C2:7F:92:B9:02:00:D3:20:4C:F3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842EA7E4FBD7A4BE86E84CBEA40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a7a7ea6-bee4-387e-913c-151ae2c1eef3.roa
Signing time:             Thu 17 Aug 2023 15:18:55 +0000
ROA not before:           Thu 17 Aug 2023 15:18:55 +0000
ROA not after:            Wed 15 Nov 2023 16:18:55 +0000
asID:                     50131
IP address blocks:        50.114.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ea:7e:4f:bd:7a:4b:e8:6e:84:cb:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 17 15:18:55 2023 GMT
            Not After : Nov 15 16:18:55 2023 GMT
        Subject: CN=a95ec07e-ccea-4d35-af29-875b4a3ed319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a9:03:a4:19:b4:c9:b2:21:32:4a:27:d2:4c:
                    3c:1b:a1:4b:41:f1:0c:ab:70:a0:07:3d:fa:99:8f:
                    c1:cf:cb:0c:ea:8a:1f:b3:19:02:b6:86:cf:e5:27:
                    c0:21:39:97:88:88:e0:0e:c0:0b:2b:99:99:51:97:
                    18:ac:ed:5a:5b:05:78:bc:1b:3e:0a:7f:93:3b:9b:
                    52:bd:d0:5d:9c:fa:95:e6:b9:7b:01:b3:e5:d8:79:
                    9c:05:6a:be:f1:04:23:37:b3:ef:90:26:d7:de:0b:
                    36:20:f7:d2:2a:f1:6d:33:ca:fe:98:d9:d5:59:32:
                    43:1b:df:07:1f:1d:37:c7:7b:44:12:31:07:2c:90:
                    77:34:1b:11:a3:ff:30:22:99:fb:3b:f6:31:42:29:
                    a8:85:bb:0f:2c:6c:f4:32:7d:fd:8c:90:e3:c0:67:
                    ee:32:63:82:b6:1e:db:88:53:96:f7:7a:8a:01:51:
                    03:49:6a:45:ac:87:dc:5d:ad:64:89:0e:4f:4e:ff:
                    2a:9e:5b:64:ac:8a:3e:20:6e:e7:61:80:89:34:91:
                    fa:92:5f:7c:72:f9:9d:50:e3:4d:d5:aa:71:db:f9:
                    2e:76:5a:cd:72:1d:aa:22:1b:a7:7e:ec:ad:19:66:
                    26:e9:fc:58:31:14:ed:5f:86:63:ff:43:09:ef:1e:
                    88:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:68:7E:4D:31:3B:91:B1:EA:4E:C2:7F:92:B9:02:00:D3:20:4C:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a7a7ea6-bee4-387e-913c-151ae2c1eef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:eb:19:a3:d7:c8:c8:04:0a:17:8f:b7:31:9c:5d:0b:53:3d:
         be:5d:87:c0:fb:55:d8:8a:37:a8:55:a3:70:fa:97:d8:c4:61:
         9f:db:ed:c9:35:b4:b2:65:a4:15:30:0c:7e:09:8c:90:02:3c:
         d0:ab:f5:ed:a4:61:81:11:b2:2d:81:ec:65:50:46:6f:d9:f0:
         55:ea:9e:be:3c:e0:9c:9c:42:0f:62:1c:12:c8:05:1b:df:7e:
         8d:5f:1d:2b:a4:28:14:ac:0b:17:35:60:13:7f:9b:6a:ee:fb:
         0a:79:d6:57:14:d9:00:c4:53:16:1c:09:d4:a8:ce:1d:a0:f4:
         e0:6f:d5:9b:08:93:8b:9a:8f:42:68:6d:40:5c:f6:3a:d2:c4:
         dd:48:7a:e2:0d:12:bb:ca:1e:1a:2d:c4:11:e7:d3:f4:47:d7:
         cd:29:11:c5:8e:4b:05:0b:41:d4:47:28:27:e6:66:dd:36:d5:
         79:5d:9c:bf:28:e1:ba:a8:1c:c8:43:4d:57:37:d0:fa:49:8d:
         03:ac:cb:27:01:89:98:93:c9:59:af:0e:56:59:c8:b9:c9:5f:
         94:fc:f7:05:26:6a:85:92:58:e5:f6:d0:c9:6a:10:fe:70:0f:
         2a:0b:c2:d6:79:bd:0b:c9:82:df:13:a2:d1:23:e9:65:d2:ac:
         23:5c:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 14:32:23 2023 by rpki-client on console-fra.rpki-client.org