Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7cc4b80-d530-33a7-8920-2c201428bb77.roa
File:                     a7cc4b80-d530-33a7-8920-2c201428bb77.roa (raw, json)
Hash identifier:          CaVx2iH3MoN0JgWdYJd55JK3mTHeYSkBT+mj0e5iu7c=
Subject key identifier:   57:B3:F2:7E:B0:35:94:F7:55:BA:9C:FF:1B:29:01:D4:D4:D0:6E:D9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858430C551C3CBBD69FF078087780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7cc4b80-d530-33a7-8920-2c201428bb77.roa
Signing time:             Tue 29 Aug 2023 18:13:23 +0000
ROA not before:           Tue 29 Aug 2023 18:13:23 +0000
ROA not after:            Mon 27 Nov 2023 19:13:23 +0000
asID:                     1599
IP address blocks:        50.114.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0c:55:1c:3c:bb:d6:9f:f0:78:08:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 29 18:13:23 2023 GMT
            Not After : Nov 27 19:13:23 2023 GMT
        Subject: CN=705520f9-970f-4296-8a45-7c851aa532c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:27:53:33:b0:1a:ca:48:3d:7d:15:8e:4c:
                    73:b0:95:7a:ac:10:27:5a:bc:07:80:65:6b:02:c8:
                    5e:91:f1:7f:ec:e7:1e:00:78:ea:d3:6e:53:3c:ee:
                    f2:86:8c:3b:2c:3b:5e:88:0e:77:21:e4:49:8e:54:
                    28:c1:a6:88:84:91:ee:d2:d5:3f:66:02:c5:d8:1f:
                    d8:1e:7a:4e:d9:8c:72:c4:62:53:82:1f:8d:cb:57:
                    1c:25:70:af:93:ea:50:4b:72:45:86:fc:9a:8c:8f:
                    77:db:13:78:dc:c5:09:9a:5b:6a:4e:71:8a:06:c8:
                    e4:69:b8:a3:bd:fb:7c:ac:97:1e:db:f0:dd:42:84:
                    b1:a2:0c:c1:bc:5a:14:01:26:27:c2:10:ef:91:c6:
                    ab:86:40:15:2f:33:cf:c2:57:92:25:d0:60:84:e6:
                    43:c4:a2:db:f0:70:8e:db:9f:93:a6:e4:d5:bd:2e:
                    f3:9a:3b:5d:21:9b:77:ce:7b:d8:cb:5c:d4:21:83:
                    8a:7b:e6:5f:d3:c6:db:a0:60:1c:77:91:69:da:9c:
                    26:fa:4a:8d:20:eb:00:a1:23:a0:d3:c4:ee:12:57:
                    ce:64:ce:4b:be:70:9a:98:d5:29:b2:47:e8:09:d0:
                    0a:30:dd:a8:f7:2e:f9:f5:05:b1:ec:00:af:a5:cf:
                    20:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B3:F2:7E:B0:35:94:F7:55:BA:9C:FF:1B:29:01:D4:D4:D0:6E:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7cc4b80-d530-33a7-8920-2c201428bb77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:34:e8:f1:e8:e7:f2:d5:09:a0:6e:8f:d8:ab:be:a1:9c:5a:
         8f:df:af:2d:39:00:ad:61:dc:04:ec:37:66:9c:a0:46:90:29:
         fd:c6:d5:29:9c:4c:5d:1f:46:cc:06:de:27:50:e2:35:a5:35:
         ae:dc:57:f7:6d:d1:29:fa:96:fa:8c:26:1b:22:52:40:cc:6f:
         30:ce:c3:2f:69:ad:a5:9e:65:71:c6:91:d8:c6:15:a6:10:de:
         06:38:02:c0:8a:c9:db:2b:7c:45:a1:f5:d2:93:05:ac:8e:ba:
         ef:73:52:40:15:8e:66:22:a5:42:11:5a:59:59:16:3d:71:52:
         cd:58:fd:97:6e:38:c5:98:57:b7:0b:11:51:bb:c4:17:32:7e:
         e1:c5:d9:ca:42:d2:b5:98:b6:93:6c:7e:db:5d:88:68:4c:b5:
         8d:a2:46:28:b3:83:ea:b8:41:1e:5d:f3:8e:5b:0a:ca:d2:7b:
         a1:88:cc:7d:e4:36:05:81:b0:74:7d:e9:6b:f4:c0:58:34:96:
         1f:49:5c:08:23:30:55:9f:d3:d9:12:07:c4:c5:83:cc:09:6b:
         8b:ce:de:2a:bb:e1:b3:8a:98:8d:2a:94:64:d3:36:52:5c:99:
         01:c6:c6:57:e7:ef:05:f2:48:d3:10:d7:06:d5:6e:51:b3:3a:
         f9:c3:ad:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMMVRw8u9af8HgId4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgyOTE4MTMyM1oXDTIzMTEyNzE5MTMyM1owLzEtMCsGA1UEAxMk
NzA1NTIwZjktOTcwZi00Mjk2LThhNDUtN2M4NTFhYTUzMmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEgnUzOwGspIPX0VjkxzsJV6rBAnWrwHgGVr
AshekfF/7OceAHjq025TPO7yhow7LDteiA53IeRJjlQowaaIhJHu0tU/ZgLF2B/Y
HnpO2YxyxGJTgh+Ny1ccJXCvk+pQS3JFhvyajI932xN43MUJmltqTnGKBsjkabij
vft8rJce2/DdQoSxogzBvFoUASYnwhDvkcarhkAVLzPPwleSJdBghOZDxKLb8HCO
25+TpuTVvS7zmjtdIZt3znvYy1zUIYOKe+Zf08bboGAcd5Fp2pwm+kqNIOsAoSOg
08TuElfOZM5LvnCamNUpskfoCdAKMN2o9y759QWx7ACvpc8gzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFez8n6wNZT3Vbqc/xspAdTU0G7ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTdjYzRiODAtZDUzMC0z
M2E3LTg5MjAtMmMyMDE0MjhiYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnLQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFE06PHo5/LVCaBuj9irvqGcWo/fry05AK1h3ATsN2acoEaQKf3G1Smc
TF0fRswG3idQ4jWlNa7cV/dt0Sn6lvqMJhsiUkDMbzDOwy9praWeZXHGkdjGFaYQ
3gY4AsCKydsrfEWh9dKTBayOuu9zUkAVjmYipUIRWllZFj1xUs1Y/ZduOMWYV7cL
EVG7xBcyfuHF2cpC0rWYtpNsfttdiGhMtY2iRiizg+q4QR5d845bCsrSe6GIzH3k
NgWBsHR96Wv0wFg0lh9JXAgjMFWf09kSB8TFg8wJa4vO3iq74bOKmI0qlGTTNlJc
mQHGxlfn7wXySNMQ1wbVblGzOvnDrb4=
-----END CERTIFICATE-----
Generated at Tue Aug 29 20:26:08 2023 by rpki-client on console-fra.rpki-client.org