Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afce71d0-b451-345b-91c6-e60351f10776.roa
File:                     afce71d0-b451-345b-91c6-e60351f10776.roa (raw, json)
Hash identifier:          y4duhVBixeMzu588jOVEdQgzbldq//74AUCQ+YThG2c=
Subject key identifier:   14:CB:78:16:06:E5:DE:F9:7F:95:47:BE:08:0C:62:7C:75:C3:FE:2C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858420B8340A2B6C8CDA3079CE3E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afce71d0-b451-345b-91c6-e60351f10776.roa
Signing time:             Mon 29 May 2023 18:23:37 +0000
ROA not before:           Mon 29 May 2023 18:23:37 +0000
ROA not after:            Sun 27 Aug 2023 18:23:37 +0000
asID:                     140155
IP address blocks:        50.114.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0b:83:40:a2:b6:c8:cd:a3:07:9c:e3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 29 18:23:37 2023 GMT
            Not After : Aug 27 18:23:37 2023 GMT
        Subject: CN=c34b9d7a-6a12-4a27-b578-53a502439661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:91:d3:5a:05:6d:d3:68:fa:d3:44:8b:39:
                    5a:32:90:c4:e9:8e:9f:6e:70:52:57:90:08:d9:c1:
                    93:e0:09:82:0e:80:72:05:74:ac:4f:3b:c8:f1:94:
                    53:9c:2d:cb:9f:59:02:f2:d2:3d:bd:b9:4e:68:86:
                    f7:d3:c4:6e:7a:c6:7e:0b:5d:4f:f9:5b:a5:75:36:
                    34:5d:2d:2f:32:34:c3:0d:9f:2e:30:d2:57:00:6d:
                    fa:0d:7b:74:2f:d2:78:a4:db:48:25:ad:4f:d6:6a:
                    5d:74:45:bb:24:c6:58:14:bb:39:92:7c:2a:41:6d:
                    50:84:8e:c7:c7:ab:e2:90:39:3c:a1:f5:d9:fb:2e:
                    59:2e:27:99:3c:bb:d8:f7:c4:bb:96:ad:0f:94:f6:
                    66:df:e2:ec:18:12:25:02:29:00:6e:d6:d4:30:42:
                    62:86:9e:76:49:2d:34:0f:60:b4:d6:85:0a:6d:8d:
                    3a:c0:d3:10:4c:66:80:b1:40:70:aa:af:46:e7:36:
                    57:8c:57:81:b9:13:40:c5:64:e7:4e:bd:83:58:34:
                    ab:4f:30:1d:95:4e:91:53:20:e4:cb:42:3f:ee:ee:
                    82:58:d7:4c:14:0f:f5:48:6f:67:16:d2:dd:ad:a7:
                    8d:e0:0a:4e:11:46:b2:44:11:21:5f:0f:61:d2:1f:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CB:78:16:06:E5:DE:F9:7F:95:47:BE:08:0C:62:7C:75:C3:FE:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afce71d0-b451-345b-91c6-e60351f10776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c7:a9:82:47:e6:d3:a0:3d:a4:63:29:6e:a0:5c:08:99:2f:
         4b:e0:cc:d4:e8:3f:9f:ca:63:fd:ac:c7:e6:9d:3c:e9:07:5b:
         89:f9:1b:77:49:6d:d1:db:ce:8a:e2:4c:e1:a1:3a:0f:bc:86:
         d4:61:3b:12:2e:b8:73:e8:26:12:09:62:c7:95:56:0b:59:82:
         00:19:52:0b:84:1a:41:3d:ac:8d:13:ec:9f:34:3d:86:57:c0:
         39:c5:55:e5:05:98:15:44:6a:8d:90:13:0c:a5:d8:ac:9f:9f:
         1d:42:e6:47:a9:b3:56:ce:1e:de:24:6e:15:06:fa:36:62:89:
         09:89:18:ee:ba:bf:51:ad:c4:a8:e3:0b:dd:30:b9:e5:40:72:
         90:da:1b:75:7e:a4:c3:04:a5:b3:70:28:64:eb:ed:aa:c6:da:
         7a:e0:71:9c:24:c3:0b:de:9f:b4:9e:00:7b:34:48:c5:8f:47:
         60:af:af:7c:73:47:ea:96:a3:a6:42:5f:2f:3c:65:55:62:d4:
         db:38:b4:67:ff:7e:d6:09:9e:55:b5:10:99:0e:77:c8:69:cc:
         81:f9:b0:6c:21:44:02:cb:df:71:21:21:3e:00:aa:5f:71:6f:
         81:4c:f8:02:51:31:4f:f3:6a:27:8e:36:35:80:4b:6a:d4:30:
         12:21:19:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEILg0CitsjNowec4+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUyOTE4MjMzN1oXDTIzMDgyNzE4MjMzN1owLzEtMCsGA1UEAxMk
YzM0YjlkN2EtNmExMi00YTI3LWI1NzgtNTNhNTAyNDM5NjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWSR01oFbdNo+tNEizlaMpDE6Y6fbnBSV5AI
2cGT4AmCDoByBXSsTzvI8ZRTnC3Ln1kC8tI9vblOaIb308RuesZ+C11P+VuldTY0
XS0vMjTDDZ8uMNJXAG36DXt0L9J4pNtIJa1P1mpddEW7JMZYFLs5knwqQW1QhI7H
x6vikDk8ofXZ+y5ZLieZPLvY98S7lq0PlPZm3+LsGBIlAikAbtbUMEJihp52SS00
D2C01oUKbY06wNMQTGaAsUBwqq9G5zZXjFeBuRNAxWTnTr2DWDSrTzAdlU6RUyDk
y0I/7u6CWNdMFA/1SG9nFtLdraeN4ApOEUayRBEhXw9h0h8NHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBTLeBYG5d75f5VHvggMYnx1w/4sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWZjZTcxZDAtYjQ1MS0z
NDViLTkxYzYtZTYwMzUxZjEwNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnLFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrHqYJH5tOgPaRjKW6gXAiZL0vgzNToP5/KY/2sx+adPOkHW4n5G3dJ
bdHbzoriTOGhOg+8htRhOxIuuHPoJhIJYseVVgtZggAZUguEGkE9rI0T7J80PYZX
wDnFVeUFmBVEao2QEwyl2Kyfnx1C5keps1bOHt4kbhUG+jZiiQmJGO66v1GtxKjj
C90wueVAcpDaG3V+pMMEpbNwKGTr7arG2nrgcZwkwwven7SeAHs0SMWPR2Cvr3xz
R+qWo6ZCXy88ZVVi1Ns4tGf/ftYJnlW1EJkOd8hpzIH5sGwhRALL33EhIT4Aql9x
b4FM+AJRMU/zaieONjWAS2rUMBIhGds=
-----END CERTIFICATE-----