Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/baf727d4-e534-3b6a-9578-d64bebf65aee.roa
File:                     baf727d4-e534-3b6a-9578-d64bebf65aee.roa (raw, json)
Hash identifier:          ANQosOsodLZd3uAu7Pg4VGmjwf+Yx/f7ImbpbETwtE0=
Subject key identifier:   83:B1:B0:E1:CA:16:E5:CC:D2:20:80:49:BC:1D:61:84:48:F8:BA:30
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843CD21712BB4D833C2EA378500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/baf727d4-e534-3b6a-9578-d64bebf65aee.roa
Signing time:             Mon 06 Nov 2023 19:40:18 +0000
ROA not before:           Mon 06 Nov 2023 19:40:18 +0000
ROA not after:            Sun 04 Feb 2024 19:40:18 +0000
asID:                     50867
IP address blocks:        50.114.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 07 Jan 2024 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:cd:21:71:2b:b4:d8:33:c2:ea:37:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  6 19:40:18 2023 GMT
            Not After : Feb  4 19:40:18 2024 GMT
        Subject: CN=e9385dbe-fb2f-419d-9049-8d0dc9c47d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e7:2e:aa:83:b3:8f:22:b3:32:dd:60:f4:5c:
                    03:b4:6a:6f:e2:cf:56:b4:aa:d8:f2:f8:29:16:08:
                    83:e0:85:c0:ca:1e:77:a4:a0:47:6f:40:3f:f7:80:
                    ab:f0:53:f6:6f:04:26:fd:7f:a9:5e:c0:7a:63:0a:
                    2a:a0:34:fe:82:07:69:b9:0e:1f:b0:30:60:d6:70:
                    ba:ed:be:05:e9:ed:5d:a7:84:23:07:1d:88:94:48:
                    4b:a8:f8:aa:33:ba:0b:bf:91:f7:b1:f6:67:a8:a7:
                    84:33:12:c1:16:db:c7:5d:fa:44:e1:e2:ba:3a:de:
                    69:aa:22:da:be:e0:37:b1:e2:44:ed:80:ac:c8:8b:
                    6c:9b:68:fe:08:ad:d8:8d:66:61:b0:d9:d8:c7:6a:
                    bf:e4:0e:d3:5c:cd:35:9b:6d:79:ff:f1:01:00:88:
                    c1:cb:5b:03:56:34:b3:2d:c8:b7:48:2f:1d:92:01:
                    4d:94:0c:53:7a:61:6a:b3:6e:26:34:e5:db:17:56:
                    59:03:b0:14:8b:f6:93:75:77:0e:66:e4:c7:c2:6e:
                    86:16:d9:16:2e:12:ed:a5:bf:ed:fd:88:67:e9:ac:
                    59:29:ff:f3:1b:07:45:97:dd:ed:7a:00:17:27:4c:
                    ce:60:62:54:8e:41:24:0f:a7:e5:65:81:25:cd:8d:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B1:B0:E1:CA:16:E5:CC:D2:20:80:49:BC:1D:61:84:48:F8:BA:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/baf727d4-e534-3b6a-9578-d64bebf65aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:ed:b2:8a:cf:36:6c:ba:1b:c4:c4:3c:d9:ce:f0:2e:a8:
         06:57:5f:50:cd:c1:3a:08:4c:32:cf:6f:32:30:46:ce:16:53:
         fe:4c:dd:9b:29:9b:4e:3f:c3:a9:a5:62:b6:8d:61:af:14:84:
         8d:99:29:46:da:22:e7:fc:75:ec:0e:be:c4:d2:c0:a4:c4:e6:
         6c:b0:15:be:8a:54:3e:e1:d6:c7:6e:7c:06:25:94:6c:77:bd:
         3d:94:58:fc:77:57:27:7e:2b:3e:01:c9:6e:06:c3:99:5e:ae:
         c4:06:e3:40:99:40:38:ee:4d:d8:ed:8a:59:f4:d2:58:d0:12:
         ff:4a:7a:e9:fc:d3:5d:4c:75:e0:d0:ee:c4:88:6c:ae:93:c1:
         36:d2:d6:6d:b3:89:9f:40:1d:79:88:d8:06:87:e3:40:3c:8e:
         d7:a1:e5:cb:87:d2:d6:1b:9d:02:21:d4:b2:40:fe:32:08:a5:
         1a:ee:1f:9f:d1:55:49:17:7f:06:c8:6e:e2:62:c2:8e:d5:f6:
         58:78:8a:4c:8b:a8:9e:09:9b:59:b9:c8:85:95:58:ab:5f:10:
         c0:bf:04:af:d9:18:fc:3b:15:8d:c6:49:11:76:a5:f1:ed:00:
         36:56:f6:75:d4:30:a6:77:01:c2:05:4e:b0:d0:16:ad:54:9b:
         42:c8:9c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 02:13:21 2024 by rpki-client on console-fra.rpki-client.org