Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfdca7e4-9ce1-321f-b6b2-1f122ce24c17.roa
File:                     bfdca7e4-9ce1-321f-b6b2-1f122ce24c17.roa (raw, json)
Hash identifier:          oXcmo07x916gXW+R1FBrNwnViNOYBuK6eUw4qgQmBo4=
Subject key identifier:   0A:42:05:5D:24:87:AA:75:80:0A:DA:6A:E7:23:5F:C7:C6:1F:F3:FB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841FAAA63D1B9361CBB2E88EEC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfdca7e4-9ce1-321f-b6b2-1f122ce24c17.roa
Signing time:             Tue 23 May 2023 17:33:44 +0000
ROA not before:           Tue 23 May 2023 17:33:44 +0000
ROA not after:            Mon 21 Aug 2023 17:33:44 +0000
asID:                     207633
IP address blocks:        50.114.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:fa:aa:63:d1:b9:36:1c:bb:2e:88:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 23 17:33:44 2023 GMT
            Not After : Aug 21 17:33:44 2023 GMT
        Subject: CN=c219fa4d-7d39-41cf-be06-731928b03c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:d2:80:43:83:92:22:ca:9c:0b:d6:6f:b5:
                    ac:4b:66:3c:49:1f:b8:28:6f:13:41:e8:6f:b9:da:
                    3e:da:7a:4f:d1:db:44:8e:c6:d8:d9:d1:60:9d:47:
                    81:f4:98:8a:cf:09:32:83:72:26:3b:56:3d:1e:72:
                    70:57:06:fb:48:05:89:1d:af:58:6d:e2:d5:fe:20:
                    76:c0:33:01:9e:31:a5:3f:36:b9:29:68:de:aa:c5:
                    bb:e8:f5:3b:80:43:64:b2:ee:74:f6:aa:17:19:5c:
                    e3:1b:e7:ba:87:06:5d:de:b1:44:84:e2:b4:e5:0b:
                    4d:1a:46:f0:63:1e:14:79:68:d8:c9:3d:ec:d3:8e:
                    5c:67:05:dc:25:ac:81:98:10:15:7e:e8:db:26:1c:
                    3a:6b:3f:93:34:73:ee:93:15:b1:60:6d:22:71:3d:
                    e3:90:8e:2e:1d:1e:63:ee:c4:9e:9b:d9:34:75:74:
                    1f:40:b7:96:4e:9d:8a:d4:6d:91:10:40:78:f3:3b:
                    b1:90:32:73:f7:d1:0a:71:f7:bf:20:1d:08:8b:e8:
                    ab:d5:2f:d9:02:ed:23:3f:bd:52:55:ad:39:6a:dd:
                    3c:02:b5:4a:a1:1d:5b:be:4b:e4:5d:74:34:71:da:
                    3a:21:c8:4b:e6:64:20:99:37:f7:50:8f:f7:68:19:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:42:05:5D:24:87:AA:75:80:0A:DA:6A:E7:23:5F:C7:C6:1F:F3:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfdca7e4-9ce1-321f-b6b2-1f122ce24c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:86:fd:fb:87:14:3c:15:86:34:bc:d3:1b:e2:73:99:d9:38:
         90:21:9b:78:75:47:53:4f:c4:1f:ac:27:29:3b:90:72:03:11:
         a8:3e:55:53:cc:6e:b2:b2:c9:7e:01:26:ea:a5:74:8f:29:66:
         26:a2:d5:cc:0c:a1:b8:39:e8:cf:a2:66:1d:e2:68:c4:20:51:
         f5:9b:da:ce:00:00:9b:5c:11:b4:1c:e2:0c:57:0a:d0:c0:0e:
         ff:80:1a:be:df:96:50:97:4d:e5:1a:01:66:f2:df:41:4c:cf:
         f9:3b:38:35:f0:56:ac:34:c3:03:c6:bd:90:99:5f:00:bc:f3:
         28:af:6a:d3:38:88:50:51:39:28:8b:8c:3d:f7:69:bf:0e:ee:
         3c:42:3a:07:d9:92:16:21:66:f2:a2:9f:bf:0c:2b:3e:3f:97:
         f7:78:ec:2e:e3:74:fd:2e:04:08:4d:91:04:49:d6:b7:c7:a0:
         0a:a3:e2:d1:5b:2c:08:f9:89:5b:a5:6f:1e:cb:f0:c3:8b:74:
         bf:6c:06:28:32:49:33:ac:b9:7b:4a:36:1d:e2:54:07:ff:fe:
         fa:20:80:84:78:65:86:e6:dc:d9:4c:a4:c1:e7:86:a1:40:1e:
         12:9b:81:6c:c5:43:e5:12:0a:da:47:39:f6:ac:6a:6e:ea:e7:
         ed:45:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----