Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d076339e-81d4-3e4c-b821-6b2fab1e9cc5.roa
File:                     d076339e-81d4-3e4c-b821-6b2fab1e9cc5.roa (raw, json)
Hash identifier:          csRNcn18Vanm7IlcJ/pXR5iDmpXHrlLp2DFX1PX2OKM=
Subject key identifier:   33:2C:A6:95:98:E8:04:57:15:DE:95:28:19:58:AF:2F:C9:E7:11:1E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285840D24688FDBC3CD1C2AFF8B480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d076339e-81d4-3e4c-b821-6b2fab1e9cc5.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 11 May 2025 04:00:00 +0000
asID:                     398465
IP address blocks:        50.114.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d2:46:88:fd:bc:3c:d1:c2:af:f8:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : May 11 04:00:00 2025 GMT
        Subject: CN=49a67d3a-e450-420a-b5b0-e4f0aa3d5dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:e8:54:ab:3a:fe:d4:37:d3:10:4a:d2:4a:
                    c0:1a:9c:0c:44:9e:c5:3b:d4:65:94:6a:bc:ae:0a:
                    d2:55:67:80:25:c6:2a:50:cc:de:11:50:b2:e0:ce:
                    a4:b1:b8:ed:b5:38:f9:22:83:ae:8c:8b:91:00:5a:
                    c4:f7:72:a0:50:12:85:1b:35:8a:ef:52:f7:2d:8c:
                    e1:a0:7c:ac:17:ec:36:29:3e:cd:9a:aa:86:fb:5e:
                    3f:f2:2b:a3:d5:41:1b:ef:6e:c8:49:a6:34:aa:1a:
                    e5:8d:45:bb:28:b9:ce:e8:70:f4:f8:41:95:58:6d:
                    d0:82:bc:ed:1b:19:4c:07:fc:3b:a4:d5:0b:0f:88:
                    7b:ec:ed:9d:bd:82:4e:24:40:b9:25:a5:1d:d3:28:
                    0d:fc:d0:ae:d0:a1:b2:db:a8:8f:de:71:5b:3c:69:
                    76:e1:9d:68:7c:05:fd:5a:7e:11:4a:b3:96:76:fa:
                    b7:bf:d7:eb:ff:b6:83:31:37:7a:6b:c7:9c:d1:4c:
                    22:22:9a:27:fc:3e:04:ad:77:23:c5:9c:56:a7:75:
                    c3:45:d6:bb:c7:5f:6b:ab:db:a8:d3:83:11:30:04:
                    70:48:c4:d5:96:98:3f:cf:46:93:3e:a0:98:bb:23:
                    d6:2b:5a:b0:24:73:31:e0:ec:1b:1b:be:46:83:84:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2C:A6:95:98:E8:04:57:15:DE:95:28:19:58:AF:2F:C9:E7:11:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d076339e-81d4-3e4c-b821-6b2fab1e9cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f6:61:52:11:42:9e:a5:d2:cd:25:cc:15:bd:fd:6e:af:5b:
         0d:7e:89:9c:c3:e9:fe:a6:c4:6c:a2:a1:aa:3c:ea:c5:59:bc:
         3b:08:71:69:60:0d:30:71:67:07:d6:31:9e:bd:4e:0d:e1:5a:
         d1:6e:1c:99:52:8c:90:d7:6d:63:ab:03:14:ea:da:d4:11:ff:
         96:28:47:e1:be:cb:f7:14:4a:36:40:20:95:ff:13:cf:4c:ed:
         fb:7e:28:3d:38:f1:47:bb:95:76:2a:2b:65:67:0b:5b:e2:e8:
         fd:cc:90:24:ed:69:b8:ee:a5:2c:87:e9:6f:22:f6:3e:33:29:
         2a:a4:ed:1a:87:1a:27:87:74:e6:ac:c7:f9:ac:ba:9f:f9:da:
         c1:11:b0:f9:40:fa:7d:4a:73:b0:aa:a5:ac:25:f4:3a:84:ff:
         db:d3:a1:88:91:ea:4d:06:d5:e0:58:a7:1a:81:bb:12:f3:87:
         b4:fd:75:b9:16:1b:2e:48:79:ec:b3:ce:b7:94:c7:65:f8:c8:
         f6:11:8c:56:c5:76:c4:15:80:fe:ca:0c:d6:1a:21:f3:4b:59:
         03:f5:17:c8:93:ca:35:c3:c7:9e:2f:be:f4:3f:92:4d:c5:47:
         9c:60:08:dd:f0:cd:14:43:00:ff:d3:fa:a9:3e:da:fd:2f:e8:
         e1:b6:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----