Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b0be49-fbd8-3e2f-9efa-66d87ab964e1.roa
File:                     d9b0be49-fbd8-3e2f-9efa-66d87ab964e1.roa (raw, json)
Hash identifier:          8UrQi0p2VISKI4dbnpfhbBsu30CElBvA8VGTr5ch4Ew=
Subject key identifier:   0D:74:10:E6:46:60:67:18:71:B4:CA:28:B2:31:41:EA:2D:F9:BA:90
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842EFEB6BC7C77A4037496B71C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b0be49-fbd8-3e2f-9efa-66d87ab964e1.roa
Signing time:             Sat 19 Aug 2023 13:57:48 +0000
ROA not before:           Sat 19 Aug 2023 13:57:48 +0000
ROA not after:            Fri 17 Nov 2023 14:57:48 +0000
asID:                     11798
IP address blocks:        50.114.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ef:eb:6b:c7:c7:7a:40:37:49:6b:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 19 13:57:48 2023 GMT
            Not After : Nov 17 14:57:48 2023 GMT
        Subject: CN=ac37e6ea-9fc8-4030-9b1e-9235c39d4269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dd:0c:73:8d:36:79:f5:72:27:2b:f8:22:ec:
                    ac:f1:bd:0c:f5:d6:57:00:9b:59:83:6f:f9:16:4b:
                    8b:f2:4d:2d:76:d7:e9:e3:e7:30:3c:f6:5f:4b:96:
                    ef:7c:e8:00:14:01:4d:67:11:29:4c:b5:80:e8:a7:
                    b4:8c:d8:e8:01:5c:fc:6a:fe:50:5b:46:dc:4a:93:
                    86:d5:7b:53:c8:51:07:23:14:07:99:84:33:13:49:
                    fa:c2:90:4a:73:30:37:a6:35:fc:6b:38:b0:64:f3:
                    ad:e0:d5:d5:0d:ef:2c:c6:42:db:ff:f4:3c:0c:19:
                    83:ed:53:8e:bc:87:01:d8:31:71:5b:3d:81:a7:d2:
                    1f:fe:a4:9d:e9:4b:65:98:94:fe:96:3a:b6:8c:28:
                    d0:61:6f:16:a9:1f:f5:ce:ed:c1:52:d0:4b:a6:16:
                    4d:49:20:37:a0:2c:5e:d4:0b:73:15:4b:c5:8d:3a:
                    8a:c9:ab:e0:58:c3:8a:cf:31:e8:fa:73:a1:0d:89:
                    5d:61:b4:9c:b0:d4:af:e1:73:08:20:90:6d:77:e4:
                    a8:12:38:6b:25:12:07:e3:90:06:31:49:34:77:23:
                    8e:e0:91:1b:54:4b:72:62:64:66:f7:6b:9d:d0:f8:
                    be:8a:75:9e:d2:a3:df:69:f0:7d:af:a3:b4:9a:c9:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:74:10:E6:46:60:67:18:71:B4:CA:28:B2:31:41:EA:2D:F9:BA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b0be49-fbd8-3e2f-9efa-66d87ab964e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:df:ce:c0:39:af:d7:ad:25:6a:5f:45:55:c5:79:bb:5e:fb:
         c5:b4:bc:51:79:d0:31:d9:34:31:c8:b8:19:ff:5a:b6:7e:a5:
         45:d8:e8:03:27:ae:d8:2e:e2:5c:a5:ad:d6:96:36:6b:6d:05:
         e3:af:90:8a:ab:e5:0b:87:c4:fa:c9:f3:e3:4f:27:41:c5:aa:
         d3:64:6e:af:a6:02:ae:5d:c3:38:fc:07:e4:ec:0c:0e:c7:9a:
         00:41:44:1c:4c:2e:e4:3b:9e:c4:99:52:9a:d2:b0:e8:00:63:
         80:84:17:e2:7c:c5:2d:2a:de:ca:46:75:dc:86:a3:03:10:96:
         20:59:bb:df:9d:f9:e1:16:2c:d5:c3:cd:65:02:47:ff:4f:3e:
         29:3e:31:21:0d:65:51:e9:ea:98:dd:27:e9:2b:03:3f:35:ba:
         7f:82:2f:1e:34:d1:d5:fe:2a:51:ed:9c:84:f3:3d:04:42:e8:
         a4:c8:ed:14:4c:9d:8b:5c:4a:bd:e2:94:60:2d:c0:fa:db:b9:
         34:2c:cb:80:5b:26:bf:09:c6:46:5e:a0:80:10:61:9e:c4:b0:
         8f:10:82:10:22:13:61:8f:1d:9d:bf:a6:be:0e:a1:e9:be:0b:
         ca:a3:db:45:69:99:72:57:22:2b:df:cb:16:7b:79:b4:8d:38:
         72:4d:8b:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELv62vHx3pAN0lrccAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgxOTEzNTc0OFoXDTIzMTExNzE0NTc0OFowLzEtMCsGA1UEAxMk
YWMzN2U2ZWEtOWZjOC00MDMwLTliMWUtOTIzNWMzOWQ0MjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt0Mc402efVyJyv4Iuys8b0M9dZXAJtZg2/5
FkuL8k0tdtfp4+cwPPZfS5bvfOgAFAFNZxEpTLWA6Ke0jNjoAVz8av5QW0bcSpOG
1XtTyFEHIxQHmYQzE0n6wpBKczA3pjX8aziwZPOt4NXVDe8sxkLb//Q8DBmD7VOO
vIcB2DFxWz2Bp9If/qSd6UtlmJT+ljq2jCjQYW8WqR/1zu3BUtBLphZNSSA3oCxe
1AtzFUvFjTqKyavgWMOKzzHo+nOhDYldYbScsNSv4XMIIJBtd+SoEjhrJRIH45AG
MUk0dyOO4JEbVEtyYmRm92ud0Pi+inWe0qPfafB9r6O0msnOOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA10EOZGYGcYcbTKKLIxQeot+bqQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDliMGJlNDktZmJkOC0z
ZTJmLTllZmEtNjZkODdhYjk2NGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnK1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTfzsA5r9etJWpfRVXFebte+8W0vFF50DHZNDHIuBn/WrZ+pUXY6AMn
rtgu4lylrdaWNmttBeOvkIqr5QuHxPrJ8+NPJ0HFqtNkbq+mAq5dwzj8B+TsDA7H
mgBBRBxMLuQ7nsSZUprSsOgAY4CEF+J8xS0q3spGddyGowMQliBZu9+d+eEWLNXD
zWUCR/9PPik+MSENZVHp6pjdJ+krAz81un+CLx400dX+KlHtnITzPQRC6KTI7RRM
nYtcSr3ilGAtwPrbuTQsy4BbJr8JxkZeoIAQYZ7EsI8QghAiE2GPHZ2/pr4Ooem+
C8qj20VpmXJXIivfyxZ7ebSNOHJNi1U=
-----END CERTIFICATE-----