Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9f01517-142e-396d-92a1-c5b1cdcfb6aa.roa
File:                     d9f01517-142e-396d-92a1-c5b1cdcfb6aa.roa (raw, json)
Hash identifier:          J0UbjFmojt349cMej4fSqgITjA3wPamG0jSWbRUAl7k=
Subject key identifier:   B0:23:1A:D7:0B:68:6E:81:EE:3A:6F:81:6D:BB:D5:31:6D:E7:E4:E8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583A2044525548FE657106F68BC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9f01517-142e-396d-92a1-c5b1cdcfb6aa.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Tue 05 Sep 2023 04:00:00 +0000
asID:                     61317
IP address blocks:        50.114.32.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:20:44:52:55:48:fe:65:71:06:f6:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Sep  5 04:00:00 2023 GMT
        Subject: CN=6152837e-cec4-4945-8647-c3ee92ff8152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:df:32:3a:08:ef:6b:0f:75:da:0f:ac:14:2e:
                    16:fa:7a:66:1c:cb:25:b3:fd:4e:31:1d:67:fd:f0:
                    46:a4:08:7a:46:dc:1a:10:ff:50:b0:84:48:b9:0f:
                    4e:ea:d3:76:97:c2:41:74:2a:d4:1e:99:45:14:5e:
                    cd:77:44:2e:ce:23:0e:83:93:68:96:d0:48:86:bd:
                    97:b9:cd:1e:ec:54:90:95:05:72:28:00:00:70:ca:
                    a6:53:f7:ef:b7:55:2a:cd:f1:9d:8c:5c:f7:d0:dd:
                    81:8a:a0:6a:85:be:33:15:ba:d1:87:56:9a:91:b0:
                    f2:cb:fb:02:26:56:cd:32:7c:ad:22:a5:63:07:b3:
                    5f:5c:73:94:5c:7d:fa:0d:22:fe:7a:81:29:79:f6:
                    02:df:68:7f:58:b2:0f:44:3c:3e:27:0c:33:9e:ec:
                    02:64:3c:e0:0a:26:50:52:72:83:4c:a3:c1:94:b9:
                    94:aa:74:2f:5b:96:67:93:38:b7:a2:f3:75:67:6f:
                    58:7a:ec:f7:c9:4e:eb:df:90:ca:6e:b1:9c:0e:d6:
                    f2:c3:b0:29:73:d4:32:9a:66:7e:c1:6b:a8:3a:1a:
                    02:f5:13:26:90:0b:21:e5:48:27:f3:06:54:9f:9c:
                    b4:85:64:68:e8:c4:60:69:57:59:30:42:75:60:97:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:23:1A:D7:0B:68:6E:81:EE:3A:6F:81:6D:BB:D5:31:6D:E7:E4:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9f01517-142e-396d-92a1-c5b1cdcfb6aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:e7:7f:4d:5f:72:f0:4d:42:2b:12:13:f7:34:ed:de:30:80:
         7c:26:af:51:28:d1:00:c1:de:25:8f:5b:58:d1:02:f4:3b:f7:
         af:69:e7:76:82:37:9e:c8:c3:01:60:e0:42:24:9e:25:45:ca:
         a5:76:97:2e:14:19:f3:83:29:21:31:34:b7:93:a0:d2:55:f0:
         f7:73:8e:8b:b3:32:d5:a3:67:91:dd:74:57:1a:2c:6b:ff:81:
         71:5a:85:ee:dc:65:d9:4b:85:c0:a7:5a:1c:96:79:55:5e:b0:
         dc:3c:ab:d8:f6:03:5c:ec:81:68:20:2d:25:7e:58:19:3d:1b:
         10:f4:c8:be:ff:0e:4f:32:14:c3:34:c3:48:93:8f:99:75:5f:
         54:27:b5:b6:9c:7e:f1:fc:eb:3b:cd:53:3e:ca:58:ab:a1:99:
         bf:15:51:b5:df:ea:07:d2:c8:3e:95:5b:40:07:e6:8a:95:2a:
         34:43:66:69:18:3c:7e:0a:c6:d2:d6:1b:32:d3:af:62:32:e9:
         86:71:68:54:ac:93:49:44:ac:3d:84:4e:86:e1:8b:1d:23:e1:
         9f:9c:0f:2e:7c:06:3d:c9:73:07:85:3a:af:2e:34:2b:e4:12:
         65:ff:75:6a:38:de:11:aa:44:41:d0:51:2d:75:a0:27:bc:42:
         3e:ed:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----