Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/62814aed-7aa9-3cc2-a67c-a3de6477719f.roa
File:                     62814aed-7aa9-3cc2-a67c-a3de6477719f.roa (raw, json)
Hash identifier:          OsGnjvG1TnrJvlFjkV4Hz0uTe8wgYFeHBGuvYRFB72Y=
Subject key identifier:   BD:D1:91:01:76:D7:82:5D:98:21:8F:E6:5C:4F:6A:39:1E:30:19:B4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844712F1AE0702F72E96ED99F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/62814aed-7aa9-3cc2-a67c-a3de6477719f.roa
Signing time:             Thu 04 Jan 2024 14:00:21 +0000
ROA not before:           Thu 04 Jan 2024 14:00:21 +0000
ROA not after:            Wed 03 Apr 2024 13:00:21 +0000
asID:                     61317
IP address blocks:        50.114.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 04 Feb 2024 23:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:71:2f:1a:e0:70:2f:72:e9:6e:d9:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan  4 14:00:21 2024 GMT
            Not After : Apr  3 13:00:21 2024 GMT
        Subject: CN=ecbf5aae-ce01-4757-b9ee-b385bad133b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:19:d2:09:a7:9f:1c:37:0b:47:9f:45:4f:
                    28:4a:82:e4:fc:fd:2a:62:d5:07:e7:cc:1b:e1:f5:
                    3f:85:e5:f7:7f:3b:18:1c:15:bd:8b:c2:56:82:43:
                    92:5b:4a:d9:56:f2:73:5d:e8:5d:10:aa:1a:c3:92:
                    0f:02:b5:f7:db:a3:26:e0:8e:03:29:29:9e:5c:1a:
                    75:a4:ae:94:82:fb:3a:7f:5e:db:24:dc:e4:15:eb:
                    db:fd:72:13:e7:28:4e:ff:d1:a8:ec:71:4f:58:7c:
                    00:bf:b2:ff:51:a4:dc:b7:ae:23:86:36:ac:6b:4d:
                    3a:6c:44:bb:0a:d8:b3:6f:4c:46:11:0c:59:fa:90:
                    44:f4:d6:29:9d:40:a0:c1:08:bd:b5:f3:10:f3:e8:
                    0b:89:16:6a:a4:f8:cb:43:6c:39:42:c5:39:74:81:
                    ea:86:ec:cd:80:39:32:dc:e5:a1:f1:3c:07:01:bc:
                    98:74:a0:0e:8a:3e:b2:05:02:36:6e:ee:3d:69:cb:
                    b2:d5:22:8d:e0:49:03:95:64:45:d4:51:14:84:02:
                    97:0d:73:d5:dd:05:85:f1:7b:75:40:6b:26:a2:c6:
                    19:93:29:aa:d5:3c:71:0a:e8:fb:ba:ee:c1:18:f3:
                    d7:71:48:9e:5b:e8:43:2d:d9:10:f6:17:b6:1c:42:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:91:01:76:D7:82:5D:98:21:8F:E6:5C:4F:6A:39:1E:30:19:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/62814aed-7aa9-3cc2-a67c-a3de6477719f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a1:2a:c1:3e:b5:1b:92:47:38:5c:f6:48:3d:bb:2b:14:57:
         1b:c9:dd:f6:c6:ea:c5:6c:1d:94:3d:25:11:5c:59:d5:3d:49:
         bf:d4:82:76:6e:b9:78:bd:dd:2c:a6:04:ac:9f:47:34:8b:c4:
         8c:9f:9d:7f:b6:55:5b:16:f2:ed:06:bf:45:eb:e9:7f:b6:ae:
         5f:e2:55:04:ca:e6:6e:4c:f7:dd:d0:87:7c:a6:9a:96:11:03:
         a7:d0:db:de:23:67:d2:c1:8f:dd:a3:91:8c:65:88:a5:f4:ea:
         0d:5f:04:44:55:45:5f:59:b4:43:90:5e:4f:02:15:d5:34:21:
         73:b2:01:1f:42:0d:14:75:97:56:29:11:c2:a0:cb:7c:91:6c:
         14:30:9f:ab:b5:80:0c:3d:90:b9:83:1f:f3:b4:da:2d:9a:77:
         20:b1:6b:8d:71:dc:e1:64:15:a2:75:8c:39:16:3e:c4:3c:01:
         38:59:d8:f9:57:93:81:14:b5:52:fb:0a:9b:cf:e7:a4:6a:3f:
         39:66:72:95:63:cf:27:ce:f5:b4:f3:ae:a1:86:7b:3d:6c:6a:
         57:45:51:49:f7:75:7c:ea:e6:5c:b2:8a:1b:4c:fb:22:64:e2:
         6e:1b:9b:da:bd:f8:86:d6:2f:3f:71:1a:6b:6f:67:31:5e:7e:
         df:54:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 4 23:48:56 2024 by rpki-client on console-fra.rpki-client.org