Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6909da9c-2fba-301e-9468-5275d82ff538.roa
File:                     6909da9c-2fba-301e-9468-5275d82ff538.roa (raw, json)
Hash identifier:          yHb9OzOyDUbu/FjJjJzOn9FXFtsdOqgb+F/9bwRmHMY=
Subject key identifier:   91:CE:11:95:20:B7:99:9C:F9:96:8A:57:0E:66:42:5C:48:B4:E3:80
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858494BC0400F11145235FC172940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6909da9c-2fba-301e-9468-5275d82ff538.roa
Signing time:             Mon 24 Mar 2025 16:06:49 +0000
ROA not before:           Mon 24 Mar 2025 16:06:49 +0000
ROA not after:            Sun 22 Jun 2025 16:06:49 +0000
asID:                     834
IP address blocks:        50.114.41.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 24 Mar 2025 22:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:c0:40:0f:11:14:52:35:fc:17:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 24 16:06:49 2025 GMT
            Not After : Jun 22 16:06:49 2025 GMT
        Subject: CN=abd31aae-91a8-4184-8a21-f2b6ec2ef873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:2d:41:d4:9a:40:0f:6c:ab:c2:bc:bd:24:
                    80:46:2f:03:10:e4:ca:e0:cb:95:ea:99:28:55:12:
                    87:91:5a:13:73:c0:75:01:8f:52:0c:05:f6:f4:d3:
                    a1:1d:f3:08:10:77:e6:ee:a9:63:93:8d:7b:b8:86:
                    46:fc:9d:f7:6b:13:7d:e0:6a:97:d9:c3:6e:9e:4b:
                    2e:f8:cf:4f:07:48:7c:1f:94:ad:14:2c:38:5e:e8:
                    84:34:4b:ec:3f:e8:21:e1:4b:b3:93:73:ec:87:8d:
                    f3:6c:43:4c:15:34:f5:a0:6f:de:1b:5a:d2:32:69:
                    7f:91:e3:e1:fc:ed:68:57:1c:72:b2:32:ae:0a:91:
                    c1:d1:6f:80:ad:6d:63:af:fe:c4:ae:54:6f:cf:78:
                    2b:3d:7c:f8:70:26:cc:30:74:b8:8c:27:78:72:58:
                    2c:b4:55:37:31:5f:6a:32:e4:0a:94:b4:90:a8:2c:
                    a2:5b:4e:4e:46:35:c9:c9:b2:be:15:87:a3:c8:5c:
                    91:fa:7b:86:11:d4:03:1d:03:fa:0a:b0:ee:ee:7d:
                    66:71:00:c0:0d:ca:3c:c5:8d:26:77:24:9f:e4:ca:
                    69:92:ed:3b:f9:a8:ec:c2:8d:19:76:2a:18:ec:83:
                    6f:92:3e:7b:f1:54:2a:b5:dc:16:d2:66:e2:29:05:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CE:11:95:20:B7:99:9C:F9:96:8A:57:0E:66:42:5C:48:B4:E3:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6909da9c-2fba-301e-9468-5275d82ff538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b8:b1:1a:42:af:bc:6c:47:0f:cb:f9:e5:a7:58:a8:2a:4b:
         96:8d:e4:90:06:66:4d:70:4b:fd:78:5a:1f:e8:6f:5c:c3:12:
         56:37:40:ab:25:a7:7d:b0:f0:01:07:dc:11:5a:cc:27:7b:31:
         43:5c:5d:68:a4:7c:3a:bb:ad:43:b8:d8:f8:ac:d5:5a:73:88:
         e4:46:07:22:76:06:7d:95:43:3a:89:76:ca:0e:63:8d:57:b0:
         e8:f0:31:9c:02:75:2f:ec:84:75:bc:6f:d7:69:64:1d:4d:cb:
         1d:dd:4d:4f:34:e4:e8:ce:f7:e0:4f:26:8b:5b:12:d4:6d:9f:
         48:64:ba:f1:60:05:19:68:d4:cf:d8:71:66:2b:e2:5f:4b:3b:
         d0:5d:7e:0a:12:49:84:4a:2c:cc:a8:8e:d9:72:5e:a3:c1:45:
         64:51:f9:c0:94:c6:11:ab:9a:25:a4:70:72:74:6f:26:41:c8:
         8a:04:42:2f:b4:07:d6:8e:47:f7:e7:f4:4a:1f:49:ef:a4:20:
         d1:a3:f1:bc:ae:c5:6e:e6:e3:13:8a:64:0c:9a:23:be:f9:76:
         c0:31:7e:24:61:4d:23:33:5f:8b:bb:bb:4b:0f:e7:eb:26:33:
         de:a1:8d:81:da:b7:a4:5c:b8:5b:dc:31:df:62:1d:c8:a5:14:
         30:d8:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----