Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c89af37-7477-3689-9c96-7eacbf391339.roa
File:                     6c89af37-7477-3689-9c96-7eacbf391339.roa (raw, json)
Hash identifier:          /x0XpiyvVdflC05b6TzvoverOKidoNo/QdDl6IlrIOU=
Subject key identifier:   A1:F0:7D:F0:06:F7:DA:DF:7E:4E:43:20:43:44:EE:56:1A:A1:73:68
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842BAC3EE19F8A6B272F7D3E700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c89af37-7477-3689-9c96-7eacbf391339.roa
Signing time:             Mon 31 Jul 2023 13:00:18 +0000
ROA not before:           Mon 31 Jul 2023 13:00:18 +0000
ROA not after:            Sun 29 Oct 2023 13:00:18 +0000
asID:                     61317
IP address blocks:        50.114.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ba:c3:ee:19:f8:a6:b2:72:f7:d3:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 31 13:00:18 2023 GMT
            Not After : Oct 29 13:00:18 2023 GMT
        Subject: CN=c06e5283-6ea3-4a32-b842-defe8b53d6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:9e:68:32:f9:36:00:59:0b:f7:7c:e0:82:
                    f2:c5:96:2d:18:0d:0c:8b:09:c0:9e:d4:97:ad:d3:
                    6b:f1:3e:8e:43:89:72:f1:e0:b5:06:62:b1:3d:2f:
                    77:9b:ac:eb:7c:6e:d8:1a:9a:7e:a0:d9:ca:f3:ce:
                    dd:a8:22:fd:d0:88:60:cd:f9:f4:6f:19:7a:7f:da:
                    04:fa:d0:0e:2c:d7:08:a4:08:33:1f:ec:2d:97:cc:
                    e2:dc:a7:f1:2f:2a:26:44:4c:d2:82:b3:56:ee:52:
                    e6:64:4a:10:bb:b2:d7:34:2a:29:65:0e:bf:05:6e:
                    b1:09:4c:66:ac:e1:22:b0:53:c9:91:6f:91:4d:05:
                    97:04:ef:47:4d:ac:49:c8:ef:86:de:0b:1c:ab:b8:
                    07:f9:b2:ae:8b:4d:ce:7a:e8:cc:64:b6:fe:5e:91:
                    0b:98:1b:0b:24:cd:ce:57:57:f7:37:03:8a:b0:ce:
                    7f:cc:20:93:c3:13:32:39:66:87:17:0d:2d:62:97:
                    94:e6:43:b3:79:c1:14:ca:44:39:20:6c:47:b9:99:
                    61:24:36:53:03:fc:a9:44:8f:d7:57:02:7f:9b:cb:
                    d9:cb:47:4d:b2:06:19:cf:32:60:50:0b:57:06:3b:
                    fb:92:19:65:e1:55:98:87:98:1b:b2:8d:81:53:e0:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F0:7D:F0:06:F7:DA:DF:7E:4E:43:20:43:44:EE:56:1A:A1:73:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c89af37-7477-3689-9c96-7eacbf391339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:07:2e:8b:72:b9:d2:88:b3:9c:54:86:b5:3c:61:0b:bb:05:
         a9:4a:a6:3e:ff:06:ba:f7:b4:a7:f1:70:d0:9e:39:98:8a:ad:
         26:4f:68:60:f5:31:70:1f:76:d3:b8:01:6d:40:57:f6:da:aa:
         49:95:c2:15:82:d8:0b:82:39:e8:4c:4e:26:1b:cb:30:b1:ac:
         de:96:ec:8c:38:f3:a9:e4:af:61:ab:5a:78:1f:dd:12:06:c8:
         c9:ae:57:ac:d4:0c:9f:a9:7a:a5:4d:e1:06:59:f6:e4:f0:d6:
         7a:c1:b2:c6:7b:82:d0:cc:1b:55:41:ce:de:d5:18:2d:70:e0:
         dd:a4:15:ca:d4:65:e5:33:ea:32:de:fb:59:41:f6:6e:db:3a:
         14:3b:99:84:3d:ff:9e:5e:a9:e4:d7:5b:8b:ff:ff:4c:a3:0f:
         c8:74:b6:7d:87:30:d4:c7:be:ed:20:f2:da:63:b6:6a:f3:94:
         b1:94:5b:f6:13:a2:c3:15:13:8e:af:ec:da:05:7a:1f:20:bd:
         23:95:d6:dd:6e:b3:39:92:9c:99:f3:63:ba:9d:6a:53:bf:38:
         75:54:b8:2c:d8:7c:49:84:b0:f1:f5:bd:db:c6:e0:9d:36:f9:
         fb:7a:1d:06:29:6f:72:98:90:c4:b7:68:4c:48:e6:0c:a8:d6:
         ea:60:76:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----