Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ab7f0ea8-26b9-3ee3-9668-9809eb5186d2.roa
File:                     ab7f0ea8-26b9-3ee3-9668-9809eb5186d2.roa (raw, json)
Hash identifier:          4LT1vgO90YMbkxoXy5WexMzZ1kd/+uPt9k4QJSo6wnw=
Subject key identifier:   DE:08:19:3B:42:66:7E:35:D8:7A:5C:33:6E:81:62:28:3C:23:56:5A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584908EE4B1CE0570EDE6058F6C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ab7f0ea8-26b9-3ee3-9668-9809eb5186d2.roa
Signing time:             Fri 28 Feb 2025 17:40:25 +0000
ROA not before:           Fri 28 Feb 2025 17:40:25 +0000
ROA not after:            Thu 29 May 2025 16:40:25 +0000
asID:                     834
IP address blocks:        50.114.198.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 03 Mar 2025 18:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:ee:4b:1c:e0:57:0e:de:60:58:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 28 17:40:25 2025 GMT
            Not After : May 29 16:40:25 2025 GMT
        Subject: CN=59f9a5d4-b9fb-4259-8514-abca7d5f4a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1b:f0:28:b5:7a:f4:de:4f:16:33:60:3f:14:
                    0a:f1:67:f0:ba:54:4c:7f:01:a9:9e:aa:8e:24:f4:
                    30:3e:1a:48:ef:90:02:8e:9c:01:6a:94:98:8c:12:
                    7b:9d:d8:83:89:57:79:79:8d:69:3a:62:fd:81:62:
                    00:f5:87:94:13:ec:58:d2:07:14:07:3e:7d:79:c9:
                    b7:03:59:a6:9b:b9:fe:f9:b8:ee:51:6e:26:2d:0c:
                    8f:bb:96:31:4d:db:85:98:0d:b0:bd:b3:9a:c7:b2:
                    da:51:53:8f:83:85:61:b6:ea:6b:dc:29:f8:02:31:
                    49:65:72:a0:56:d3:29:e4:49:2b:f9:bf:d6:c3:cc:
                    a8:39:33:8f:02:8c:fb:16:c8:93:36:0b:2a:f8:72:
                    1a:2f:e0:d2:7c:17:7a:fc:5f:c8:34:57:d3:86:b6:
                    e9:1e:72:bf:05:3a:57:bd:3a:84:92:d2:d1:79:6a:
                    f1:f6:a2:c7:94:f8:6b:d7:1b:87:81:13:e2:b9:b1:
                    0a:d1:61:86:1b:11:2a:cf:a6:21:08:84:60:7f:01:
                    55:50:68:a4:53:5a:b7:d7:6b:c1:3c:ba:d9:24:de:
                    bf:13:e8:a0:7d:9a:cf:e9:71:fd:d7:f2:df:db:15:
                    e7:6e:34:89:b4:d1:29:36:4a:7d:57:b2:5d:f4:d2:
                    53:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:08:19:3B:42:66:7E:35:D8:7A:5C:33:6E:81:62:28:3C:23:56:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ab7f0ea8-26b9-3ee3-9668-9809eb5186d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bd:42:78:21:bb:61:c4:87:99:7a:46:73:11:b7:50:86:68:
         4c:24:9c:9f:8d:84:83:91:04:c8:6f:f3:1a:bb:0b:11:2d:12:
         0a:6c:82:1c:f7:9c:30:cf:fb:12:34:53:6a:11:94:00:bc:a7:
         8c:5f:94:1a:87:ec:38:28:12:36:e3:91:f3:7b:52:39:10:a9:
         ed:7c:51:5a:0c:c6:6f:90:21:77:ff:d0:82:e5:e1:32:61:da:
         49:57:13:c0:9d:c5:01:40:6c:61:77:97:6b:be:62:f6:b4:3a:
         82:44:9b:94:66:42:24:8f:b8:7f:19:23:77:88:5c:a9:c6:d7:
         44:99:19:3f:0d:f7:8b:b8:87:a6:a8:2d:41:17:4b:fa:72:f6:
         8a:4a:97:e9:5a:33:60:6c:e3:1d:9c:fa:67:2f:87:7a:9d:f5:
         e5:2a:3e:ad:aa:81:12:df:d5:6f:f7:57:2a:57:66:b6:5c:f6:
         a2:03:3f:61:6c:55:7f:dd:06:19:bf:66:06:a1:d7:0f:ec:20:
         ec:e6:7a:ba:f3:7b:21:86:0b:f0:bb:d6:6b:64:cd:df:7a:95:
         64:ea:38:40:7b:d2:2c:55:ec:69:25:a2:e6:27:f3:b1:51:90:
         a3:23:24:53:5d:9b:89:4f:13:07:d6:d0:1c:44:20:81:64:cd:
         65:7e:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----