Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dcb79779-9f5e-37d4-a26d-76cd331ad37d.roa
File:                     dcb79779-9f5e-37d4-a26d-76cd331ad37d.roa (raw, json)
Hash identifier:          j5iH7gF+RfF0SldEXBjWg5JkQdClxeG/QZW5gdpCLq4=
Subject key identifier:   4A:7E:30:CE:7A:E8:E5:10:E1:AD:1D:18:CD:A1:28:02:6F:20:90:DF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848AFA4233D603F73CD6A1F3900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dcb79779-9f5e-37d4-a26d-76cd331ad37d.roa
Signing time:             Mon 27 Jan 2025 18:04:04 +0000
ROA not before:           Mon 27 Jan 2025 18:04:04 +0000
ROA not after:            Sun 27 Apr 2025 17:04:04 +0000
asID:                     11798
IP address blocks:        50.114.35.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 28 Jan 2025 21:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:a4:23:3d:60:3f:73:cd:6a:1f:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 27 18:04:04 2025 GMT
            Not After : Apr 27 17:04:04 2025 GMT
        Subject: CN=05122d07-0ed6-4641-a48b-58fe00e15dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:d3:16:21:96:8c:63:ad:20:bc:df:3e:1d:
                    80:e6:c4:5f:56:b2:e8:28:df:d8:bf:46:ab:ba:fc:
                    4b:2e:dd:b7:01:98:84:29:2a:b2:89:00:ef:dd:50:
                    16:ef:a3:01:70:ed:b1:33:3a:cd:ca:2b:db:be:91:
                    c7:04:5d:94:74:52:31:5f:90:d7:8e:b0:26:ea:63:
                    4e:39:72:f7:36:65:d3:d4:bd:af:8f:5a:b5:e9:81:
                    c4:56:16:18:5c:b5:3f:ff:9c:7a:e8:6e:fd:01:15:
                    25:9a:ea:9e:7b:67:76:5a:e0:a9:ba:a2:8d:2d:ef:
                    46:22:9c:12:c4:27:87:88:8a:e6:c6:33:4b:52:0e:
                    72:cb:15:ec:18:33:0c:84:f9:da:99:83:e9:20:0f:
                    8d:22:cb:30:5c:91:57:e4:84:8b:b9:e1:02:d7:71:
                    7b:7a:79:ac:28:b3:50:30:69:5d:0c:96:d0:a6:6f:
                    c6:72:a3:14:10:5f:7a:48:d2:7a:78:d7:6a:19:0b:
                    95:6a:b4:ef:a6:96:e9:7e:2a:8a:d8:e6:24:96:e0:
                    e0:07:f5:e9:b2:c9:60:a4:64:ff:80:9d:87:ee:ef:
                    cd:ec:51:ca:bb:f7:c2:d8:d7:09:12:52:7c:50:1b:
                    a1:7a:3b:4f:2f:74:67:a7:26:b1:63:60:34:32:a1:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7E:30:CE:7A:E8:E5:10:E1:AD:1D:18:CD:A1:28:02:6F:20:90:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dcb79779-9f5e-37d4-a26d-76cd331ad37d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:97:04:1c:1d:f9:88:51:c2:6c:2d:f6:52:b7:a2:5b:cd:d9:
         2b:20:ce:3b:b9:58:ef:db:cf:6a:51:2f:45:3a:2c:15:a0:1e:
         5e:e2:03:49:5d:59:08:e0:30:fe:11:1c:b0:88:ce:86:bc:ea:
         a8:8f:ba:c0:6b:0a:88:10:72:f3:ea:c2:c0:82:0f:5c:dd:95:
         44:54:a2:ac:0a:c7:f0:88:f1:6d:83:94:c3:83:aa:9d:53:8b:
         ef:06:6a:9b:50:de:be:a9:aa:46:bf:6a:87:b3:32:61:9b:63:
         99:ed:30:d6:cc:b0:3a:d7:5b:0b:a5:cf:19:f3:4a:b0:b1:e3:
         21:4b:52:0d:e5:41:2b:22:3f:d4:53:7a:3e:f7:3e:23:57:b5:
         88:88:6e:b4:d2:14:00:f4:97:90:fc:e8:82:09:4c:40:87:a7:
         a6:8d:99:a4:f9:b3:c0:36:d9:a2:98:e5:e4:b6:96:2c:59:1f:
         6d:72:c8:75:d7:f9:68:c2:ff:31:85:34:2e:b9:ff:2d:fe:c8:
         4f:d1:c0:a4:27:0b:32:45:44:5d:14:c2:6b:2b:4e:57:c5:a0:
         f4:7f:89:aa:e9:a7:2e:41:92:a6:53:9e:65:a4:35:f6:d3:49:
         30:f2:65:e7:95:45:1d:0c:49:21:a2:b9:00:af:bb:81:aa:10:
         84:ec:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:09:32 2025 by rpki-client