Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eafcde1c-3ffa-351b-ae48-bd9d45dc266c.roa
File:                     eafcde1c-3ffa-351b-ae48-bd9d45dc266c.roa (raw, json)
Hash identifier:          vJgjtolHf2NRP5BsZi7EK9xd3mnZY2dJj+c9jYQEoeQ=
Subject key identifier:   35:3B:35:10:48:96:F6:6E:4B:52:D4:BD:EA:08:A8:51:1F:65:40:CF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858489F218A05D92678CB265DC800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eafcde1c-3ffa-351b-ae48-bd9d45dc266c.roa
Signing time:             Tue 21 Jan 2025 20:08:00 +0000
ROA not before:           Tue 21 Jan 2025 20:08:00 +0000
ROA not after:            Mon 21 Apr 2025 19:08:00 +0000
asID:                     401152
IP address blocks:        50.114.112.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 28 Jan 2025 00:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:21:8a:05:d9:26:78:cb:26:5d:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 21 20:08:00 2025 GMT
            Not After : Apr 21 19:08:00 2025 GMT
        Subject: CN=4dd4047c-3865-4d2b-9dd9-47ef63156c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:67:54:11:ed:39:04:d1:78:a3:90:d4:64:
                    0f:fc:88:1e:ad:10:d8:04:40:87:4d:fd:dd:97:dc:
                    3c:72:10:13:c2:0b:d6:c2:c4:ec:0c:23:56:e3:92:
                    84:74:01:63:69:b3:bf:c2:13:b4:81:89:41:93:2e:
                    9b:d8:6e:0f:b9:0b:b7:7f:26:d9:26:9b:a1:7f:5e:
                    d6:19:cd:28:ab:29:59:68:9b:92:2f:2e:82:96:9e:
                    52:2c:67:f2:95:9e:fb:40:7d:6c:73:4f:85:3d:df:
                    cd:63:e2:c7:c1:10:24:6e:1a:86:c3:ee:ed:45:21:
                    d8:37:b7:32:75:bc:1f:7d:39:31:4a:9d:0d:0b:28:
                    ad:f5:16:71:00:21:0b:6d:54:7e:b0:15:6f:b0:0a:
                    df:a7:7a:ef:64:5c:62:e4:5b:1c:1b:92:f5:a2:26:
                    a6:b6:12:41:23:4f:6b:9f:95:a0:30:f5:51:b1:0d:
                    24:89:00:fa:a0:98:41:48:eb:63:d8:23:4e:15:3d:
                    b9:d7:46:52:a4:f4:a1:b1:f6:45:dd:00:36:12:aa:
                    dd:38:e4:72:e8:36:e8:b7:db:c0:a6:93:76:fa:d3:
                    88:bf:11:8f:cb:b5:1f:02:f5:a1:5b:d8:8f:81:1f:
                    f0:d4:7a:fd:cb:55:58:4a:88:3f:83:b3:7a:51:82:
                    f9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3B:35:10:48:96:F6:6E:4B:52:D4:BD:EA:08:A8:51:1F:65:40:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eafcde1c-3ffa-351b-ae48-bd9d45dc266c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:51:2f:e1:46:42:8c:7b:ea:13:2b:5b:21:e8:8d:41:3c:d9:
         06:f9:e8:23:d2:1a:bc:3d:08:3b:38:d7:14:e4:d4:d7:89:a7:
         6d:33:6f:f9:05:78:0f:3a:9a:32:ab:de:4b:3e:39:56:97:d2:
         44:74:fe:2a:45:47:aa:6f:cc:4e:c2:65:53:ef:7e:6e:b3:c9:
         f3:1e:a3:7f:32:72:79:0f:73:83:7d:5c:26:80:df:7b:04:56:
         30:9c:ba:39:4c:1a:99:59:b9:1f:c0:18:f9:7b:4d:b5:04:25:
         72:73:6f:93:c2:f5:ae:c4:ed:27:4a:34:3a:3d:76:59:e9:0b:
         92:db:75:16:16:dd:0d:17:50:40:3c:2e:41:3c:c9:52:04:50:
         ef:d0:3f:c8:06:05:3f:dd:63:fd:36:96:43:13:a2:c6:92:e8:
         72:a5:77:82:6c:28:19:fb:a5:2c:6f:e4:f6:fd:7f:f1:46:54:
         a5:9b:70:5f:b6:49:55:1b:24:29:a3:c6:78:d3:6d:df:0e:92:
         eb:fe:e4:2f:6d:8a:65:c4:44:ee:d4:bd:19:db:6a:9d:4b:19:
         10:ca:bd:38:e0:90:08:4f:16:41:d8:03:a2:94:c4:cc:bf:c8:
         0a:a7:6e:b2:84:9f:5e:61:17:8b:5c:4d:ee:5e:46:3d:78:a0:
         db:5f:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:31 2025 by rpki-client