Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd357534-a397-396f-be47-2776dc952378.roa
File:                     fd357534-a397-396f-be47-2776dc952378.roa (raw, json)
Hash identifier:          H4cQGjsRHDpbtp7OIODK1dRPDEAC347NDzjz0jq5Dxg=
Subject key identifier:   D8:EB:D1:01:0F:04:28:2B:57:BE:B0:D5:C1:F1:A4:B2:2E:00:C9:DC
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584472BE7AF2F0281A3C8D5AA700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd357534-a397-396f-be47-2776dc952378.roa
Signing time:             Fri 05 Jan 2024 03:25:05 +0000
ROA not before:           Fri 05 Jan 2024 03:25:05 +0000
ROA not after:            Thu 04 Apr 2024 02:25:05 +0000
asID:                     7029
IP address blocks:        50.96.186.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 21:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:be:7a:f2:f0:28:1a:3c:8d:5a:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan  5 03:25:05 2024 GMT
            Not After : Apr  4 02:25:05 2024 GMT
        Subject: CN=20aac576-9f57-46ab-a2d2-bd2b1ee5eb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:04:d9:6b:a2:e6:15:f0:87:37:c8:fd:fd:
                    74:e5:76:3a:02:bf:9d:7a:fc:43:dd:4a:db:4c:07:
                    9f:1e:75:15:b2:76:93:6c:cb:9b:88:4f:cb:d6:60:
                    b7:8a:7d:14:5d:1c:61:09:a7:ff:52:39:15:c6:b6:
                    55:73:0f:09:90:d2:f6:09:0c:65:02:9c:4f:23:5a:
                    fa:05:a3:c6:a5:85:d0:55:16:4a:d2:1b:92:36:14:
                    0e:de:90:77:80:f3:51:78:64:90:cb:b2:4f:d7:05:
                    23:47:60:40:da:22:c4:f1:8c:bd:29:40:ce:35:16:
                    0f:3f:f7:38:bb:c4:a7:83:a8:c9:0f:a6:c2:a9:08:
                    1f:60:0a:40:b6:ba:0e:2f:d7:31:27:10:99:33:a9:
                    77:8b:ed:98:56:45:a3:ed:6f:e3:d5:1b:b1:da:da:
                    d3:b7:0b:71:40:8d:08:aa:92:39:cb:c1:77:b9:aa:
                    f7:7c:c5:a4:f6:06:ae:3b:b9:99:fe:43:55:a0:7c:
                    79:5d:37:86:1c:ba:f9:f9:a3:ce:cf:b4:0e:86:ff:
                    1c:d1:26:f1:eb:6b:b1:3e:df:4b:fa:75:1a:a8:84:
                    37:76:b3:ba:6b:01:5b:0d:29:c1:e7:53:d2:d5:16:
                    cb:46:9c:7f:05:17:a9:50:21:30:db:0b:bd:aa:b2:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EB:D1:01:0F:04:28:2B:57:BE:B0:D5:C1:F1:A4:B2:2E:00:C9:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd357534-a397-396f-be47-2776dc952378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:5b:4b:bc:c4:ec:a0:d7:d7:dd:d9:fc:b2:01:8c:fc:8f:3a:
         71:e2:7c:57:27:a2:3b:fc:1d:3e:ab:c2:2c:59:99:45:95:c4:
         cc:d6:49:c8:7a:c1:75:f7:13:80:63:be:b6:90:21:64:1d:02:
         b7:fa:e7:cb:a6:4d:f4:d1:30:d1:c8:12:3f:73:a3:58:62:4c:
         37:b1:25:a5:2a:c0:34:87:5f:0a:6f:1e:d6:3b:a6:cf:29:bc:
         50:52:f8:d0:27:ae:ac:ce:98:f7:67:ef:82:b0:06:b4:cd:fd:
         0c:59:20:7a:c3:e4:b9:fe:32:a1:e2:00:4b:ed:65:8c:90:20:
         6b:7f:a4:df:11:9a:b0:62:0e:35:4d:09:f8:cd:0f:0a:e6:d0:
         ba:1e:4e:0c:a3:4f:7e:d2:82:29:a9:6a:b6:19:74:09:90:c3:
         87:e8:f7:50:a4:cf:9d:1a:a5:40:9e:0c:c3:f8:b6:30:01:3c:
         0b:c3:09:40:c5:f5:8a:2b:8d:f7:5e:5b:f0:5d:35:c3:62:0d:
         59:93:c6:51:13:d0:2b:3a:38:bd:d9:63:9e:7a:db:2d:d1:fb:
         c3:b9:72:9b:ec:5d:68:d9:23:9d:2d:27:a2:01:0d:29:26:3c:
         41:e4:f1:f6:fd:6d:84:44:e4:1b:47:c1:e4:d6:1c:7b:14:0f:
         d7:00:0d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 01:43:33 2024 by rpki-client on console-fra.rpki-client.org