Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1a018e0a-2095-4337-88eb-a9a3b7a1577b.roa
File:                     1a018e0a-2095-4337-88eb-a9a3b7a1577b.roa (raw, json)
Hash identifier:          VTedAkHtVK1bzNs5cRzk/qhZ2+LS4DVidZdB5zMaa1s=
Subject key identifier:   0C:F3:EB:AD:6D:A0:E3:F1:E4:BF:75:66:67:88:E9:F2:1A:FB:C7:E9
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       284FCDB4102E06B2905E6B4890E5827759C1B16E
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1a018e0a-2095-4337-88eb-a9a3b7a1577b.roa
Signing time:             Mon 10 Jun 2024 00:00:00 +0000
ROA not before:           Mon 10 Jun 2024 00:00:00 +0000
ROA not after:            Mon 15 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:f02e::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4f:cd:b4:10:2e:06:b2:90:5e:6b:48:90:e5:82:77:59:c1:b1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun 10 00:00:00 2024 GMT
            Not After : Jul 15 23:59:59 2024 GMT
        Subject: serialNumber=6be7f01fa2f398921170504a6b33e3570ca12f295ebf9b7e051557f1ab196178, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:48:96:28:4c:ae:59:ad:b5:85:38:8e:8e:
                    ba:12:ec:e4:7d:dc:96:83:9e:00:e1:57:98:d0:9b:
                    cc:36:db:97:a8:e3:4a:40:33:f4:5a:18:d5:fc:cb:
                    b5:10:77:dd:4b:d7:d5:c7:24:46:55:f4:12:23:1c:
                    36:57:b1:3d:75:66:cc:f1:fc:59:32:ff:f2:a5:76:
                    70:c5:20:fc:96:3f:28:da:e4:e6:bd:eb:c0:9a:f1:
                    99:a0:35:4b:2b:c6:5c:c6:d8:b5:4c:24:02:a3:fd:
                    da:86:a2:11:df:40:a7:76:20:db:24:e1:a5:66:f0:
                    81:41:e2:b2:5f:bc:f7:c6:28:bb:bd:d4:56:ec:ef:
                    6a:9e:b1:df:ae:20:17:e8:0f:00:8c:65:03:75:8a:
                    5f:31:62:5e:7e:6c:d7:fd:3b:ba:bd:1b:1a:41:17:
                    e4:e6:64:32:43:a1:2c:94:ef:b1:ca:d2:ae:10:4e:
                    57:ea:73:9a:9f:0b:fb:d5:32:ac:4d:25:01:cc:7e:
                    90:6e:9d:16:4f:12:3a:a5:c4:3c:bc:17:1c:60:9e:
                    a3:bd:f8:82:4d:0d:e0:98:71:c6:55:48:63:d1:a5:
                    a4:71:1d:27:e3:58:00:6c:c0:25:3d:6e:1f:58:25:
                    6f:a7:97:88:9a:82:b0:e4:56:75:89:a4:62:8d:f5:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F3:EB:AD:6D:A0:E3:F1:E4:BF:75:66:67:88:E9:F2:1A:FB:C7:E9
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1a018e0a-2095-4337-88eb-a9a3b7a1577b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f02e::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:17:9c:23:54:43:de:a2:c0:8e:9d:c1:65:9a:d9:16:48:0b:
         89:41:83:d1:fe:66:a1:9f:ae:f9:2b:96:9d:61:1f:e8:74:91:
         60:97:7b:c4:b6:46:d6:fd:b6:82:39:de:71:0b:92:49:05:09:
         bb:3e:a1:b3:4f:de:d4:7d:9e:01:1a:37:4f:f6:1b:29:1d:18:
         05:5a:06:ae:8b:3d:17:b0:e9:1e:09:38:ca:f2:a4:5c:96:d5:
         04:a9:a7:f0:18:6f:0c:ed:41:3b:42:0e:62:23:e0:17:5a:4f:
         c8:71:be:b8:97:b7:26:7a:28:11:9f:58:58:a4:35:8f:3b:f0:
         7f:4a:5a:e7:05:ac:02:2a:ee:c6:86:01:89:80:d5:af:23:e1:
         45:4f:ec:d8:1c:5b:d6:42:ca:f5:dc:53:76:4f:f3:14:22:49:
         56:84:24:5b:e4:27:24:20:a5:75:69:b2:7b:96:a9:04:f2:52:
         4f:69:df:ab:dc:72:27:b5:f8:fe:ff:14:24:3b:96:15:c2:05:
         08:dd:62:d6:9d:cb:df:22:9d:ce:b9:50:d1:3c:e9:a7:28:3d:
         0d:79:72:b9:6f:a6:e7:10:0c:eb:58:9a:c6:bf:4f:9f:55:ff:
         1a:da:7d:c8:95:56:23:a3:b2:7e:8d:6c:45:6f:81:a6:8a:42:
         69:94:9e:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----