Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/42784b77-2b2a-400f-a7af-e8a9fbec19f8.roa
File:                     42784b77-2b2a-400f-a7af-e8a9fbec19f8.roa (raw, json)
Hash identifier:          9pbqZ0XcHWlgMK+wf6bnZgkZ4qyZgH3sXuO4mvrD58E=
Subject key identifier:   44:EE:00:9F:1B:0D:3E:7C:0E:69:88:CB:78:1B:5D:72:AE:5D:F1:3C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5D152A5AA3E4A0E4AB20C017197874B5743B8C66
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/42784b77-2b2a-400f-a7af-e8a9fbec19f8.roa
Signing time:             Fri 07 Jun 2024 00:00:00 +0000
ROA not before:           Fri 07 Jun 2024 00:00:00 +0000
ROA not after:            Fri 12 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:f00c::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 18:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:15:2a:5a:a3:e4:a0:e4:ab:20:c0:17:19:78:74:b5:74:3b:8c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun  7 00:00:00 2024 GMT
            Not After : Jul 12 23:59:59 2024 GMT
        Subject: serialNumber=28673af381c6e1cfa71c07375a00c6726b48af769e33f949a6f8942de440b120, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:e1:20:cc:33:96:02:76:91:04:ca:86:24:
                    1c:3d:d5:99:78:f3:c7:de:6c:5f:7a:08:32:af:41:
                    09:bf:f9:8a:11:f5:18:1b:e3:fd:6c:07:14:b2:cd:
                    f5:97:e0:18:46:2f:d1:f3:fc:3a:4a:80:28:c8:30:
                    8e:c6:ca:08:b7:d2:19:84:90:12:eb:c1:e7:dd:d6:
                    04:8d:92:58:d9:95:51:a2:c0:73:bf:eb:74:bc:18:
                    89:3e:8f:29:40:78:cc:4a:2e:60:44:3b:a1:a5:c4:
                    89:55:41:13:44:61:9e:71:22:07:bf:ab:4b:82:bb:
                    2d:99:4f:c3:f6:4f:5d:66:57:13:b7:bd:c4:97:dd:
                    40:de:1e:b4:c6:fe:eb:7f:cc:81:2c:f4:0b:da:1f:
                    6a:05:90:fd:7f:46:33:de:f5:62:24:38:34:03:32:
                    62:01:67:eb:4f:c0:63:a2:d9:42:aa:fb:3e:b9:2b:
                    57:a2:f2:3e:43:7a:bc:bd:f8:b2:55:8a:20:17:d6:
                    9e:43:45:c8:6a:75:c9:54:c3:60:59:47:14:98:9b:
                    7a:78:d4:28:eb:b5:5d:da:4f:de:53:1f:1c:65:94:
                    14:51:e1:b7:fe:60:ea:e8:93:5d:af:47:91:a2:b5:
                    cf:41:fa:55:27:dc:ff:a3:01:f9:1a:74:a4:9b:ae:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EE:00:9F:1B:0D:3E:7C:0E:69:88:CB:78:1B:5D:72:AE:5D:F1:3C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/42784b77-2b2a-400f-a7af-e8a9fbec19f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f00c::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:a5:25:cb:b4:6a:09:13:53:69:11:4d:c8:93:e4:70:fa:60:
         04:2a:f9:ae:8b:e1:61:0a:4a:42:80:25:58:04:db:0f:dd:4a:
         d9:20:4b:d7:f2:ee:9b:92:f6:66:b9:e3:ff:a7:49:ac:39:a1:
         8f:17:fb:75:4a:19:86:fa:9e:0a:be:d4:3f:4d:18:ab:ea:0a:
         67:1d:84:79:68:28:8d:93:0b:50:84:19:9c:d8:73:da:e6:da:
         0e:0b:7e:61:6b:29:bf:bf:07:12:4c:96:3a:52:af:d5:e2:a5:
         df:a9:f6:68:38:87:f8:cd:a4:3a:aa:6b:1e:d7:c9:ab:81:86:
         3c:11:29:ad:c1:66:99:f6:55:49:cb:cc:17:bc:ac:2b:73:6d:
         c9:e9:c4:b4:d8:0b:c4:ba:80:a7:71:09:25:90:7e:d1:7e:9e:
         fb:5e:bd:cf:28:55:a1:de:32:c4:ef:fe:ad:42:78:5d:0f:69:
         45:7f:fb:fb:8c:0f:52:6a:d8:3c:11:14:57:4b:da:29:fa:3d:
         ef:12:3b:af:d2:b3:d1:56:66:70:c1:53:c7:9b:44:29:7c:43:
         00:b4:da:bf:a9:2b:57:67:e4:7c:f6:09:67:28:43:2e:2f:5f:
         19:d5:de:47:ba:9a:e7:47:e3:68:64:e2:aa:bf:79:e2:4b:94:
         10:99:9b:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----