Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a0c6a2a-04fe-4fb8-a716-28629ceca3e9.roa
File:                     9a0c6a2a-04fe-4fb8-a716-28629ceca3e9.roa (raw, json)
Hash identifier:          IEUtyFRQ8lWN8MMVGwNZT5bOBjzIi06IlheUkEAnBkg=
Subject key identifier:   FA:D0:73:05:BA:CA:64:D7:79:1A:E3:C6:8A:6A:B3:3A:54:89:00:35
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       6EDC4F798D74DC861AE49F159D6D0F14EF531AAC
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a0c6a2a-04fe-4fb8-a716-28629ceca3e9.roa
Signing time:             Mon 10 Jun 2024 00:00:00 +0000
ROA not before:           Mon 10 Jun 2024 00:00:00 +0000
ROA not after:            Mon 15 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:f027::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:dc:4f:79:8d:74:dc:86:1a:e4:9f:15:9d:6d:0f:14:ef:53:1a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun 10 00:00:00 2024 GMT
            Not After : Jul 15 23:59:59 2024 GMT
        Subject: serialNumber=2c85bd4deac4fdacd529f4c9ae300f441fc6385f43bb600d2fa72d125d00671b, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:3e:28:ac:22:29:c8:9d:f7:cd:97:71:14:
                    36:ed:99:f0:a4:d2:23:2b:f6:4d:ea:7d:39:8d:c0:
                    a3:f3:a5:1c:0f:f4:f4:e5:8f:20:fc:da:e2:4d:5e:
                    77:b4:87:5b:aa:cd:cf:04:d5:07:05:c7:99:1c:a7:
                    0c:24:26:f8:22:26:56:d8:83:00:ad:32:d3:5c:a1:
                    9a:f0:50:15:82:c0:77:bb:e0:8b:52:55:32:93:0e:
                    fd:2b:63:4f:bf:ef:2f:4e:c2:b4:9c:3c:b3:64:83:
                    53:4d:38:ad:76:1f:be:18:df:87:4c:32:8f:55:4a:
                    66:b4:ff:b8:80:d2:e2:67:6d:11:da:1d:79:8f:8b:
                    d2:82:d2:e8:ec:c2:13:91:58:69:03:93:f0:a8:b0:
                    ea:e7:7f:e6:88:f4:6b:c4:f2:39:d2:9c:fa:01:d2:
                    a1:93:b3:40:d5:02:97:ac:63:f3:13:3a:4d:80:9a:
                    98:57:7e:d0:41:28:69:d1:8a:a8:f9:46:f2:27:77:
                    06:a5:89:9f:da:2c:4c:62:71:dd:3c:4d:40:ff:3f:
                    f1:d7:5c:07:b7:ec:71:f5:6d:c7:0f:10:9d:fe:7f:
                    aa:93:f5:50:51:8b:9c:27:0a:9b:f2:7a:9d:f1:49:
                    71:f1:e2:ef:2a:b0:23:db:88:d3:ef:71:a0:b6:1d:
                    71:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D0:73:05:BA:CA:64:D7:79:1A:E3:C6:8A:6A:B3:3A:54:89:00:35
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a0c6a2a-04fe-4fb8-a716-28629ceca3e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f027::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:bc:e2:d3:bf:a5:1b:7f:f6:98:8e:da:ea:9b:ed:94:ab:93:
         29:a1:95:e9:cb:c7:ae:a2:6e:39:75:20:07:bd:9c:80:29:eb:
         dc:7e:13:1b:67:0e:60:53:fe:1e:b1:f9:d6:ed:0a:0e:97:42:
         06:59:f0:a8:52:a3:83:17:58:7c:c2:c7:b5:b6:15:e1:3e:46:
         e1:dc:4f:57:1c:3a:86:bf:ca:3d:b5:5a:c5:b8:d9:02:f4:3b:
         c2:78:c2:1e:7a:1d:32:3a:f1:ee:c0:30:02:d6:8a:a6:16:c2:
         e7:24:28:31:2e:12:d8:29:b7:6c:14:78:f4:b0:58:2c:70:98:
         3c:24:6e:2d:78:d9:b2:e4:4e:fd:4f:89:1a:66:40:13:25:6f:
         02:a7:87:7e:62:9e:51:0c:10:3e:c8:9c:c6:b4:50:d0:86:4d:
         62:27:eb:0b:3d:69:7c:89:01:38:9d:94:53:c5:2c:bf:3d:5e:
         23:75:70:9e:44:3c:05:e0:da:c2:a3:b6:45:1d:b5:2d:61:4f:
         d0:68:15:6a:c4:6a:6c:c3:37:8b:55:9f:ea:7c:0b:46:dd:b1:
         ec:c9:96:8e:df:f5:67:cc:57:bb:a0:94:c1:be:e9:f6:31:e5:
         87:7b:73:94:51:20:e3:17:84:6f:0b:fc:b0:ca:ad:cf:fc:c9:
         9b:c7:9d:e9
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUbtxPeY103IYa5J8VnW0PFO9TGqwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNjEwMDAwMDAwWhcNMjQwNzE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYzg1YmQ0ZGVhYzRmZGFjZDUyOWY0YzlhZTMwMGY0NDFm
YzYzODVmNDNiYjYwMGQyZmE3MmQxMjVkMDA2NzFiMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzOT4orCIpyJ33zZdxFDbtmfCk0iMr9k3qfTmNwKPzpRwP
9PTljyD82uJNXne0h1uqzc8E1QcFx5kcpwwkJvgiJlbYgwCtMtNcoZrwUBWCwHe7
4ItSVTKTDv0rY0+/7y9OwrScPLNkg1NNOK12H74Y34dMMo9VSma0/7iA0uJnbRHa
HXmPi9KC0ujswhORWGkDk/CosOrnf+aI9GvE8jnSnPoB0qGTs0DVApesY/MTOk2A
mphXftBBKGnRiqj5RvIndwaliZ/aLExicd08TUD/P/HXXAe37HH1bccPEJ3+f6qT
9VBRi5wnCpvyep3xSXHx4u8qsCPbiNPvcaC2HXG9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU+tBzBbrKZNd5GuPGimqzOlSJADUwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzlhMGM2YTJhLTA0ZmUtNGZiOC1hNzE2LTI4NjI5Y2VjYTNlOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzA8CcwDQYJKoZIhvcNAQELBQADggEBAKy84tO/pRt/9piO2uqb7ZSr
kymhlenLx66ibjl1IAe9nIAp69x+ExtnDmBT/h6x+dbtCg6XQgZZ8KhSo4MXWHzC
x7W2FeE+RuHcT1ccOoa/yj21WsW42QL0O8J4wh56HTI68e7AMALWiqYWwuckKDEu
Etgpt2wUePSwWCxwmDwkbi142bLkTv1PiRpmQBMlbwKnh35inlEMED7InMa0UNCG
TWIn6ws9aXyJATidlFPFLL89XiN1cJ5EPAXg2sKjtkUdtS1hT9BoFWrEamzDN4tV
n+p8C0bdsezJlo7f9WfMV7uglMG+6fYx5Yd7c5RRIOMXhG8L/LDKrc/8yZvHnek=
-----END CERTIFICATE-----