Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01886d68-5434-42e0-a4aa-a37afc6037f8.roa
File:                     01886d68-5434-42e0-a4aa-a37afc6037f8.roa (raw, json)
Hash identifier:          Rk29yuCIhABhzME8G95JxWzyAbDyHZRbpNxmM808OP4=
Subject key identifier:   22:78:06:B2:0D:63:13:08:DD:E6:8B:4B:85:90:7C:AF:A3:51:ED:78
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4BB92FFF26F9D8E9E6F4DAD35B4D6D8F41DBBB15
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01886d68-5434-42e0-a4aa-a37afc6037f8.roa
Signing time:             Wed 23 Oct 2024 00:00:00 +0000
ROA not before:           Wed 23 Oct 2024 00:00:00 +0000
ROA not after:            Wed 27 Nov 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 20:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b9:2f:ff:26:f9:d8:e9:e6:f4:da:d3:5b:4d:6d:8f:41:db:bb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 23 00:00:00 2024 GMT
            Not After : Nov 27 23:59:59 2024 GMT
        Subject: serialNumber=f855d299149ad83f84839ff34ac0e724f95328a5481b519bc0d9fbeeaef58a53, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f7:e6:be:39:4b:e3:86:60:ab:14:39:15:1f:
                    f7:54:c6:0b:8b:fd:f0:89:32:f8:95:01:5e:f8:9e:
                    89:4a:34:b3:1a:3c:00:5f:46:c9:e6:16:3f:c7:a2:
                    66:97:c0:0f:2b:5d:87:79:00:7b:8b:72:8e:17:bf:
                    2e:eb:ec:c7:97:c9:2f:ac:78:0f:cb:37:f1:a6:8e:
                    cb:a3:76:50:1b:42:ff:85:55:31:29:f2:cc:cf:0d:
                    1b:9a:fd:03:e7:ac:a4:45:8c:87:84:14:25:4a:67:
                    75:9b:c0:a2:89:86:60:5d:e5:e0:d1:b1:97:d4:d2:
                    ca:78:c6:d0:b0:99:b7:3a:40:ee:ec:9f:32:bd:31:
                    cb:43:83:a1:ce:51:16:a6:c5:9a:0c:3a:49:50:dd:
                    9a:94:60:af:0c:a6:b3:2b:69:b4:dd:50:6c:cc:c4:
                    73:9a:69:c6:5c:00:71:d0:86:ae:c9:9d:6a:19:db:
                    5a:a5:ef:18:0c:89:cf:8e:b5:5e:2a:42:72:bd:88:
                    5c:52:f1:9a:ae:99:f6:94:57:47:94:65:e2:af:73:
                    c0:4b:cd:2e:71:0e:21:e4:4e:62:8e:74:40:7b:e7:
                    0b:13:ae:16:9d:dc:45:c2:34:68:13:a3:a1:99:51:
                    d7:74:df:e8:ae:73:61:85:97:16:ff:98:18:c8:db:
                    f8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:06:B2:0D:63:13:08:DD:E6:8B:4B:85:90:7C:AF:A3:51:ED:78
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01886d68-5434-42e0-a4aa-a37afc6037f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:6d:b3:68:88:bc:67:7d:fb:43:81:35:d8:fc:29:77:8a:9f:
         00:d3:92:d4:97:11:c7:8c:e2:5b:cb:16:4c:90:e2:89:ec:b2:
         69:35:da:a1:3e:be:6c:f1:eb:60:e7:06:32:58:14:e4:c0:b4:
         a6:ec:bf:08:c8:cb:46:d0:eb:a3:52:65:9d:d7:ff:6c:c5:6d:
         f9:79:06:c1:b7:f2:6b:e2:df:1b:56:5d:22:57:2d:44:46:0f:
         87:34:b1:16:ac:f4:36:4e:4c:eb:ed:d4:5c:3c:f4:86:10:a4:
         79:78:88:32:d3:2c:c8:a4:c4:5c:cd:d2:1a:8d:17:30:cf:43:
         9e:51:b6:d9:a3:7c:be:bf:26:45:a6:2d:b1:1a:ee:a3:82:36:
         1b:0a:9e:d7:b3:e7:ca:ad:ad:f0:41:60:eb:64:e4:18:85:a6:
         2c:09:09:74:6e:71:35:5b:2e:1f:97:4b:a3:41:18:b4:a4:72:
         f9:12:82:ee:95:5e:96:8d:81:fd:ab:fc:e0:99:1a:9f:74:d5:
         10:4b:8d:b6:75:a9:b2:55:d0:9b:df:75:37:33:09:34:f8:22:
         83:f3:85:9e:7e:0b:94:47:20:3d:9a:0c:2b:ea:e9:d9:ae:3b:
         9a:19:61:97:f4:4e:13:3c:7b:6e:64:d9:48:7f:c8:8a:63:fc:
         bf:be:55:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----