Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07e2be81-9ac2-414b-85f1-66a77729faf1.roa
File:                     07e2be81-9ac2-414b-85f1-66a77729faf1.roa (raw, json)
Hash identifier:          +FEzX7fj0L73hG3c/Zx34RH8DuaE9BQ1fk7ud2ZfcaA=
Subject key identifier:   88:89:96:50:B7:43:6B:74:21:33:9D:58:4A:6A:12:43:90:5A:F9:EA
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       195E5075E4263403D86AD7E9F53A642F6D8C73E1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07e2be81-9ac2-414b-85f1-66a77729faf1.roa
Signing time:             Sat 17 Aug 2024 00:00:00 +0000
ROA not before:           Sat 17 Aug 2024 00:00:00 +0000
ROA not after:            Sat 21 Sep 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 10:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5e:50:75:e4:26:34:03:d8:6a:d7:e9:f5:3a:64:2f:6d:8c:73:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 17 00:00:00 2024 GMT
            Not After : Sep 21 23:59:59 2024 GMT
        Subject: serialNumber=0f9f31b92f15cf468e54d63a4100764f9d2105da0f4be9f508f5dd66b792b983, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a9:72:ce:f0:24:d9:95:ed:8a:ee:79:20:d1:
                    30:13:af:fc:9b:91:9e:6f:3c:9a:1c:bf:d6:60:64:
                    4e:80:23:84:00:41:52:14:92:39:9f:35:82:b6:03:
                    b1:7e:59:45:b0:f7:2b:bb:11:3a:14:e6:ce:6e:c9:
                    03:88:b4:93:3d:f4:b8:e4:01:c3:9e:52:88:53:78:
                    29:83:04:a8:33:97:da:a6:3c:15:9b:f7:01:ac:49:
                    43:47:03:cf:6f:0c:64:85:98:04:fd:c7:49:77:2e:
                    6e:c2:8d:a6:21:f1:e4:95:e7:63:bf:af:c5:5c:f3:
                    94:40:c9:e6:44:f3:d1:6a:4c:16:d2:6f:d8:42:8b:
                    1e:98:73:90:15:4e:e2:fe:32:c6:36:91:bc:f1:73:
                    34:db:27:96:5c:48:30:a8:f0:b0:7a:82:b3:42:9b:
                    67:30:58:2c:2d:0e:8e:a5:c1:61:cb:d7:36:60:db:
                    29:f0:86:38:73:25:27:c3:43:68:c9:62:df:ee:1f:
                    bf:0b:11:c1:0f:c3:22:97:be:aa:b1:28:04:19:17:
                    f1:85:35:66:6d:4e:bf:00:16:68:a5:e3:c0:b2:2a:
                    da:bb:9a:df:3d:28:e3:f7:68:75:55:cc:14:b0:7b:
                    55:a6:b4:33:94:db:0b:f6:9e:40:eb:98:7d:f2:f9:
                    e6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:89:96:50:B7:43:6B:74:21:33:9D:58:4A:6A:12:43:90:5A:F9:EA
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07e2be81-9ac2-414b-85f1-66a77729faf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:30:7c:76:56:8f:eb:e6:18:28:87:86:3d:94:87:b7:b8:39:
         b0:79:10:e3:84:a8:20:6a:5d:7c:3c:7e:de:7b:99:74:e8:7c:
         c9:c5:99:2f:20:a7:81:b9:79:22:54:d8:32:3f:30:c9:a0:57:
         d2:bd:49:31:2f:9c:9e:80:6d:c8:d7:a0:02:ab:63:12:63:67:
         9e:b7:07:e6:9a:ec:6b:7a:dd:db:c1:94:8b:f9:7e:e2:47:30:
         fc:72:c0:f2:0f:ae:f7:a6:03:f0:2b:da:ee:8d:8c:81:e8:c7:
         bd:0e:9b:ef:d8:c9:53:5f:fe:5e:0d:f0:f4:26:24:6b:e8:47:
         78:49:6f:40:1b:49:da:1d:7e:82:a0:fc:c6:d9:3b:86:52:e9:
         74:28:8d:0c:ef:fd:89:e6:23:8d:c6:d4:dc:42:59:aa:54:8b:
         e3:d9:84:13:3d:5c:af:96:66:e6:4e:d5:44:06:d9:e5:f1:1f:
         64:47:db:7a:2f:37:21:01:a1:7b:98:56:b9:5e:a6:f9:5c:b3:
         72:9b:49:14:ed:8e:1f:51:f8:d5:21:bb:36:6e:ac:b6:2d:5c:
         1f:c8:eb:d0:45:7a:65:a5:b0:42:c6:f5:0d:5b:c3:f4:a2:5d:
         63:f1:e8:dd:1a:20:01:2f:98:72:b6:44:0f:af:b2:1d:d0:4d:
         9e:c8:0d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----