Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18f4996b-06e6-4885-9f1c-4a6e3bb2b832.roa
File:                     18f4996b-06e6-4885-9f1c-4a6e3bb2b832.roa (raw, json)
Hash identifier:          5EsjLZsW5ZY33IQWSkIT4ykZ46g9HWXPB+ZuFC5DEqQ=
Subject key identifier:   9E:BD:7B:75:B1:05:23:1F:4C:B6:FD:22:B6:37:F5:96:AB:B4:B3:B1
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2E8AEB12EC06E059EE7C2C11DDB3627204720ECD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18f4996b-06e6-4885-9f1c-4a6e3bb2b832.roa
Signing time:             Sat 13 Jul 2024 00:00:00 +0000
ROA not before:           Sat 13 Jul 2024 00:00:00 +0000
ROA not after:            Sat 17 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 13 Jul 2024 23:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8a:eb:12:ec:06:e0:59:ee:7c:2c:11:dd:b3:62:72:04:72:0e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 13 00:00:00 2024 GMT
            Not After : Aug 17 23:59:59 2024 GMT
        Subject: serialNumber=40cfce254ebee909ee8aeaaf99a8b564c6bd2ed88f379254c3a7fe2426d4fe16, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3e:86:50:f7:83:eb:9f:35:ad:26:c5:14:e3:
                    40:b7:eb:74:b9:4e:29:fe:4b:3a:a6:c9:41:1a:f4:
                    4b:b0:e5:17:82:96:f2:ed:db:06:7d:a0:ab:8d:d1:
                    73:52:3e:e9:b0:3c:d0:d5:f2:68:07:97:a7:16:af:
                    46:b3:f0:73:8b:b0:f7:1e:03:36:eb:f5:b4:4b:f4:
                    9f:8b:ba:1e:4e:1a:0e:cc:12:96:36:55:5a:29:46:
                    73:61:be:27:ba:c4:bf:33:2c:bb:d4:23:f1:93:46:
                    aa:af:62:c2:b1:7e:48:41:a3:49:1a:3b:2e:e5:6f:
                    84:7e:34:85:1d:8b:20:d0:56:85:ae:26:1c:c6:84:
                    2f:41:b4:c4:2a:bf:72:48:0d:54:f4:17:ec:ef:66:
                    c9:82:a1:3f:46:11:a2:ce:62:25:fd:34:ac:20:9c:
                    92:f3:34:28:e2:1e:fe:5b:00:2c:ca:f0:36:90:d7:
                    08:d8:0a:d7:af:77:5f:d9:2f:59:91:ae:51:25:8c:
                    7e:42:24:dd:33:a0:7d:94:1e:8b:5c:1c:71:34:e1:
                    d9:19:d0:7f:19:fa:ba:1e:60:77:8d:d2:cf:65:ff:
                    09:28:9d:21:03:5a:d3:e7:33:40:16:3e:a1:c5:79:
                    22:20:35:78:f9:7c:f8:ae:e2:55:ff:c8:7d:fe:f7:
                    76:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BD:7B:75:B1:05:23:1F:4C:B6:FD:22:B6:37:F5:96:AB:B4:B3:B1
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18f4996b-06e6-4885-9f1c-4a6e3bb2b832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:4f:4c:da:b1:7d:46:9e:3d:a7:f9:ed:92:fa:c9:f8:25:
         37:34:08:2b:f9:14:0d:da:54:53:05:4d:01:88:37:d1:08:fc:
         ff:7d:41:89:1f:07:ba:2a:20:d7:ac:54:f1:32:da:59:f6:df:
         59:d8:5e:1f:5a:c5:e0:46:c1:5e:63:51:8d:6f:b6:56:04:a3:
         07:a8:9e:52:1c:c1:b7:cf:25:75:9e:ee:f9:38:18:11:cf:14:
         c8:c0:45:ce:e0:88:8e:9e:c6:7d:fb:86:e5:d1:8a:a8:02:c7:
         97:f5:8e:02:55:5d:26:82:66:8a:be:e4:4e:70:21:8d:63:26:
         63:4a:de:f1:ef:55:b0:dc:0e:bc:62:e5:f7:93:1a:08:09:c6:
         df:2c:8f:e4:83:e3:db:17:86:fe:66:dc:1f:6a:bc:46:fa:56:
         5b:e3:1f:57:60:c9:cc:82:f0:d3:1c:e0:87:db:e3:ba:69:bb:
         12:65:f1:ee:b8:69:fc:10:59:4b:79:f7:cc:ef:27:22:c8:4d:
         0a:43:43:fe:10:9c:16:84:ef:89:cb:ca:8b:f8:97:36:39:94:
         4e:14:4e:67:06:21:a8:31:21:b9:2f:e9:74:f7:a0:52:2a:f6:
         e7:dc:7d:c9:ec:0f:3f:14:00:e9:74:6e:68:d9:86:10:92:91:
         ee:a1:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----