Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f685486-4c8b-4828-94c8-0d36606edf2a.roa
File:                     1f685486-4c8b-4828-94c8-0d36606edf2a.roa (raw, json)
Hash identifier:          v/QSc5XLYjVyHxbsflPq9s0Xn2UhljW4d9ktbg2iOLY=
Subject key identifier:   F7:7D:87:55:10:3F:AD:B0:04:FC:C8:31:D7:C4:D2:9E:C0:81:0C:40
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2B21FADBEC27CF7B733A95630C1C5FDE7DF046E3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f685486-4c8b-4828-94c8-0d36606edf2a.roa
Signing time:             Tue 11 Jun 2024 00:00:00 +0000
ROA not before:           Tue 11 Jun 2024 00:00:00 +0000
ROA not after:            Tue 16 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 10:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:21:fa:db:ec:27:cf:7b:73:3a:95:63:0c:1c:5f:de:7d:f0:46:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 11 00:00:00 2024 GMT
            Not After : Jul 16 23:59:59 2024 GMT
        Subject: serialNumber=991cfeab3b586839959a70064328a25864212e89266bceacace22cc64564f5bd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:7f:6a:95:03:bc:3f:6d:6d:c6:c6:e8:d1:
                    59:1d:97:b1:b0:60:02:0c:8c:f9:f1:07:e8:1d:5e:
                    f5:5d:dd:e7:0f:70:4b:20:5a:8b:56:df:02:d3:6d:
                    d9:8d:42:4b:d4:4a:54:17:f9:c7:e8:e8:e8:d9:7e:
                    d3:9b:e7:91:9c:22:6c:46:b2:8d:44:1d:fc:e2:46:
                    f3:83:2c:c5:72:7d:1a:de:5f:81:15:7d:88:01:8e:
                    c4:d3:eb:2f:0c:9b:c7:c2:66:2a:dd:85:03:4e:ea:
                    25:4b:de:5b:78:e5:d5:76:1d:fd:48:31:88:66:d2:
                    34:e7:16:67:aa:cb:b8:34:67:6a:37:20:aa:21:2d:
                    68:87:49:76:8d:aa:20:0f:fb:24:39:76:d9:d1:c7:
                    2c:6e:3e:eb:62:7a:70:c7:18:a3:ad:f4:c9:92:5f:
                    4e:45:fe:5f:3a:8b:ea:fe:83:e9:f9:54:0a:f1:d4:
                    7e:52:1c:16:d4:8f:33:f6:75:92:55:e0:0d:ee:6a:
                    14:72:da:c7:bf:aa:0a:c7:2f:24:b0:ce:9e:70:16:
                    6c:00:76:16:62:2f:ad:db:8a:35:58:db:1e:08:57:
                    3a:83:57:a2:cb:21:dc:27:3c:19:77:ea:04:98:c9:
                    3a:23:bc:31:53:92:39:16:6e:39:0f:68:d0:31:d3:
                    ed:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7D:87:55:10:3F:AD:B0:04:FC:C8:31:D7:C4:D2:9E:C0:81:0C:40
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f685486-4c8b-4828-94c8-0d36606edf2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:c5:1d:08:61:4d:1a:d8:a0:47:c6:5a:3d:96:07:98:91:
         57:40:3d:a1:c7:f4:2b:d8:02:85:f4:fb:d9:3c:46:ea:2e:3c:
         f6:2d:93:3b:ed:fe:c3:73:58:b7:59:2a:2c:5d:aa:6a:65:d9:
         fb:f3:da:18:ec:ca:df:55:c6:78:7d:25:74:8d:39:7b:13:76:
         66:3f:44:57:61:b3:c7:a2:cf:86:86:99:2a:d2:a0:f0:16:c4:
         47:33:dc:99:3f:50:8d:46:d8:7c:b6:93:9c:aa:4e:6f:66:eb:
         d2:f7:7c:a1:49:6a:14:8e:85:bb:14:a4:4d:ea:d6:cb:0e:c6:
         a4:95:67:53:82:52:20:aa:fa:6e:6c:97:0b:c2:bf:be:36:46:
         65:b9:22:7b:bf:44:f5:83:78:4b:78:1b:35:2f:2e:6b:e5:fc:
         d4:6e:3f:58:ec:72:75:31:ed:e9:d5:a9:3b:3c:21:94:6b:e2:
         74:dd:de:4d:42:1b:0d:e7:5b:9e:9e:d0:18:c4:be:1d:85:21:
         2f:0c:3d:e1:e0:9a:f4:8c:41:cb:50:63:f3:8d:7e:dd:c6:24:
         93:58:49:07:b2:54:24:38:90:ca:fc:28:59:c2:48:8a:ce:22:
         84:18:a9:94:00:ad:b5:d1:88:de:0d:4c:fc:68:05:49:78:b9:
         b1:6a:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----