Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/21284d0e-b04e-4e91-8aca-997fc85cb228.roa
File:                     21284d0e-b04e-4e91-8aca-997fc85cb228.roa (raw, json)
Hash identifier:          6NdLw/zqRElVR39ugr8HB8oBQfeYMZ1mqOL4F8TMbGo=
Subject key identifier:   CB:1D:61:50:DF:37:94:F7:A8:DE:75:16:64:A9:D9:CE:A1:84:4E:69
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       69E82C181897DE65EBC091D7BFC626D5023BBFE7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/21284d0e-b04e-4e91-8aca-997fc85cb228.roa
Signing time:             Sat 18 May 2024 00:00:00 +0000
ROA not before:           Sat 18 May 2024 00:00:00 +0000
ROA not after:            Sat 22 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 18 May 2024 07:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e8:2c:18:18:97:de:65:eb:c0:91:d7:bf:c6:26:d5:02:3b:bf:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 18 00:00:00 2024 GMT
            Not After : Jun 22 23:59:59 2024 GMT
        Subject: serialNumber=996317db78c5a28da80d074c10ed007b4daa5f8956d86a361118ca0632f041b8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e8:ba:32:16:f3:57:ec:5a:fc:af:09:72:57:
                    7d:f5:dd:70:63:dd:a8:8f:cb:96:fd:a3:14:54:b4:
                    17:60:2d:cf:d7:62:68:98:04:fc:c0:b0:00:10:b9:
                    e5:dd:f5:10:b5:0e:47:36:6f:8f:86:de:16:6b:a5:
                    68:62:9e:24:f3:d6:29:42:42:c3:97:6d:d4:bc:8c:
                    5c:66:ca:2e:8b:b3:bc:0d:20:60:87:15:9b:3e:a7:
                    67:57:d9:c8:03:4e:0e:88:f3:d0:37:1e:1b:8a:82:
                    12:b8:ec:a4:af:1f:04:95:0b:3b:3e:e0:21:a9:f4:
                    f7:eb:8e:be:30:e8:a4:a8:cb:aa:ef:7c:0f:ff:99:
                    5e:3d:c8:3d:99:22:b3:84:22:a8:b6:f4:bc:37:03:
                    82:35:ec:59:04:1e:79:43:19:ae:b9:f7:8a:2b:0c:
                    4d:7a:cd:9f:b2:a5:48:95:35:c9:35:24:40:c8:24:
                    e7:51:87:ab:0f:a5:1f:e9:76:9a:e6:e9:5e:42:d3:
                    f7:12:87:76:dd:bf:7d:21:87:28:ed:cc:15:6d:61:
                    9d:62:6c:de:56:2a:19:63:73:ab:14:5d:d2:16:69:
                    e5:eb:5e:9b:85:d9:0a:36:7a:9f:61:ad:57:37:60:
                    1b:78:73:f1:76:2b:ea:b8:67:45:f5:fd:67:42:f6:
                    23:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1D:61:50:DF:37:94:F7:A8:DE:75:16:64:A9:D9:CE:A1:84:4E:69
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/21284d0e-b04e-4e91-8aca-997fc85cb228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:95:ca:cb:ee:d5:1b:a2:43:b9:9e:6f:6c:bb:af:82:72:f3:
         8d:25:21:75:36:47:9f:d5:28:c2:91:21:48:25:18:6e:85:d6:
         21:5f:75:0f:9d:b9:0b:17:53:45:20:14:b8:40:4a:f9:ba:84:
         5a:4a:7b:60:e7:30:b5:fe:bf:63:1d:d7:e0:c6:de:dd:d5:3a:
         ee:3a:76:6b:4a:31:bb:48:76:2b:85:6d:c7:84:9e:1f:42:11:
         28:7c:ec:06:86:98:86:14:67:42:3a:2f:68:6b:41:ed:42:74:
         a3:0e:f3:c6:5b:7f:c4:a8:e8:20:1d:44:fd:26:b3:99:3c:63:
         a0:8f:ed:81:d1:b1:e1:1e:db:07:38:cb:48:35:45:4d:b1:6d:
         7d:88:f0:9f:78:3b:ff:17:a0:67:d3:9c:7b:74:10:87:15:b4:
         a8:02:b8:a2:d4:42:bc:29:1c:65:d4:32:fa:09:65:6f:41:23:
         fc:9d:1e:45:4b:cc:b3:cb:6b:cc:8d:55:e9:5a:ae:a4:4b:c5:
         0d:e2:5d:f5:25:f0:fa:1d:ef:3a:cd:c2:1f:54:7e:8d:c9:d7:
         22:10:be:a0:4e:98:eb:d8:e0:93:7b:6a:b1:f0:ca:1f:16:e0:
         92:2b:db:4b:c8:99:dc:b2:5f:db:bd:6d:21:e2:85:ca:f7:39:
         f3:90:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----