Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/369fd4c3-30e9-422f-b831-63aa3e0941cb.roa
File:                     369fd4c3-30e9-422f-b831-63aa3e0941cb.roa (raw, json)
Hash identifier:          BmJ62xVuZ3qSYI76JyJBu3LOypPeoznrCTHa1kPu/+Q=
Subject key identifier:   16:F0:6A:C1:CD:61:1E:3A:F6:EC:CA:10:A3:3C:D5:81:BF:EC:F8:38
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2F03324D940A2477994E6872AD268676B3E87522
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/369fd4c3-30e9-422f-b831-63aa3e0941cb.roa
Signing time:             Tue 15 Oct 2024 00:00:00 +0000
ROA not before:           Tue 15 Oct 2024 00:00:00 +0000
ROA not after:            Tue 19 Nov 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 07:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:03:32:4d:94:0a:24:77:99:4e:68:72:ad:26:86:76:b3:e8:75:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 15 00:00:00 2024 GMT
            Not After : Nov 19 23:59:59 2024 GMT
        Subject: serialNumber=89e4437169561c88089c8fed44dac476ee97c72225733d2bf48865a8c7e690c3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:ac:b2:df:d2:d8:53:ec:b6:fe:5a:df:13:
                    ab:f9:9a:97:30:36:3a:7c:19:fa:f0:09:78:4e:d2:
                    fe:c8:05:db:b9:0a:58:a0:c9:66:23:4d:97:15:69:
                    eb:09:48:0c:c7:46:a1:4f:c6:f1:a5:a9:0f:95:75:
                    ee:a7:a5:68:ca:95:23:83:9a:8f:6f:e4:5e:25:2f:
                    83:1e:e4:50:a7:2c:4c:fa:4a:60:d6:87:79:aa:49:
                    6f:97:54:03:cf:ad:7d:a6:e2:98:3a:07:97:b5:1b:
                    ff:89:42:45:55:12:65:f7:f3:15:8e:d6:75:1a:f9:
                    8b:96:ea:a4:4f:bb:66:2b:1d:6c:0d:2e:88:54:83:
                    e0:16:b0:91:e4:8a:30:da:82:8e:6f:b2:cf:d5:d7:
                    b6:09:af:0d:1b:11:0a:e3:77:19:07:aa:bb:a5:33:
                    93:6d:16:e2:41:cd:79:9e:b2:ca:91:64:61:6b:e3:
                    4c:2b:00:72:ab:94:38:da:cb:12:24:bf:1d:fe:bb:
                    31:6e:56:31:20:b3:ee:c1:e5:fa:ca:aa:2f:a3:83:
                    bf:13:f3:a1:f2:09:8f:32:95:f5:b5:6b:0b:e5:ed:
                    4c:ae:ac:03:36:84:ef:ff:3b:6c:f6:9e:6d:6c:98:
                    a2:16:11:2e:da:ed:5d:0e:fd:06:42:67:37:dc:10:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F0:6A:C1:CD:61:1E:3A:F6:EC:CA:10:A3:3C:D5:81:BF:EC:F8:38
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/369fd4c3-30e9-422f-b831-63aa3e0941cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:87:19:84:b6:fb:cd:57:6e:3d:8a:a8:85:c8:aa:03:ae:26:
         fd:c5:db:06:61:88:d9:71:4e:65:b5:74:0a:fe:5c:f6:49:8f:
         98:63:40:01:6e:de:34:ff:79:9d:5c:ec:0a:a5:69:07:15:1f:
         e9:55:5a:55:ff:4a:9d:3f:fa:55:a1:ad:1b:81:b1:c3:ca:25:
         b1:82:9b:59:ab:db:41:5b:47:8a:19:e8:47:4e:1f:0c:bd:77:
         5d:c7:21:6b:84:e0:55:5e:72:bc:53:ed:ee:9f:2b:59:02:d1:
         21:0a:15:68:62:3f:c0:7f:50:27:0a:95:55:01:53:d3:b5:82:
         bb:b9:92:22:bb:1f:a0:ed:b7:fa:eb:01:ac:59:a5:03:cd:db:
         ed:e0:49:c4:b4:62:49:f8:98:57:67:b5:af:ad:78:d2:df:d0:
         1d:26:fd:b5:4f:f5:b7:28:79:bd:90:db:eb:e8:fd:e5:e9:f9:
         25:53:97:83:08:7d:a9:71:f9:4f:ec:c5:b3:c1:fa:50:22:8b:
         7a:86:fd:1b:66:a0:66:d9:f3:85:96:63:52:d0:cd:31:2a:ae:
         c5:5a:cd:93:41:f5:9d:96:1b:aa:36:cd:b1:36:de:8a:2e:76:
         e9:f4:c6:ca:c6:5c:79:23:9e:4a:38:31:2f:9b:21:be:d4:1a:
         11:1b:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----