Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d10656f-90d5-498b-ae0f-9375adf9b13d.roa
File:                     3d10656f-90d5-498b-ae0f-9375adf9b13d.roa (raw, json)
Hash identifier:          K0ibwzLYE2t4Xi7CQHUz/pI9j2r0StSTHYqon9UFGsc=
Subject key identifier:   AC:BD:1F:A6:B1:3D:2F:50:31:8B:3D:C9:54:C3:E7:F0:46:2B:22:24
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       726E995F23891CFCC641F738C2395C4E83395067
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d10656f-90d5-498b-ae0f-9375adf9b13d.roa
Signing time:             Mon 11 Nov 2024 00:00:00 +0000
ROA not before:           Mon 11 Nov 2024 00:00:00 +0000
ROA not after:            Mon 16 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 01:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6e:99:5f:23:89:1c:fc:c6:41:f7:38:c2:39:5c:4e:83:39:50:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 11 00:00:00 2024 GMT
            Not After : Dec 16 23:59:59 2024 GMT
        Subject: serialNumber=f6e0f62b3a9e60389177f0ba8b727811ca33d6b993e5317c1d3598d0e79cf0d7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:f1:6c:82:31:e9:1a:a4:81:54:9d:c1:48:
                    6e:cb:98:51:3f:4a:66:3b:05:df:db:9c:89:2a:bb:
                    aa:fa:61:2d:c0:16:f5:cb:79:a7:71:83:db:b3:55:
                    ff:04:4a:d8:3c:e1:da:c9:fb:a9:d9:2d:e8:ad:81:
                    05:e7:97:29:0c:2f:01:9e:7f:48:46:ca:47:a5:10:
                    56:35:ec:bc:99:10:53:cc:90:68:6d:2f:f1:a0:bf:
                    e8:6e:09:20:99:31:b6:8e:e8:f1:04:77:65:20:f1:
                    18:6f:02:0a:15:54:6d:a1:8d:9c:7a:cc:3d:82:b7:
                    14:8a:3b:f0:ca:95:a6:c6:78:3b:a2:16:02:48:2a:
                    8f:7c:a8:99:19:eb:75:a9:48:cd:9c:cc:bc:5c:fb:
                    4b:a2:d7:91:9e:2e:38:6a:dd:c0:cc:aa:68:36:c5:
                    bb:86:51:0e:67:50:94:1e:7c:29:13:44:cb:82:5d:
                    df:69:1e:2f:ff:d8:bb:cf:d5:3d:cf:68:b7:1a:44:
                    66:1a:ca:49:dc:39:9a:0a:a2:91:73:6c:37:be:c1:
                    2f:5b:f9:c4:d3:16:49:6d:19:1a:71:7f:28:a3:7e:
                    d3:4e:e5:cd:cf:36:55:89:b8:c0:bf:ef:e7:95:29:
                    a0:59:9b:32:21:8f:6d:5a:b2:04:df:c7:b8:e8:22:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BD:1F:A6:B1:3D:2F:50:31:8B:3D:C9:54:C3:E7:F0:46:2B:22:24
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d10656f-90d5-498b-ae0f-9375adf9b13d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:45:91:9e:61:db:b3:85:a0:33:fc:00:d6:26:ae:6d:a6:27:
         7a:2f:49:1a:c8:5b:ba:b6:76:b5:89:b1:bc:95:57:f1:2b:f7:
         80:00:2a:44:9f:ae:e7:84:d0:63:94:a4:ca:75:b7:66:c7:6c:
         1f:68:41:b4:96:95:69:aa:08:09:1b:ef:8b:62:0c:f8:11:4a:
         1f:b3:95:1c:7e:cc:a9:3f:c3:39:d8:43:89:ee:a1:4b:7b:75:
         ca:c8:7f:93:42:a8:c7:73:0e:b7:7e:17:be:c9:de:ff:5f:77:
         d8:69:bc:92:cb:33:05:0e:95:7d:b3:ad:83:22:b3:f1:67:2d:
         49:fa:75:b0:2e:07:dc:7e:b9:79:02:7e:ce:25:9a:1b:8b:e7:
         17:6e:5e:ca:42:f1:cb:1d:9d:4e:21:3c:48:54:12:08:21:5f:
         13:fa:89:65:95:62:73:01:31:5f:ae:d5:31:68:df:5f:33:96:
         47:13:12:d0:b8:b6:52:b5:67:4f:45:43:89:7c:71:3c:a0:41:
         32:1a:36:c0:23:92:1d:9f:44:84:21:66:10:ec:03:eb:fe:ca:
         d6:42:a0:7a:97:b2:08:3d:b8:cf:2f:87:fb:ba:63:d6:93:b6:
         33:74:59:8f:f3:04:eb:b6:b9:08:22:92:66:7f:e3:f3:75:df:
         a5:4b:67:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----