Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3fc6336a-d784-4514-a62a-19209434b95c.roa
File:                     3fc6336a-d784-4514-a62a-19209434b95c.roa (raw, json)
Hash identifier:          zkjyHiolmDU8O8QX3vOkmTdus/gg3q4XpP6vlhwV5OM=
Subject key identifier:   DC:77:91:10:D2:42:5C:61:A8:3A:08:53:43:9B:66:27:64:00:BF:79
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       19C1886EFECE05FE57A66B3AA3950BF432454AB6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3fc6336a-d784-4514-a62a-19209434b95c.roa
Signing time:             Sat 01 Jun 2024 00:00:00 +0000
ROA not before:           Sat 01 Jun 2024 00:00:00 +0000
ROA not after:            Sat 06 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 08:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c1:88:6e:fe:ce:05:fe:57:a6:6b:3a:a3:95:0b:f4:32:45:4a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun  1 00:00:00 2024 GMT
            Not After : Jul  6 23:59:59 2024 GMT
        Subject: serialNumber=7ba189647ef9ec8524e6649554c526ed033df9fc758732dc87abcaa7347f1960, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:95:74:9e:35:98:6f:48:40:98:06:82:5e:
                    44:62:e6:f9:18:64:50:10:a9:2b:79:0a:0f:57:3e:
                    24:a4:b3:78:ec:b6:37:f8:06:1e:61:28:e5:98:63:
                    ad:38:98:da:6b:b5:0e:b9:39:91:e5:3a:b0:d6:b9:
                    05:e1:26:25:2d:b9:9e:a8:06:06:07:9c:c8:19:ea:
                    0f:27:14:0a:58:14:46:fd:59:24:79:42:ae:18:be:
                    4d:9a:40:35:34:6d:f5:b3:c2:8e:58:06:49:83:ad:
                    c5:f2:88:00:80:4b:42:58:f9:08:2b:28:f7:b3:20:
                    81:28:2e:8e:97:20:65:e2:78:f3:9b:bc:85:89:66:
                    85:1b:50:31:f6:a3:8a:8d:b6:c7:0f:fd:80:d5:47:
                    01:da:39:25:30:13:8c:8d:6f:53:4c:a1:b0:76:22:
                    6d:9d:57:69:22:89:95:f3:a8:3d:79:68:5c:23:a8:
                    f3:18:4b:de:04:b0:c3:ee:bf:6d:b8:1f:52:7f:53:
                    92:5b:f7:c4:a6:d8:19:19:3e:9b:e8:34:bd:e5:b8:
                    18:58:e9:74:7f:df:8c:6d:40:1a:40:81:7a:8b:85:
                    46:3b:62:50:39:74:5b:a6:c7:14:db:08:18:50:db:
                    79:95:9d:68:ab:30:ae:50:9f:73:b4:b0:43:cc:ff:
                    ea:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:77:91:10:D2:42:5C:61:A8:3A:08:53:43:9B:66:27:64:00:BF:79
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3fc6336a-d784-4514-a62a-19209434b95c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:10:4e:89:a2:e2:3d:2a:11:30:86:41:a6:7c:6c:03:0c:79:
         35:a4:c4:b1:ae:3e:58:e1:b7:8e:3e:2f:c0:8b:de:31:19:c4:
         01:76:31:56:54:66:33:48:f8:92:11:31:f9:ed:85:ae:ef:39:
         23:99:4b:63:62:66:e3:93:b7:24:f4:d9:17:7e:65:cf:da:ab:
         e4:b2:a8:67:b6:a1:de:57:60:2d:68:c7:4e:eb:bc:d9:ea:06:
         46:2b:ef:69:09:b7:ed:66:68:40:4b:fa:5f:71:23:4e:4b:95:
         60:f7:57:ec:19:63:77:10:c5:e7:ba:7d:64:e6:07:b5:a0:91:
         9c:2c:1a:34:46:53:ae:99:15:9a:7d:b1:f6:24:c0:d6:57:47:
         46:48:43:28:b0:9b:1b:ad:7f:20:63:95:4c:67:41:18:84:e2:
         d7:4e:46:ca:c8:7e:ee:36:f8:7b:82:82:fa:22:c4:80:39:df:
         e9:48:35:e2:09:4d:b5:c3:9b:78:5d:db:b5:ec:76:b3:e0:cf:
         90:74:d7:bf:c7:c5:9d:d7:3f:75:4b:09:71:0f:2b:af:6a:12:
         6e:43:fe:8a:6d:bf:c7:13:ac:2e:eb:ac:78:0c:39:a9:02:07:
         b2:e3:71:5d:61:f9:f2:8b:32:9c:12:c4:0a:c9:f6:7c:43:0c:
         73:92:ab:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----