Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/40725942-7d7c-4899-8c9c-c11c4d5635ac.roa
File:                     40725942-7d7c-4899-8c9c-c11c4d5635ac.roa (raw, json)
Hash identifier:          54BcKvEX8iZFnxsOVD9z3fZ+v+nKhEMwPRIf5OyZ0bE=
Subject key identifier:   28:F1:8D:C0:4F:90:19:0B:CC:F6:88:C5:82:0C:5E:B6:F8:5B:66:16
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       54368D05786F5004FA34B94F148B712C314979E7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/40725942-7d7c-4899-8c9c-c11c4d5635ac.roa
Signing time:             Mon 02 Sep 2024 00:00:00 +0000
ROA not before:           Mon 02 Sep 2024 00:00:00 +0000
ROA not after:            Mon 07 Oct 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 11:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:36:8d:05:78:6f:50:04:fa:34:b9:4f:14:8b:71:2c:31:49:79:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep  2 00:00:00 2024 GMT
            Not After : Oct  7 23:59:59 2024 GMT
        Subject: serialNumber=cff3be05e90524ec85b95d1e5d0ac2caa7854dcf6de030ca41d61e66a5930a18, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f2:ea:b3:06:29:2e:ec:f3:3d:23:29:fa:1b:
                    30:99:0f:92:6b:80:ec:1d:53:71:54:00:59:7c:f8:
                    99:d6:95:3e:74:b4:a3:1c:2d:b2:4f:dd:f9:49:56:
                    12:74:bd:80:a4:d2:3b:95:d1:1c:31:14:c7:60:9d:
                    66:8e:3b:3b:95:8f:e4:e3:46:a6:d5:ba:84:64:07:
                    9e:ae:ba:7f:f0:00:6b:bf:93:14:83:5b:09:a1:14:
                    19:95:19:b1:b5:ff:04:73:cc:4f:4a:de:c5:d5:0c:
                    c1:88:87:48:37:f4:09:51:27:80:30:9f:1f:ae:54:
                    23:46:c9:35:8f:56:33:1e:bb:97:33:26:bc:89:9b:
                    ac:c5:8e:46:90:70:16:dd:89:f1:fe:cf:10:0c:4b:
                    81:5d:49:c8:2b:6e:9d:a8:bc:b3:fd:71:77:97:95:
                    12:10:7b:b9:38:9e:75:35:95:6d:27:e0:bd:2e:44:
                    f2:97:b4:81:47:5c:27:70:ef:f0:8e:4e:82:3c:aa:
                    2e:63:8b:13:a8:3c:6c:a3:21:55:83:b5:b3:c7:35:
                    66:88:30:ec:53:1b:f1:5c:25:3c:6f:fe:1a:98:4b:
                    42:3f:27:eb:28:5d:3a:28:03:bb:10:fd:87:13:70:
                    58:20:a6:63:54:55:99:10:75:87:30:2f:a5:a4:cc:
                    7c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F1:8D:C0:4F:90:19:0B:CC:F6:88:C5:82:0C:5E:B6:F8:5B:66:16
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/40725942-7d7c-4899-8c9c-c11c4d5635ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:d7:e7:a6:33:18:3d:65:e3:e1:bf:18:73:73:08:39:b2:21:
         d6:b7:7e:61:f2:86:0d:ac:d3:86:90:c7:14:fe:21:9b:00:4a:
         7c:05:a9:4a:b0:f5:77:82:37:9b:45:3b:f3:60:b9:97:bc:9b:
         6d:e8:a0:34:03:17:e7:6c:97:cc:76:98:d8:8e:8b:5e:b6:65:
         ba:b3:ea:14:e7:51:27:0a:86:8e:f7:96:40:a6:bd:df:e4:41:
         0c:a8:56:9e:e9:79:98:98:5d:49:bd:51:b9:f8:91:61:a1:6d:
         c4:02:b1:b4:12:47:78:57:f6:b1:f9:5e:2a:f7:e2:9a:49:f1:
         c9:3b:53:cd:bc:3d:4e:c1:ad:43:04:0b:4f:35:c2:e9:66:94:
         82:6f:2f:32:d2:58:ac:8a:8b:ef:6e:2d:07:e0:b6:24:57:27:
         82:cc:66:71:f4:39:4d:f7:4d:7a:58:c8:ae:36:27:e1:6b:bb:
         1e:6a:20:0e:12:72:bc:d3:a8:ce:e2:66:4d:a5:a1:62:36:b6:
         7e:6b:a2:37:76:08:cb:fc:2f:98:9e:68:13:30:a9:17:60:d7:
         21:bd:9f:d9:3f:3a:d7:db:a3:7f:c1:97:cb:6c:aa:71:58:69:
         b7:2f:0a:14:05:9a:60:cc:c4:28:e3:f3:a9:a0:46:74:92:03:
         b8:61:de:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----