Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44ce912f-97c1-459f-b9ac-ca36e0051e7b.roa
File:                     44ce912f-97c1-459f-b9ac-ca36e0051e7b.roa (raw, json)
Hash identifier:          dyCveXT2yPxlPqy3T5hYquDcJQtQL2YJ4gXE8fWblkI=
Subject key identifier:   0C:0E:0A:06:EF:16:D6:1E:8F:35:5D:7F:FC:9A:94:02:0B:43:60:BE
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       68469BF7BB4D065B98133020784DA17720F827CD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44ce912f-97c1-459f-b9ac-ca36e0051e7b.roa
Signing time:             Fri 12 Jul 2024 00:00:00 +0000
ROA not before:           Fri 12 Jul 2024 00:00:00 +0000
ROA not after:            Fri 16 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 02:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:46:9b:f7:bb:4d:06:5b:98:13:30:20:78:4d:a1:77:20:f8:27:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 12 00:00:00 2024 GMT
            Not After : Aug 16 23:59:59 2024 GMT
        Subject: serialNumber=16c1588417fa7509fe17be6ec5996d8d54229312908cedd306f533d1ae36cab3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:fa:6e:79:3b:96:16:b4:0c:bb:35:d2:f2:
                    e5:34:4c:b3:bd:55:a3:69:fc:6f:c2:ee:f2:4a:1f:
                    e1:9d:c6:53:9b:92:03:fd:03:cd:93:af:ab:e5:7e:
                    6b:18:f7:02:e1:b1:f1:fa:a2:9c:f6:52:b6:90:fb:
                    01:92:03:e7:72:56:1b:95:3e:06:21:c6:60:4e:ef:
                    a4:5e:c4:dd:4e:76:fc:f5:aa:5d:af:66:7b:0d:90:
                    52:7d:65:de:54:aa:80:d9:63:7b:36:22:6e:49:02:
                    f9:3d:4d:34:44:9d:69:2e:24:8e:4e:67:7f:ed:37:
                    11:cc:f2:4e:7e:2a:0b:6b:36:f1:42:48:f5:0f:bf:
                    0a:d5:2a:01:c9:27:13:7b:63:f3:3c:17:a6:03:aa:
                    de:64:99:f2:7d:b1:f5:d2:f9:86:2a:60:c7:22:fc:
                    8c:ab:99:05:25:0a:f1:e7:1e:38:52:b6:1b:95:60:
                    75:2b:2a:0e:3b:54:fe:c2:69:8f:3a:80:f6:05:d5:
                    3e:25:ac:5a:b4:35:61:d4:b3:fe:1b:0e:0b:00:3a:
                    11:9c:a0:d2:2d:53:2a:8d:84:b2:9d:d9:8b:b8:00:
                    d7:f6:dc:8f:f0:0e:74:09:7c:12:49:51:d6:88:e2:
                    57:ad:06:3f:18:c2:da:c5:9f:5c:b2:55:6f:27:f1:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0E:0A:06:EF:16:D6:1E:8F:35:5D:7F:FC:9A:94:02:0B:43:60:BE
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44ce912f-97c1-459f-b9ac-ca36e0051e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:df:db:db:87:a6:05:fc:4b:9b:e1:4d:95:f5:db:7a:a6:
         34:3f:e1:2e:1c:e9:12:8c:db:53:f7:0a:58:cd:a0:7e:76:1d:
         99:98:7b:54:0a:71:6f:0c:59:c1:99:21:4b:3c:91:e1:fd:c2:
         b9:00:2c:2f:f4:d3:e8:40:74:88:db:09:da:0b:c6:7c:5d:b4:
         f1:ed:64:51:64:84:5f:6b:42:c1:03:fe:65:bf:fc:30:2c:c9:
         dc:12:3c:95:e8:00:dc:09:2f:2b:98:6c:f4:09:33:d8:9a:c2:
         e3:e5:ed:ea:8c:ce:b9:59:81:3a:17:26:c7:01:3e:ff:d0:2a:
         1f:ad:60:74:2f:a7:57:42:76:2a:7a:7e:d9:e9:5b:6e:e6:f7:
         eb:44:fd:82:3a:a2:9a:41:62:8d:e8:6e:95:69:51:81:91:3c:
         4a:3f:db:ae:56:e5:4c:08:10:47:b8:9b:e7:db:fd:0a:b9:1b:
         97:33:fb:ba:0c:af:00:df:f4:dd:77:15:24:bb:f7:fc:5a:ec:
         54:11:e5:2b:34:3a:d7:be:cb:bb:15:69:dc:b0:e5:fc:3f:eb:
         e0:5e:02:8c:7e:65:0c:b9:e3:c9:c8:03:d2:4a:c7:48:4f:04:
         a0:f6:2c:98:2a:b1:3e:39:3d:35:1f:35:ee:70:35:33:e7:b0:
         b6:9c:ab:ee
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaEab97tNBluYEzAgeE2hdyD4J80wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNzEyMDAwMDAwWhcNMjQwODE2MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNmMxNTg4NDE3ZmE3NTA5ZmUxN2JlNmVjNTk5NmQ4ZDU0
MjI5MzEyOTA4Y2VkZDMwNmY1MzNkMWFlMzZjYWIzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfDvpueTuWFrQMuzXS8uU0TLO9VaNp/G/C7vJKH+GdxlOb
kgP9A82Tr6vlfmsY9wLhsfH6opz2UraQ+wGSA+dyVhuVPgYhxmBO76RexN1Odvz1
ql2vZnsNkFJ9Zd5UqoDZY3s2Im5JAvk9TTREnWkuJI5OZ3/tNxHM8k5+KgtrNvFC
SPUPvwrVKgHJJxN7Y/M8F6YDqt5kmfJ9sfXS+YYqYMci/IyrmQUlCvHnHjhSthuV
YHUrKg47VP7CaY86gPYF1T4lrFq0NWHUs/4bDgsAOhGcoNItUyqNhLKd2Yu4ANf2
3I/wDnQJfBJJUdaI4letBj8YwtrFn1yyVW8n8VChAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDA4KBu8W1h6PNV1//JqUAgtDYL4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQ0Y2U5MTJmLTk3YzEtNDU5Zi1iOWFjLWNhMzZlMDA1MWU3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIos39vbh6YF/Eub4U2V9dt6pjQ/
4S4c6RKM21P3CljNoH52HZmYe1QKcW8MWcGZIUs8keH9wrkALC/00+hAdIjbCdoL
xnxdtPHtZFFkhF9rQsED/mW//DAsydwSPJXoANwJLyuYbPQJM9iawuPl7eqMzrlZ
gToXJscBPv/QKh+tYHQvp1dCdip6ftnpW27m9+tE/YI6oppBYo3obpVpUYGRPEo/
265W5UwIEEe4m+fb/Qq5G5cz+7oMrwDf9N13FSS79/xa7FQR5Ss0Ote+y7sVadyw
5fw/6+BeAox+ZQy548nIA9JKx0hPBKD2LJgqsT45PTUfNe5wNTPnsLacq+4=
-----END CERTIFICATE-----