Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4e35e908-67ca-41da-a0bf-b3346cc832ec.roa
File:                     4e35e908-67ca-41da-a0bf-b3346cc832ec.roa (raw, json)
Hash identifier:          Qk19m7WZKMTtOGopWnEnfGu3IIMt8pWB9Tu5jyhHuf0=
Subject key identifier:   59:11:EC:9F:77:59:EC:55:58:7E:1D:20:C8:57:EC:CB:8C:41:9D:1A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       47DBA6758EACD6454D0651AC4E08946E85F91BD6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4e35e908-67ca-41da-a0bf-b3346cc832ec.roa
Signing time:             Fri 14 Jun 2024 00:00:00 +0000
ROA not before:           Fri 14 Jun 2024 00:00:00 +0000
ROA not after:            Fri 19 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 18:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:db:a6:75:8e:ac:d6:45:4d:06:51:ac:4e:08:94:6e:85:f9:1b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 14 00:00:00 2024 GMT
            Not After : Jul 19 23:59:59 2024 GMT
        Subject: serialNumber=d65774a7ed99e3c0e5b65265c072eaed92fe54a248845fb1fdd2e55c2d6e9f71, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:e7:de:de:9f:9f:2f:da:6a:d8:17:97:98:
                    0e:d3:35:43:8c:47:93:d7:87:72:21:62:09:0d:08:
                    dd:b9:78:ff:1b:ef:37:f3:2a:96:cf:d8:85:93:de:
                    5d:58:e9:6f:9b:96:ab:45:98:c6:de:bc:f3:df:bd:
                    45:ed:58:38:95:71:d3:73:d6:cb:fc:e7:6f:78:a8:
                    81:cb:10:8b:43:d9:27:a4:23:22:1f:41:89:a4:8b:
                    83:8b:4f:60:0b:49:26:45:84:b4:a1:b0:d2:8a:fd:
                    89:cb:62:4b:d3:d5:78:89:d6:89:ec:c0:58:1b:b4:
                    d9:07:0c:f8:e9:c9:3a:c7:c4:f3:0e:34:27:b8:03:
                    6c:ae:3c:4f:84:b5:fc:65:bc:e0:ba:a3:6d:ef:96:
                    38:b1:ce:96:9a:43:1f:55:54:3f:0d:ab:aa:41:5d:
                    13:30:56:23:6b:e5:66:4f:2a:66:bc:1c:74:7c:27:
                    08:73:c7:b1:af:73:07:ae:d7:ac:5b:fd:e2:32:64:
                    2d:46:b7:2b:f4:0d:2f:d7:88:b5:6c:b3:ca:17:06:
                    10:79:67:8c:e4:54:1f:1b:bc:58:7a:30:af:2f:9a:
                    43:4f:9f:11:83:18:a5:5b:90:64:c5:fc:06:ca:54:
                    f0:5a:9d:f9:44:5e:9b:ab:0b:c0:a4:05:3c:b8:60:
                    eb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:11:EC:9F:77:59:EC:55:58:7E:1D:20:C8:57:EC:CB:8C:41:9D:1A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4e35e908-67ca-41da-a0bf-b3346cc832ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:38:93:0b:df:58:d2:8a:aa:60:42:c5:1d:13:2c:db:11:16:
         73:71:6e:99:65:29:35:75:a0:39:44:93:8e:3f:8b:ad:14:bf:
         31:81:aa:09:be:c3:dc:9e:08:cf:4b:61:13:c7:0a:f7:72:31:
         8f:48:28:9c:19:04:f5:90:e5:1a:9b:c7:1e:91:cc:d8:26:d5:
         f7:79:bb:e3:87:75:30:35:35:e3:d5:1c:98:b8:41:80:05:41:
         27:2c:45:a9:4c:73:57:52:a6:bc:db:af:2a:a0:b0:ec:6d:0d:
         d2:46:99:62:ff:6d:93:c7:b3:f9:ef:59:6f:89:b3:65:f5:5c:
         b8:59:6c:fa:f9:69:ae:29:a9:66:84:48:fb:de:24:5b:ad:3d:
         87:fa:c3:99:ef:44:d3:93:a7:d7:f7:9b:e9:e1:24:47:60:49:
         f7:93:07:ca:27:52:77:37:39:70:a6:68:4e:d3:ae:fa:04:1f:
         53:ad:bb:a2:c7:e6:84:c1:38:fb:e6:ff:3f:32:57:4e:d1:c0:
         95:db:39:cf:ad:90:58:05:8b:99:1a:55:f4:0f:84:50:ce:14:
         b4:6f:01:21:1e:fd:bc:a7:56:0c:2a:ae:73:16:68:b7:d4:97:
         67:e4:6f:1d:ba:6a:06:74:91:12:59:45:e9:34:06:d3:6b:81:
         3e:12:48:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----