Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/51ebec39-32aa-4572-be10-53e9a9879086.roa
File:                     51ebec39-32aa-4572-be10-53e9a9879086.roa (raw, json)
Hash identifier:          VjjqOIKn88CEJ3gQqD5m0q3L/+FMyXv8Ek40i+vm1tQ=
Subject key identifier:   BD:6A:53:11:3B:1D:F3:0D:D6:05:42:2B:EB:BE:1A:AC:16:78:72:C8
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       74C6A01ACF2CF05A027F18B4695A565F5982331D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/51ebec39-32aa-4572-be10-53e9a9879086.roa
Signing time:             Sat 15 Jun 2024 00:00:00 +0000
ROA not before:           Sat 15 Jun 2024 00:00:00 +0000
ROA not after:            Sat 20 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 15 Jun 2024 10:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c6:a0:1a:cf:2c:f0:5a:02:7f:18:b4:69:5a:56:5f:59:82:33:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 15 00:00:00 2024 GMT
            Not After : Jul 20 23:59:59 2024 GMT
        Subject: serialNumber=68aaf6b87a183852d25197c15afde478b127cc0c45cb17054a036c5323784df2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:be:5f:eb:a8:55:d4:a3:b7:8b:43:c5:72:
                    1d:ad:66:50:60:2f:56:b1:48:83:8f:60:51:ff:97:
                    13:ff:28:e2:ce:c5:01:db:d2:e3:5e:42:86:07:f4:
                    b0:bc:47:e4:18:2b:09:18:6a:3b:44:21:22:61:77:
                    cb:6e:a9:f0:bb:be:20:22:07:29:cd:ff:a9:d0:6f:
                    1b:b8:cc:48:5f:e1:d0:49:42:8f:71:7c:f3:6e:45:
                    3b:d9:e4:4c:fd:93:84:51:a5:e5:d8:ea:e1:77:64:
                    fc:4e:65:46:f1:43:e1:fb:78:c9:c9:63:a7:23:c3:
                    fe:a8:9e:fa:17:d6:ba:54:8a:10:03:29:db:3c:7d:
                    dc:72:1c:23:92:ac:36:50:56:9f:26:3e:2b:75:58:
                    83:56:ef:70:f3:c9:fd:12:8c:f7:8f:12:b9:ed:1b:
                    3e:55:cb:64:1c:41:27:30:61:5b:8f:c6:ce:3a:f1:
                    4c:81:f6:48:36:59:8a:06:99:e6:1d:6e:2e:b9:b1:
                    09:e7:95:d7:94:bc:61:f7:ad:00:36:a6:93:1a:4f:
                    3b:7d:c8:9a:11:dd:01:f7:67:ec:3b:89:1f:6a:64:
                    c9:2d:3a:9b:f3:36:bf:2c:a0:18:fa:15:d0:a6:7f:
                    c4:1d:f2:ce:a4:17:d2:c6:c9:70:a3:1f:0b:cb:13:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6A:53:11:3B:1D:F3:0D:D6:05:42:2B:EB:BE:1A:AC:16:78:72:C8
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/51ebec39-32aa-4572-be10-53e9a9879086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:8b:15:e1:d3:83:75:f0:58:4e:1c:fe:26:bb:cd:2a:e8:62:
         11:36:2b:d4:37:4c:04:a4:9c:fd:a5:b9:41:99:3d:db:eb:6e:
         c3:71:38:57:1b:c7:09:ac:29:a1:e4:27:c0:1c:64:57:5a:e4:
         b6:2f:3e:42:6a:da:4b:8f:55:e6:98:89:22:b4:50:69:62:a1:
         10:92:0a:6f:07:ec:59:29:8c:9b:c9:dc:29:9a:61:9c:98:3e:
         b7:b7:3d:1f:d6:52:d5:a4:a4:a8:fd:39:5a:1e:fb:0d:01:3d:
         7f:35:a9:6e:90:78:67:90:81:4c:4f:fd:b6:4c:27:b1:35:e5:
         de:45:15:1b:06:83:8e:be:b9:03:24:d6:4c:a7:46:a8:23:86:
         49:d6:0d:80:27:80:42:06:98:a3:30:90:8e:16:2d:5d:d8:d7:
         1d:1b:ca:0d:f4:45:9f:dc:2a:11:1e:de:ba:05:c9:3a:56:bc:
         03:cd:38:7b:d0:ea:da:e9:02:b4:b2:6b:66:94:e2:02:31:13:
         5a:43:66:52:99:9e:98:b4:a7:1e:82:74:2e:74:0b:21:95:90:
         7e:9d:e2:a4:4d:b4:ae:e6:9d:a3:96:7e:2e:6a:04:b6:b5:42:
         19:5b:5b:56:b2:6b:f6:40:b1:ec:72:cf:91:d7:78:5c:60:0f:
         03:60:1b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----