Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5c00b64d-ea6c-4d60-962a-dde58be52300.roa
File:                     5c00b64d-ea6c-4d60-962a-dde58be52300.roa (raw, json)
Hash identifier:          Cj/bCvsq4UEa3FjzfM+7H9OmmL9WH3/MfwGSS5rcdz8=
Subject key identifier:   7A:D3:F3:24:23:FE:E3:46:88:99:EE:6D:D8:34:3F:9F:8E:B5:19:1E
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       06C127DB6071EE9F6998A8A2F1FE53C3AE59BF5B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5c00b64d-ea6c-4d60-962a-dde58be52300.roa
Signing time:             Tue 19 Nov 2024 00:00:00 +0000
ROA not before:           Tue 19 Nov 2024 00:00:00 +0000
ROA not after:            Tue 24 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 09:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c1:27:db:60:71:ee:9f:69:98:a8:a2:f1:fe:53:c3:ae:59:bf:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 19 00:00:00 2024 GMT
            Not After : Dec 24 23:59:59 2024 GMT
        Subject: serialNumber=1298c3b425ad856a436af7548c48c075076af884f0083335aa20bc59cc0cce27, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e5:8e:9d:60:83:79:56:94:dc:85:4e:c1:b8:
                    0c:77:1a:49:0a:e9:b3:57:78:c0:16:9f:e0:88:9e:
                    f8:48:d9:ef:ee:d0:80:56:49:31:fe:85:01:0c:5a:
                    10:bf:2d:af:0d:2e:07:82:26:8a:05:9b:97:22:17:
                    a6:dd:dd:3b:e2:a6:fe:84:45:e8:bd:d8:2c:b4:9c:
                    f1:0d:63:cf:bd:3e:19:cc:4e:d8:6f:45:90:eb:49:
                    6a:15:b9:e4:cb:b2:cd:02:4b:10:a5:54:16:a9:41:
                    c2:35:91:30:35:e8:22:5c:85:1e:b0:4b:9e:df:42:
                    1e:09:ba:80:a5:7a:d6:42:58:fc:84:61:d9:17:e0:
                    d9:58:41:b7:de:50:68:1e:a3:71:8a:9a:b7:be:5b:
                    b2:99:f5:25:46:bd:b7:50:41:fb:f5:c6:71:59:7c:
                    57:d4:9c:f2:c9:6a:f6:82:9b:24:b4:70:bd:38:b1:
                    51:31:ac:26:a7:85:47:f7:2d:da:d3:c8:af:8e:4a:
                    21:21:f0:be:3c:53:25:df:60:c1:02:36:ee:58:3c:
                    6a:66:3c:c5:af:ae:6b:cf:1f:fa:91:5b:38:5c:69:
                    e8:81:64:4f:a3:87:28:65:87:b9:07:cd:5f:cc:dd:
                    fd:f4:ce:16:ef:3f:b8:2b:c3:63:33:ef:23:75:b9:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D3:F3:24:23:FE:E3:46:88:99:EE:6D:D8:34:3F:9F:8E:B5:19:1E
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5c00b64d-ea6c-4d60-962a-dde58be52300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:ee:e9:d1:2e:14:a2:2a:ed:81:ce:d1:cc:dc:40:37:a2:6c:
         56:f9:93:0d:50:20:28:1f:92:7b:19:9d:84:69:91:55:29:7c:
         1a:10:56:71:6d:ee:17:8a:ee:e8:1d:cb:02:3d:b4:a9:de:44:
         09:b6:31:cf:66:59:ef:dd:92:dc:b2:86:bb:1b:38:75:59:41:
         02:f6:d9:79:65:da:98:5d:24:09:76:25:d2:e3:f5:8a:6f:9a:
         05:49:74:0a:f5:4d:96:61:0e:6b:8f:3c:7f:b6:64:ad:1c:bd:
         df:c7:60:26:cf:1f:f9:02:ec:0d:29:94:66:fc:3e:dc:91:9d:
         43:3f:a6:10:b0:f6:17:80:55:60:3c:34:bd:c9:8d:17:9c:b8:
         e9:1f:e6:2d:ab:e2:60:32:d5:13:3c:53:af:a4:4a:ce:e0:33:
         40:92:ac:0c:92:82:8e:38:7c:ee:c8:39:32:6d:cf:4c:6a:f7:
         f5:cf:28:a7:24:93:34:20:4a:95:4c:e8:df:0f:16:06:76:26:
         b6:df:b6:ac:40:57:4f:b7:af:ba:34:8d:ff:25:2e:71:85:2c:
         95:34:65:5d:70:4d:4a:14:50:54:c6:90:a3:0a:b6:58:d7:f0:
         06:b6:cb:82:d3:e6:a5:8d:be:7a:1b:3a:5b:8e:52:11:13:96:
         d3:98:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----