Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6928d7db-c805-407f-b3e7-da6fcc1282d3.roa
File:                     6928d7db-c805-407f-b3e7-da6fcc1282d3.roa (raw, json)
Hash identifier:          5ziQUNQFUY59OjJsHnK6USfZoH8r45DrjGD1r4ibMm4=
Subject key identifier:   92:53:C8:8E:FA:06:74:E9:DE:89:94:49:30:A6:8E:C4:6E:17:4A:A0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3D95CFD5A858D538BC6BC604F0256545DBC56C6C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6928d7db-c805-407f-b3e7-da6fcc1282d3.roa
Signing time:             Sat 17 Aug 2024 00:00:00 +0000
ROA not before:           Sat 17 Aug 2024 00:00:00 +0000
ROA not after:            Sat 21 Sep 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 16:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:95:cf:d5:a8:58:d5:38:bc:6b:c6:04:f0:25:65:45:db:c5:6c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 17 00:00:00 2024 GMT
            Not After : Sep 21 23:59:59 2024 GMT
        Subject: serialNumber=ad7e60fac23bae5a5d0e19a729572711643a10dbd2da812151c118549a153dd9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c6:98:17:bb:1c:50:e1:a9:9e:e9:fd:3a:0a:
                    25:ec:85:bf:dc:f1:e9:d9:fd:92:03:55:fe:76:66:
                    5a:0c:ce:1f:6e:75:a8:6e:19:65:2e:e2:fe:cc:da:
                    10:b2:a5:04:a2:c6:9c:e2:7d:86:f9:d6:33:71:b9:
                    9e:d7:ab:ff:4e:1a:1a:03:18:04:93:9b:10:4a:0b:
                    c2:cd:de:cb:f9:00:4a:53:36:e0:63:5f:0d:79:d6:
                    ec:98:ae:d5:a0:61:d3:b7:37:cb:58:0b:39:d2:ec:
                    f8:c8:25:7e:34:95:58:15:f5:2c:fc:83:bd:0c:dc:
                    3e:9a:d7:df:33:6d:4a:f6:ea:cd:b2:50:1d:bb:8e:
                    77:b1:cb:4d:c6:05:6b:f8:70:f1:56:84:fd:b6:6d:
                    5f:9d:18:d5:27:b1:89:83:b9:cd:e8:24:2c:36:ed:
                    7e:55:64:b6:05:06:32:fa:30:9f:36:75:e1:7a:02:
                    c1:f2:43:ae:21:33:b2:1d:92:80:3d:37:77:7c:2f:
                    32:0d:68:c9:47:fc:28:12:b7:c4:2f:26:9b:e8:0f:
                    48:24:8a:72:df:99:5e:bb:66:71:09:58:24:81:d4:
                    fe:69:cd:c1:bc:38:6e:1b:3e:7d:fb:2e:6f:a1:48:
                    27:08:e4:75:88:9d:8b:07:4a:1c:91:c5:1c:77:52:
                    e7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:53:C8:8E:FA:06:74:E9:DE:89:94:49:30:A6:8E:C4:6E:17:4A:A0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6928d7db-c805-407f-b3e7-da6fcc1282d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:26:64:6d:58:88:49:38:1b:17:bd:10:db:ef:b9:ee:be:b0:
         8d:86:e9:28:28:90:c8:8a:f6:c1:3d:ec:ca:a6:2b:1b:dd:c3:
         2b:dd:40:b5:31:06:1b:3e:4f:38:75:0c:61:87:3e:36:6c:a4:
         26:a3:cc:ee:6a:79:f6:17:bf:88:87:b1:e2:c9:6b:2d:52:37:
         58:02:d0:63:fd:1a:36:e5:4f:f6:53:fc:f4:5b:b3:85:8e:31:
         77:60:65:24:5d:5a:4b:12:3c:fb:47:f8:fe:75:ac:6b:d3:71:
         b9:3b:7c:db:37:b3:22:6b:6b:8c:ed:bc:8a:1e:c0:f3:31:13:
         d0:ec:a8:56:5b:18:00:86:74:be:2d:b0:c4:a7:16:36:eb:cb:
         22:d6:10:01:5d:58:44:4b:07:f9:b4:83:27:22:72:40:8d:d5:
         3d:f2:09:9c:1a:77:02:70:c5:15:ca:05:e0:8e:10:35:33:1e:
         1d:b2:bb:a4:d5:d5:1a:92:15:20:7d:22:cd:ff:4a:65:73:05:
         60:37:08:76:dc:e4:22:7b:90:55:a1:bb:95:e1:05:c8:5f:f0:
         ff:1a:f2:74:91:a2:71:f3:39:49:02:0a:6c:1c:a8:5f:59:ab:
         3d:e1:37:56:3c:df:81:94:3e:a3:0d:36:78:07:8a:cc:da:9f:
         3d:25:5c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----