Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/69fb6dac-0e0b-4a09-8d3e-c93740639176.roa
File:                     69fb6dac-0e0b-4a09-8d3e-c93740639176.roa (raw, json)
Hash identifier:          vdAOKo8cvlKzZYT9zcYA9NU94sZPfYc/5qDR35JjHMc=
Subject key identifier:   6B:62:CE:D9:29:1C:80:5F:06:87:7A:4D:A2:DE:3C:4E:D2:87:84:DC
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3B0FBE887A9947A2B379B631F5C9F9CF9A153A7E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/69fb6dac-0e0b-4a09-8d3e-c93740639176.roa
Signing time:             Thu 21 Nov 2024 00:00:00 +0000
ROA not before:           Thu 21 Nov 2024 00:00:00 +0000
ROA not after:            Thu 26 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 08:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0f:be:88:7a:99:47:a2:b3:79:b6:31:f5:c9:f9:cf:9a:15:3a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 21 00:00:00 2024 GMT
            Not After : Dec 26 23:59:59 2024 GMT
        Subject: serialNumber=51c2002afdcd4119b5c700a74b85d8f2f09f15e86b808acbee37f9f7481b17a0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:01:2e:c0:6e:8a:7f:69:5e:77:00:06:b0:
                    fb:39:50:95:51:62:8f:f5:52:e6:20:5f:66:01:69:
                    77:45:d8:79:46:26:72:ca:85:8b:bc:39:9e:6c:5f:
                    dc:75:65:60:6b:8e:b7:e0:36:66:3f:7a:63:ff:de:
                    e1:55:8c:d1:ad:c3:e9:44:f6:e7:22:eb:3f:09:86:
                    92:61:07:8b:6a:45:30:8b:b3:73:a5:ad:51:0a:56:
                    18:9f:39:6b:d7:d4:15:a1:05:30:b4:62:b1:91:c7:
                    f3:f8:a1:6a:4f:7e:69:23:96:41:2f:e9:0b:3c:89:
                    7d:c0:c0:e5:7f:b3:5f:70:b4:25:8b:3f:ca:19:58:
                    b2:24:7e:c3:72:04:ec:7c:02:72:dd:5f:b0:7f:e3:
                    96:bc:2b:f6:0d:39:be:98:01:cd:32:f0:7e:b6:3f:
                    ea:30:e7:1b:9b:eb:00:bb:33:6b:c6:5c:95:4d:a0:
                    a0:9f:99:e0:36:53:7c:bd:32:b1:79:a1:ba:17:21:
                    2d:da:a6:a6:b1:e4:7f:c7:07:43:4d:45:bf:1e:6d:
                    5c:34:1e:d7:7a:d2:7a:8e:a1:80:8b:59:93:9b:16:
                    e3:41:20:81:d6:fb:9a:a4:0e:d9:8d:54:8f:8b:58:
                    26:4d:93:f6:a0:34:78:cd:da:08:15:71:76:fb:21:
                    f7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:62:CE:D9:29:1C:80:5F:06:87:7A:4D:A2:DE:3C:4E:D2:87:84:DC
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/69fb6dac-0e0b-4a09-8d3e-c93740639176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ec:ef:60:25:2a:04:b6:bf:95:d6:93:81:04:f6:2c:7e:a5:
         fe:e9:76:ae:1b:cc:10:80:0b:ee:dc:13:31:04:d8:fa:97:7a:
         71:3b:ae:26:c3:34:b3:98:54:c3:23:26:ee:6f:bd:6d:61:06:
         dd:e0:d9:30:a2:3a:34:ec:aa:72:fc:aa:c2:c6:b3:56:f3:5d:
         05:a1:41:0f:0c:be:27:9c:cc:58:d4:3a:b6:76:66:8f:99:07:
         22:6b:88:9b:fe:50:0c:79:27:4c:f5:59:df:0e:40:5d:40:e4:
         8f:69:90:59:97:86:7c:68:ab:62:0f:86:2e:26:5e:6c:81:d3:
         81:e5:bf:39:df:cd:ff:96:bd:98:e5:43:bc:bd:f1:6d:77:a8:
         f8:73:53:6b:c7:c6:96:ce:5b:5d:aa:a3:c7:29:29:b5:c3:6a:
         9f:ee:9a:92:76:36:7f:ea:68:c0:b0:89:81:9a:b2:72:80:20:
         e7:ab:67:d9:e0:94:88:d8:c8:92:f5:e7:da:16:ff:2a:d2:fa:
         87:7c:5e:9d:db:8a:03:96:55:fd:a5:e0:38:8d:30:d0:77:09:
         d7:55:5d:80:63:05:0a:65:8a:76:cf:19:5c:43:66:85:c7:94:
         0e:11:90:bc:fc:c3:35:af:0c:0d:a2:8e:27:2d:66:41:fe:1c:
         36:1a:39:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----