Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8293f299-68ff-4054-83d3-d40f6bc48d4e.roa
File:                     8293f299-68ff-4054-83d3-d40f6bc48d4e.roa (raw, json)
Hash identifier:          Z/wIEbrbWrv35MqsMsv+8cPEn1sBeNyl9MbiJRUW17o=
Subject key identifier:   94:5F:CA:4D:F7:39:2E:49:7A:52:34:60:B3:9C:07:03:15:EE:7D:1C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1982AD7FC0528B99E309602BBA2073B8BB36C065
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8293f299-68ff-4054-83d3-d40f6bc48d4e.roa
Signing time:             Fri 06 Sep 2024 00:00:00 +0000
ROA not before:           Fri 06 Sep 2024 00:00:00 +0000
ROA not after:            Fri 11 Oct 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 06 Sep 2024 06:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:82:ad:7f:c0:52:8b:99:e3:09:60:2b:ba:20:73:b8:bb:36:c0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep  6 00:00:00 2024 GMT
            Not After : Oct 11 23:59:59 2024 GMT
        Subject: serialNumber=d0406a09d168088d3804a0ff5a6b3e18a6933c5ea477823d24d5199b7d11bd03, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:c3:cc:2a:22:c9:9c:d6:d3:87:dd:22:48:
                    74:f8:53:45:6e:08:49:2a:6b:91:df:40:12:cc:d5:
                    85:63:a2:f0:79:fb:93:c1:df:7f:43:a1:1b:26:16:
                    58:65:d2:1c:59:ba:63:36:ec:04:a2:21:21:98:8a:
                    13:2b:27:9b:01:e5:70:33:a6:60:2d:95:2e:74:de:
                    47:32:56:69:3f:16:de:7a:8f:a9:7d:14:29:9d:3d:
                    5f:4e:0e:07:25:52:97:b5:89:85:4b:f5:5e:54:8f:
                    3d:3f:f0:8e:4f:fd:eb:70:3a:29:37:01:0b:38:09:
                    80:03:52:cb:ba:21:22:9e:e1:aa:66:98:99:6e:aa:
                    0e:fd:01:85:b2:6c:d4:bc:bf:7f:e8:83:78:23:87:
                    98:27:3a:07:0f:9f:b4:27:5b:75:53:45:93:ed:9d:
                    23:57:1c:db:53:d1:b8:4b:9b:f6:2b:20:e3:0c:0b:
                    e7:6d:11:31:16:7a:b4:0d:92:23:8e:79:0f:e1:a5:
                    5c:e7:38:59:d9:bc:55:eb:f1:72:b3:d8:49:86:8b:
                    a2:69:98:1b:5e:88:1c:cb:f9:8c:0e:b4:f8:37:10:
                    05:ae:84:a4:f6:63:1c:2a:75:b7:e7:a1:e0:26:d4:
                    26:93:bd:39:23:a8:54:54:e5:a8:c6:81:bb:a4:f5:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5F:CA:4D:F7:39:2E:49:7A:52:34:60:B3:9C:07:03:15:EE:7D:1C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8293f299-68ff-4054-83d3-d40f6bc48d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:9c:6e:f2:91:c2:bc:b0:4c:89:de:22:11:d8:ef:5b:db:f6:
         d3:cf:e4:88:f6:5c:f8:3f:79:89:c4:67:f8:3e:f9:cb:81:96:
         b9:bc:fa:36:fd:c0:cb:2e:9f:64:a5:12:0b:04:be:bb:3b:ba:
         ad:73:b0:a1:e5:50:da:ce:57:18:c1:0a:d7:08:f4:37:cb:f2:
         b1:0e:4e:b3:3f:80:59:96:4f:07:c2:9f:46:4e:bf:60:7a:11:
         7d:bc:f7:7e:18:bf:73:e9:a1:57:c4:d9:33:b8:42:34:26:08:
         77:9e:62:99:6a:e8:f3:35:44:a5:cc:1a:1a:50:eb:a6:ba:34:
         8a:0c:d2:ff:62:43:73:28:71:eb:fc:ff:46:5d:f0:84:7f:0f:
         c3:c4:5c:d9:91:78:93:9a:d7:30:4d:45:24:8d:66:6f:a0:24:
         7c:78:e0:8d:d4:61:4d:62:81:aa:91:73:95:13:77:b4:03:6b:
         51:ec:aa:03:f2:25:de:b2:5a:71:1b:ec:e6:d6:ac:9a:65:44:
         a4:78:ca:92:ea:86:f8:51:fc:85:83:7f:16:54:c0:86:15:27:
         46:36:cb:b9:73:ea:ed:55:37:93:0f:c6:11:13:ea:a6:8a:4e:
         15:95:97:c2:59:f3:80:9a:fb:33:65:76:ea:00:19:0d:ab:bf:
         8e:4f:41:49
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGYKtf8BSi5njCWAruiBzuLs2wGUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTA2MDAwMDAwWhcNMjQxMDExMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMDQwNmEwOWQxNjgwODhkMzgwNGEwZmY1YTZiM2UxOGE2
OTMzYzVlYTQ3NzgyM2QyNGQ1MTk5YjdkMTFiZDAzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxn8PMKiLJnNbTh90iSHT4U0VuCEkqa5HfQBLM1YVjovB5
+5PB339DoRsmFlhl0hxZumM27ASiISGYihMrJ5sB5XAzpmAtlS503kcyVmk/Ft56
j6l9FCmdPV9ODgclUpe1iYVL9V5Ujz0/8I5P/etwOik3AQs4CYADUsu6ISKe4apm
mJluqg79AYWybNS8v3/og3gjh5gnOgcPn7QnW3VTRZPtnSNXHNtT0bhLm/YrIOMM
C+dtETEWerQNkiOOeQ/hpVznOFnZvFXr8XKz2EmGi6JpmBteiBzL+YwOtPg3EAWu
hKT2YxwqdbfnoeAm1CaTvTkjqFRU5ajGgbuk9RHvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUlF/KTfc5Lkl6UjRgs5wHAxXufRwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzgyOTNmMjk5LTY4ZmYtNDA1NC04M2QzLWQ0MGY2YmM0OGQ0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAicbvKRwrywTIneIhHY71vb9tPP
5Ij2XPg/eYnEZ/g++cuBlrm8+jb9wMsun2SlEgsEvrs7uq1zsKHlUNrOVxjBCtcI
9DfL8rEOTrM/gFmWTwfCn0ZOv2B6EX28934Yv3PpoVfE2TO4QjQmCHeeYplq6PM1
RKXMGhpQ66a6NIoM0v9iQ3Mocev8/0Zd8IR/D8PEXNmReJOa1zBNRSSNZm+gJHx4
4I3UYU1igaqRc5UTd7QDa1HsqgPyJd6yWnEb7ObWrJplRKR4ypLqhvhR/IWDfxZU
wIYVJ0Y2y7lz6u1VN5MPxhET6qaKThWVl8JZ84Ca+zNlduoAGQ2rv45PQUk=
-----END CERTIFICATE-----