Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83f4670f-9151-4336-bd80-0683b7108422.roa
File:                     83f4670f-9151-4336-bd80-0683b7108422.roa (raw, json)
Hash identifier:          HXwUl6KlSqTZIpNpOYO/a+Q3ZNkeknCkbO176/oozRk=
Subject key identifier:   53:67:7B:55:6D:ED:A4:72:F9:24:97:42:3B:A1:C1:A5:61:A0:EA:EE
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3B8E5BE6D785E855D0C9BD8C5945A2C695BE2C29
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83f4670f-9151-4336-bd80-0683b7108422.roa
Signing time:             Sat 08 Jun 2024 00:00:00 +0000
ROA not before:           Sat 08 Jun 2024 00:00:00 +0000
ROA not after:            Sat 13 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 08 Jun 2024 00:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8e:5b:e6:d7:85:e8:55:d0:c9:bd:8c:59:45:a2:c6:95:be:2c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun  8 00:00:00 2024 GMT
            Not After : Jul 13 23:59:59 2024 GMT
        Subject: serialNumber=69db40eb59527862aa8b8112f6bea6a5b9b90f43591f80030c9cf31dae332d16, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:65:20:9f:e5:b4:38:6a:16:c9:ad:3f:2d:b0:
                    78:64:11:ac:c1:6e:75:14:0c:d9:bf:88:3e:6d:16:
                    16:6a:a8:61:e8:d6:62:a8:04:25:ae:0a:27:d8:70:
                    dc:ad:5a:ee:fd:e7:73:6c:ee:fd:e0:94:f5:99:b7:
                    41:f3:71:3a:52:6d:69:5b:7a:67:47:57:b5:d8:e9:
                    46:97:f3:b6:b9:47:b9:fe:c6:47:f7:4c:38:dd:31:
                    96:03:b5:10:04:9e:cd:fb:d7:4a:1f:65:80:91:46:
                    e1:21:92:c4:59:59:cd:00:22:cb:c3:4a:96:49:52:
                    f1:31:b3:a7:5e:15:c4:d0:23:a6:ac:56:50:34:f0:
                    6e:a8:67:6f:fe:b2:dc:3a:8d:67:4b:52:c0:29:1d:
                    29:c5:29:e7:91:ba:35:68:f2:0b:7f:3d:9b:de:55:
                    23:fd:be:05:4c:d5:e1:1f:2c:61:c1:e5:eb:c4:94:
                    ca:51:e9:d9:88:8b:2e:83:4e:c1:8e:a2:3d:7c:b2:
                    ae:c2:fc:63:33:f3:35:88:83:a0:f0:48:8a:ea:55:
                    2f:62:0f:72:5c:a6:26:02:02:b8:a2:15:c1:66:40:
                    79:46:5d:4f:c7:6b:05:89:53:d5:e5:7e:57:64:8e:
                    8a:33:46:8a:d8:bd:aa:e7:69:d3:5c:c4:9e:dd:c8:
                    51:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:67:7B:55:6D:ED:A4:72:F9:24:97:42:3B:A1:C1:A5:61:A0:EA:EE
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83f4670f-9151-4336-bd80-0683b7108422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:67:21:a3:dc:e6:32:ed:88:b4:d4:33:74:a0:b9:46:52:57:
         49:fa:47:5a:4d:9a:db:b3:3b:ba:ae:b2:b5:a4:0b:65:09:2c:
         7a:e0:1d:2c:bb:52:04:82:35:72:a8:fb:1a:bd:e6:fe:8b:f2:
         56:e3:ed:8f:d2:66:1a:1d:1b:d1:d9:15:ff:b4:a9:7d:97:3b:
         83:40:d0:2d:75:7c:a8:fa:f5:a4:a2:25:da:5f:82:c4:86:5e:
         39:0b:d8:ce:7a:42:17:b3:4b:6f:fa:f2:98:7d:83:ff:ec:11:
         b3:43:98:b6:d7:4e:b3:ce:f6:db:5e:37:e2:ea:04:61:46:62:
         48:1f:49:a2:98:6a:ef:5c:5c:e7:44:67:0a:bf:5a:4a:93:20:
         ca:5a:63:f7:fe:a5:84:69:db:10:ce:c7:82:c5:84:94:4a:d6:
         34:3a:76:ed:96:bd:e8:84:07:56:70:e5:04:64:a8:2e:79:39:
         f8:f1:dd:3e:a0:41:c2:d3:32:da:b9:35:5f:1b:12:58:5b:8d:
         3a:cf:b6:62:a4:bd:69:a4:2d:06:7b:a2:4a:26:a8:2e:3f:55:
         4d:06:73:eb:4b:1e:21:72:d9:17:9c:3b:30:36:e6:c1:ee:41:
         6b:fc:6a:0e:5a:f5:b3:d1:6b:e9:7f:9e:72:fa:51:03:55:84:
         9d:f3:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----