Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8ee3a470-267a-4b20-a5d6-ee001d0054b2.roa
File:                     8ee3a470-267a-4b20-a5d6-ee001d0054b2.roa (raw, json)
Hash identifier:          Iq4ss3WGc3nNnfGQosOlP0ORbD12vRVnFyIhN3nW3CE=
Subject key identifier:   CF:BE:48:D5:C6:11:36:B2:15:72:E2:2D:8F:96:49:82:79:C2:4B:18
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       61CF13D84978D65F3B9D2D70E620F13EAF941592
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8ee3a470-267a-4b20-a5d6-ee001d0054b2.roa
Signing time:             Tue 21 May 2024 00:00:00 +0000
ROA not before:           Tue 21 May 2024 00:00:00 +0000
ROA not after:            Tue 25 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 May 2024 04:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cf:13:d8:49:78:d6:5f:3b:9d:2d:70:e6:20:f1:3e:af:94:15:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 21 00:00:00 2024 GMT
            Not After : Jun 25 23:59:59 2024 GMT
        Subject: serialNumber=c8bd4239d9d0117c00b9e35705fb7483c55a0c8502f202ec7149bf5deba90485, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:8b:26:33:ed:37:88:7f:58:ac:32:96:62:
                    25:5a:78:4c:c6:51:a5:c7:76:e3:66:86:47:a5:26:
                    a3:e1:b1:38:9a:ff:ee:2c:0a:22:00:4c:be:15:5b:
                    8c:79:f5:05:15:47:83:98:35:8c:71:2b:89:54:de:
                    15:e9:fe:1c:49:bb:8d:67:8e:38:a2:60:a1:db:e3:
                    9b:7e:ee:6c:82:3a:76:ba:41:df:d4:7a:70:77:e8:
                    7c:95:eb:f8:99:50:ff:5b:9d:da:42:3f:b8:56:30:
                    10:3f:52:ee:de:05:3f:8f:af:1f:08:96:83:ed:f1:
                    02:5c:0a:5a:0c:75:1c:3f:31:cd:ae:38:0b:b8:47:
                    c8:d5:ed:3f:e7:73:af:9b:b7:b6:53:0c:cb:8d:76:
                    63:b1:3b:79:dd:ad:77:fb:c6:59:c8:8b:20:55:99:
                    be:8f:7d:ad:68:32:0f:eb:cc:b4:3b:48:08:ae:c6:
                    dd:68:2c:57:d7:10:f3:3f:1e:b6:5f:7b:1c:2d:a4:
                    6c:4f:2f:8d:4c:2d:d3:3c:1d:b9:ff:ec:30:3b:31:
                    48:f4:c7:ce:66:d9:eb:91:6c:83:83:45:22:5e:24:
                    3a:54:bc:b8:04:ba:43:2f:9b:7b:9e:30:89:8d:9c:
                    a5:ef:06:22:3b:2c:d6:4b:38:dc:33:0f:5e:62:c0:
                    31:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BE:48:D5:C6:11:36:B2:15:72:E2:2D:8F:96:49:82:79:C2:4B:18
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8ee3a470-267a-4b20-a5d6-ee001d0054b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:3f:46:73:93:19:fc:ed:52:55:67:b4:39:7b:0f:ff:a3:2c:
         69:f8:a5:d4:21:66:be:48:b5:37:07:0f:1c:8d:c2:c0:36:37:
         ce:5c:b0:22:05:28:ee:b2:9d:7c:3f:68:f8:ca:89:8d:2d:09:
         01:85:37:70:79:d7:23:2b:b7:5b:5f:e8:90:f1:aa:0d:1d:e4:
         50:38:a8:ab:43:27:bb:55:ae:4d:b5:60:0b:48:34:32:a2:c5:
         37:8f:26:7c:bc:9f:24:b4:5f:0c:84:6b:32:e6:d6:a6:b3:16:
         14:ff:a6:11:8b:b8:ae:63:0d:c2:55:09:86:45:cc:51:d6:d5:
         a0:03:f0:9b:33:99:17:2a:13:fa:2e:23:89:ce:f7:5f:0b:a3:
         d7:2e:2d:71:ef:b1:17:ad:04:89:df:4d:d0:76:1a:ce:53:83:
         af:22:15:a8:5b:ac:8f:96:fc:96:e3:ed:61:48:0a:98:7f:65:
         bf:29:37:42:4e:0d:6a:45:c8:f3:6f:31:56:cf:e7:34:4a:f3:
         54:1d:b9:de:d1:e9:f8:0e:9f:8f:8e:70:d5:50:c2:39:f4:9d:
         28:7a:ee:a2:a8:66:86:1c:8a:36:10:5e:2a:05:7b:27:70:fa:
         30:f7:c9:87:e1:f8:99:a6:fe:e7:c7:b7:9c:e1:02:b9:ce:25:
         9e:da:38:59
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYc8T2El41l87nS1w5iDxPq+UFZIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNTIxMDAwMDAwWhcNMjQwNjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOGJkNDIzOWQ5ZDAxMTdjMDBiOWUzNTcwNWZiNzQ4M2M1
NWEwYzg1MDJmMjAyZWM3MTQ5YmY1ZGViYTkwNDg1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDE94smM+03iH9YrDKWYiVaeEzGUaXHduNmhkelJqPhsTia
/+4sCiIATL4VW4x59QUVR4OYNYxxK4lU3hXp/hxJu41njjiiYKHb45t+7myCOna6
Qd/UenB36HyV6/iZUP9bndpCP7hWMBA/Uu7eBT+Prx8IloPt8QJcCloMdRw/Mc2u
OAu4R8jV7T/nc6+bt7ZTDMuNdmOxO3ndrXf7xlnIiyBVmb6Pfa1oMg/rzLQ7SAiu
xt1oLFfXEPM/HrZfexwtpGxPL41MLdM8Hbn/7DA7MUj0x85m2euRbIODRSJeJDpU
vLgEukMvm3ueMImNnKXvBiI7LNZLONwzD15iwDFRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUz75I1cYRNrIVcuItj5ZJgnnCSxgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzhlZTNhNDcwLTI2N2EtNGIyMC1hNWQ2LWVlMDAxZDAwNTRiMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAK4/RnOTGfztUlVntDl7D/+jLGn4
pdQhZr5ItTcHDxyNwsA2N85csCIFKO6ynXw/aPjKiY0tCQGFN3B51yMrt1tf6JDx
qg0d5FA4qKtDJ7tVrk21YAtINDKixTePJny8nyS0XwyEazLm1qazFhT/phGLuK5j
DcJVCYZFzFHW1aAD8JszmRcqE/ouI4nO918Lo9cuLXHvsRetBInfTdB2Gs5Tg68i
FahbrI+W/Jbj7WFICph/Zb8pN0JODWpFyPNvMVbP5zRK81Qdud7R6fgOn4+OcNVQ
wjn0nSh67qKoZoYcijYQXioFeydw+jD3yYfh+Jmm/ufHt5zhArnOJZ7aOFk=
-----END CERTIFICATE-----