Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad909c6a-68ca-4634-ba58-7edf1aec16b5.roa
File:                     ad909c6a-68ca-4634-ba58-7edf1aec16b5.roa (raw, json)
Hash identifier:          czAWqMhWTL3G1RnzlDGiuT8tkplSGKc9wtU3QDwGhuU=
Subject key identifier:   92:92:1C:EF:D0:C3:56:A5:A2:4C:A7:30:07:88:67:00:C9:A8:DF:D5
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6D170B8BD196E9B325DD57887E355566C0252318
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad909c6a-68ca-4634-ba58-7edf1aec16b5.roa
Signing time:             Mon 13 May 2024 00:00:00 +0000
ROA not before:           Mon 13 May 2024 00:00:00 +0000
ROA not after:            Mon 17 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 May 2024 04:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:17:0b:8b:d1:96:e9:b3:25:dd:57:88:7e:35:55:66:c0:25:23:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 13 00:00:00 2024 GMT
            Not After : Jun 17 23:59:59 2024 GMT
        Subject: serialNumber=56e37b9c092b7ac9578a7f4ebca8e7031d837612b37587c25a16cbff4624c102, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:2b:f4:82:29:98:4d:0f:5e:8b:f9:69:b3:
                    cd:cc:16:ae:f3:14:8b:98:c6:b6:3c:9a:f1:43:4f:
                    3f:13:fc:ab:b3:3e:02:64:b7:c4:ea:d6:b1:74:98:
                    6b:3b:27:69:6a:d9:49:08:0b:fc:ed:0a:a1:2c:68:
                    d3:9a:43:a8:dc:e5:08:7c:31:d3:83:fd:95:0c:a7:
                    75:1a:62:49:4e:b9:22:5a:f6:59:4c:0c:a7:b9:08:
                    e3:cc:29:14:2e:dd:5c:70:0a:e5:35:4f:a9:64:56:
                    fe:e4:b3:6c:a6:84:b7:eb:f6:6d:37:e1:51:62:8b:
                    be:62:45:0b:18:a0:b7:16:27:39:c3:99:fd:c4:7e:
                    c8:2d:a8:60:04:1c:a3:ba:a4:a6:38:fe:a7:29:09:
                    f0:bf:cf:16:7c:89:9a:47:b8:0c:60:f1:81:f5:c8:
                    4c:ba:de:27:f1:71:1e:39:bf:51:42:0e:da:e6:98:
                    62:86:9b:69:6d:3d:29:f3:a4:f4:b9:2f:b7:71:f0:
                    a6:cb:1a:ee:43:55:89:36:b7:ee:af:df:a4:a8:f7:
                    00:e5:e2:0b:08:59:5e:23:b4:53:f6:d0:5a:eb:fc:
                    cd:e7:24:50:ba:b0:21:01:80:a9:04:19:08:6b:eb:
                    92:1c:a2:e5:e0:ab:67:9a:76:5d:38:8e:65:6e:e0:
                    01:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:92:1C:EF:D0:C3:56:A5:A2:4C:A7:30:07:88:67:00:C9:A8:DF:D5
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad909c6a-68ca-4634-ba58-7edf1aec16b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:9d:34:65:e2:4f:0b:9e:da:a3:14:b2:fd:88:46:6a:28:99:
         85:10:6e:3d:86:a0:d2:1d:af:9c:c6:54:b7:df:0c:9c:c9:ac:
         35:4d:c9:cf:c4:fa:f4:96:9b:cf:a2:c1:55:ca:f3:12:94:56:
         7c:4b:d4:d0:a8:30:88:4a:80:51:b5:50:8d:1b:93:4a:f2:28:
         11:a1:6b:35:4e:8a:4d:c2:52:96:14:9a:eb:1e:2c:00:25:0e:
         83:e2:ac:19:4d:c0:10:b7:12:fb:24:8e:6e:48:78:44:23:2b:
         f0:7b:4a:c7:36:78:8c:9c:cc:a7:24:c0:ca:69:37:a3:8f:af:
         bb:ae:b8:e2:23:ad:8e:e2:f5:22:c0:64:08:2c:40:22:ac:12:
         85:c0:ec:f8:ef:6c:5d:6f:78:68:55:e7:12:a7:60:d7:76:f0:
         6d:d1:cc:6d:38:cb:d9:21:0a:35:46:56:21:41:a3:4b:7a:d4:
         4a:03:1c:10:57:c4:b9:5a:8f:6b:04:58:e2:58:35:e5:16:41:
         df:86:2f:b3:f7:30:9f:42:bd:24:7a:40:d7:e0:ee:5d:a0:cd:
         c5:91:03:dd:5d:88:78:3e:be:a3:5a:96:67:da:ba:3f:32:d2:
         c0:9a:77:ce:76:38:dd:1a:dd:38:29:24:f4:8d:b1:d8:e1:88:
         6f:81:65:f2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbRcLi9GW6bMl3VeIfjVVZsAlIxgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNTEzMDAwMDAwWhcNMjQwNjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NmUzN2I5YzA5MmI3YWM5NTc4YTdmNGViY2E4ZTcwMzFk
ODM3NjEyYjM3NTg3YzI1YTE2Y2JmZjQ2MjRjMTAyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDf1iv0gimYTQ9ei/lps83MFq7zFIuYxrY8mvFDTz8T/Kuz
PgJkt8Tq1rF0mGs7J2lq2UkIC/ztCqEsaNOaQ6jc5Qh8MdOD/ZUMp3UaYklOuSJa
9llMDKe5COPMKRQu3VxwCuU1T6lkVv7ks2ymhLfr9m034VFii75iRQsYoLcWJznD
mf3EfsgtqGAEHKO6pKY4/qcpCfC/zxZ8iZpHuAxg8YH1yEy63ifxcR45v1FCDtrm
mGKGm2ltPSnzpPS5L7dx8KbLGu5DVYk2t+6v36So9wDl4gsIWV4jtFP20Frr/M3n
JFC6sCEBgKkEGQhr65IcouXgq2eadl04jmVu4AE5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkpIc79DDVqWiTKcwB4hnAMmo39UwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2FkOTA5YzZhLTY4Y2EtNDYzNC1iYTU4LTdlZGYxYWVjMTZiNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIidNGXiTwue2qMUsv2IRmoomYUQ
bj2GoNIdr5zGVLffDJzJrDVNyc/E+vSWm8+iwVXK8xKUVnxL1NCoMIhKgFG1UI0b
k0ryKBGhazVOik3CUpYUmuseLAAlDoPirBlNwBC3Evskjm5IeEQjK/B7Ssc2eIyc
zKckwMppN6OPr7uuuOIjrY7i9SLAZAgsQCKsEoXA7PjvbF1veGhV5xKnYNd28G3R
zG04y9khCjVGViFBo0t61EoDHBBXxLlaj2sEWOJYNeUWQd+GL7P3MJ9CvSR6QNfg
7l2gzcWRA91diHg+vqNalmfauj8y0sCad852ON0a3TgpJPSNsdjhiG+BZfI=
-----END CERTIFICATE-----