Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1319770-602a-4979-94a5-2f4c866af0fa.roa
File:                     b1319770-602a-4979-94a5-2f4c866af0fa.roa (raw, json)
Hash identifier:          aDvVAFqLiiSHOcnW8q1+at4rthCAqSE77OdDe8kyqic=
Subject key identifier:   8D:7C:C9:17:10:4C:68:E0:67:3A:8F:17:66:C7:55:B3:34:52:C7:76
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       61925D0B51A322E8B58EF9378F4900A6F104C940
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1319770-602a-4979-94a5-2f4c866af0fa.roa
Signing time:             Sat 25 May 2024 00:00:00 +0000
ROA not before:           Sat 25 May 2024 00:00:00 +0000
ROA not after:            Sat 29 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 25 May 2024 23:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:92:5d:0b:51:a3:22:e8:b5:8e:f9:37:8f:49:00:a6:f1:04:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 25 00:00:00 2024 GMT
            Not After : Jun 29 23:59:59 2024 GMT
        Subject: serialNumber=a5790cd723b735562ef59aca97c710db1c4095164f39faa7fbfd36b18ab09a59, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:2c:c6:e1:cf:79:82:44:7d:26:33:d4:b8:
                    dd:79:cc:e7:20:b6:bc:de:c2:86:f7:46:37:56:98:
                    d0:26:1e:22:49:21:57:82:52:c8:88:aa:26:aa:28:
                    82:51:f8:b0:a1:bd:1b:8e:f7:95:00:4a:46:23:ad:
                    4e:f7:8e:a9:5a:40:2c:a5:d6:17:e2:cf:e9:71:f9:
                    a8:3e:69:25:94:92:2e:ed:01:23:aa:bb:bf:dd:be:
                    22:87:a3:5b:2a:4d:1b:e1:14:01:b6:3f:a8:24:e5:
                    ba:c7:15:fb:b6:65:ef:8a:cb:69:6e:5a:7e:ac:94:
                    31:2c:22:0f:7d:fe:52:02:a2:ce:99:69:46:94:a3:
                    e2:f9:33:59:92:c6:24:90:fb:da:c5:67:1e:d6:c9:
                    fc:e7:39:c8:c7:4a:f1:46:4f:6c:7d:64:49:f2:69:
                    71:51:67:c8:fa:c0:42:1e:73:bc:a6:27:c6:d0:88:
                    cc:d5:f6:fc:48:70:e4:73:ce:40:fc:7f:a8:11:28:
                    5b:3b:e5:1a:f4:b4:cc:07:61:04:64:ef:8a:1f:e7:
                    8d:a2:47:1d:92:e2:67:3c:48:9f:5a:19:12:e1:69:
                    3d:66:e2:04:ed:48:37:c7:a0:ea:0a:b9:56:e1:55:
                    4d:c8:90:c7:33:38:52:8b:f9:b0:00:ec:e7:29:d6:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7C:C9:17:10:4C:68:E0:67:3A:8F:17:66:C7:55:B3:34:52:C7:76
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1319770-602a-4979-94a5-2f4c866af0fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:5e:91:eb:a2:93:ac:92:3e:67:f3:54:1d:9a:c0:9f:3e:ea:
         45:b2:db:79:32:f5:95:a5:29:53:9c:e1:ae:85:6c:41:50:76:
         11:55:54:15:62:25:77:8f:79:73:cb:a5:43:c7:b9:ce:1c:19:
         4a:67:8b:a3:9e:66:0b:41:cc:8c:da:23:42:51:82:37:2f:fc:
         af:e9:cd:f6:9f:78:ba:2c:55:79:b2:86:bc:46:54:d9:90:e7:
         5a:dd:bf:a8:fc:29:9b:48:73:d0:ee:0f:62:7a:cc:f9:05:a4:
         60:fa:08:0a:cf:3e:a9:b9:72:73:2a:01:6a:ea:9e:0b:6e:8d:
         e6:c9:62:16:08:74:c1:00:48:ee:38:0e:01:ac:1a:b2:81:9f:
         de:ad:8e:a9:c9:b5:49:ef:84:85:40:ce:4b:c4:05:2e:c5:ba:
         c5:00:8a:03:c9:a0:83:e7:30:b4:79:86:04:ab:bf:a6:4c:d4:
         e2:b7:66:47:45:18:50:68:24:29:37:3f:2b:94:71:82:ce:90:
         ba:0a:7c:69:5a:4c:5e:fb:97:c3:55:af:0a:5d:82:f7:2d:d7:
         67:92:ae:39:b7:85:e9:b8:58:88:22:40:fe:a0:96:c0:1e:18:
         6f:38:0f:a2:c1:0e:dd:aa:88:e0:b9:64:84:b8:12:05:f8:1c:
         8f:c7:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----