Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bdda6d0b-a597-4e08-a93f-b85bed69e962.roa
File:                     bdda6d0b-a597-4e08-a93f-b85bed69e962.roa (raw, json)
Hash identifier:          m13NaCyC38mZK3fZXhAGbKi6lCyjOAH3wO5aKYJmDP0=
Subject key identifier:   CC:E9:FA:A1:71:89:59:E2:E7:E7:C1:A9:0E:70:87:BF:17:A2:34:2F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1AC67412FE12E84DBBB574A7DE5392859C9457DE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bdda6d0b-a597-4e08-a93f-b85bed69e962.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Nov 2024 23:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c6:74:12:fe:12:e8:4d:bb:b5:74:a7:de:53:92:85:9c:94:57:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=63adf198d77c6c63dc580ffd91be2912d4a44d347f16d28d9486d59c2712df54, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:c6:cc:a8:99:78:90:c5:04:fb:be:18:3e:
                    de:de:97:5f:9a:88:1f:0a:2f:df:7b:7f:47:c8:bd:
                    01:5b:9a:5e:87:1a:a0:dc:49:10:2e:49:01:9c:fb:
                    55:59:9e:40:76:d1:eb:87:ef:9b:fd:c3:48:cb:cf:
                    71:65:7c:55:12:ce:29:b5:39:bf:49:3a:bc:2e:e5:
                    d8:f0:6e:fc:d9:2c:20:b8:16:86:2b:06:81:83:b2:
                    f3:ef:5e:d3:d6:d5:d9:11:4a:0c:8c:5d:69:71:0f:
                    29:4b:8f:d0:9f:38:6e:b7:eb:31:e8:1f:57:07:c0:
                    07:bf:0a:a4:5f:82:a9:cd:7e:24:22:07:d2:14:52:
                    94:9d:94:37:d2:eb:dd:11:81:2d:f4:2b:24:4d:cc:
                    8c:d5:24:7e:70:ce:00:e0:37:c6:b7:b4:3b:33:39:
                    43:c9:3e:c7:21:b3:7c:98:00:f9:64:cf:60:f9:40:
                    1b:aa:9d:5c:d1:06:96:79:e4:b6:c1:ee:38:14:0c:
                    7c:eb:5b:8c:06:19:07:da:77:df:b6:cb:ba:9e:de:
                    7b:52:56:84:70:fa:a9:af:4e:75:c6:f8:72:cc:4b:
                    6c:4c:14:a9:4c:ec:44:7b:66:37:11:6d:5f:10:26:
                    fa:83:c1:e2:8a:c2:29:cf:df:ef:30:32:75:3b:73:
                    39:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E9:FA:A1:71:89:59:E2:E7:E7:C1:A9:0E:70:87:BF:17:A2:34:2F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bdda6d0b-a597-4e08-a93f-b85bed69e962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:d2:b9:17:73:02:50:58:64:92:6b:94:f4:c8:95:6a:c0:
         2d:cd:2a:81:01:d3:79:a2:e8:75:f5:e7:0c:c6:d9:70:53:35:
         35:0a:20:85:9c:ff:54:0b:b5:cd:9a:b3:eb:a9:72:72:31:ed:
         e4:09:85:ee:06:26:c3:80:3d:b2:b0:a2:1e:7b:ec:7c:d2:38:
         af:35:8d:73:a2:fd:cd:ca:74:01:d7:0c:5f:7f:4f:7d:7f:f3:
         7f:e5:b2:6f:e0:89:b7:8e:ed:05:25:05:7c:5c:8f:0b:22:32:
         e3:50:7a:61:ac:7c:8a:cb:a0:a3:03:2f:12:86:9a:c1:64:44:
         4d:c6:00:90:a1:22:6e:dd:9c:24:01:ac:14:c8:0f:f3:ec:53:
         09:09:5f:cc:84:8a:91:c7:ec:76:a2:25:1e:92:ea:4c:99:a8:
         0c:23:09:8c:2e:b5:ee:37:27:88:17:9e:bd:b7:96:72:4d:2f:
         33:7f:1b:79:de:36:06:5b:2b:5a:3e:81:59:c0:cc:23:36:11:
         94:a7:f8:6a:b9:16:9b:c7:c1:33:4c:84:8c:aa:80:f2:78:a5:
         aa:e6:9e:05:a1:54:dc:41:f5:4d:0e:f9:aa:b0:61:20:b8:3b:
         ae:00:c3:30:ef:7a:3c:c9:f0:e6:fc:d7:13:75:df:fa:5a:07:
         b8:63:50:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----