Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/da138099-6b49-4d68-ad1e-8acf200a3c37.roa
File:                     da138099-6b49-4d68-ad1e-8acf200a3c37.roa (raw, json)
Hash identifier:          gVaLp2OKo3gVJXm9Z+xAMbOt4FO3urjQRxmoTCOI9Lo=
Subject key identifier:   66:75:A8:59:11:30:C2:5B:FB:C9:DA:F4:85:3C:B5:BF:ED:03:9A:2C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3DA09D4232E0A41E5F2CCA4EFEA500638844476D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/da138099-6b49-4d68-ad1e-8acf200a3c37.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 May 2024 04:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a0:9d:42:32:e0:a4:1e:5f:2c:ca:4e:fe:a5:00:63:88:44:47:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=a914687d66e0d58711bd16785062cc704815b4af84ddbc82b4f9f8647ad72255, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:be:83:1f:bf:e2:b6:19:9e:f4:67:66:a8:
                    08:20:90:85:8f:ca:4e:79:94:18:ad:7f:f4:d8:da:
                    73:56:51:db:72:87:6e:e8:3c:02:26:de:90:08:d8:
                    8a:ff:f5:fe:9f:02:e7:4c:45:a8:52:fb:b0:b7:ad:
                    b2:60:f4:4d:4d:81:ed:d4:d0:a2:79:ab:09:16:5d:
                    47:f7:5b:98:88:96:3e:60:d3:4c:f2:1e:d6:5d:2a:
                    cb:d9:07:11:22:e7:e0:c9:b7:1d:6a:40:83:2e:a2:
                    e0:8d:7c:86:08:6c:17:89:d7:8d:61:53:82:92:89:
                    b5:39:c4:d7:df:d9:19:b6:52:87:80:d7:c1:b9:e6:
                    7f:6e:34:5e:f5:d8:e8:c4:11:92:75:3f:8a:29:5e:
                    5b:5f:dc:19:bd:48:4c:13:f0:77:fb:85:31:45:ec:
                    3f:58:cd:18:be:45:a3:e4:42:68:04:5b:ab:4f:d5:
                    c3:62:a9:0b:80:0a:c9:9b:3c:95:37:35:12:c7:21:
                    cb:fd:04:73:f0:ff:31:2f:7e:73:0f:1f:7c:ae:76:
                    98:45:1c:6c:ee:30:fe:83:58:99:f0:bb:b2:c0:70:
                    82:6b:7d:a1:33:80:0f:9f:5e:53:7c:8a:ad:e2:a9:
                    77:fc:af:9d:00:d3:26:08:49:09:33:8d:a9:5e:c1:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:75:A8:59:11:30:C2:5B:FB:C9:DA:F4:85:3C:B5:BF:ED:03:9A:2C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/da138099-6b49-4d68-ad1e-8acf200a3c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:3d:ad:e9:bf:6c:68:a0:08:90:40:e5:ec:fc:c5:71:f3:bb:
         6c:6b:d3:ad:4d:59:65:c0:ab:91:87:b4:b3:35:c8:78:72:72:
         ae:5d:e8:58:ec:91:31:05:af:78:c3:82:57:26:af:6e:5e:83:
         8e:4a:0c:52:fb:3a:9b:64:67:0e:e0:a1:e1:83:b2:0f:1e:94:
         33:d3:f8:51:fa:fd:d6:4c:ab:0a:f6:7d:46:fb:0c:85:d2:7e:
         2b:ea:f2:10:82:fa:3d:57:42:2a:d0:f3:f8:2f:fc:7b:8a:87:
         a1:fb:5c:dd:c7:53:31:1c:ce:b2:a1:52:3d:1e:1b:02:a8:47:
         c9:2e:36:83:07:37:02:24:63:13:bf:11:5b:9d:be:6c:f6:99:
         59:22:74:37:49:13:f7:2f:33:28:b0:33:4a:da:2c:0b:49:8f:
         b5:24:fc:94:53:17:b9:0f:86:71:27:d5:14:3d:33:e6:ef:d8:
         ed:01:f1:53:fd:68:ac:c1:cc:7f:b4:6f:ee:a1:c3:5e:9e:6c:
         d3:4c:c8:5c:7f:47:90:0f:dd:aa:f6:d1:a2:1c:90:b2:87:06:
         30:03:14:55:59:1b:96:e7:46:3a:ba:6c:e4:fd:09:e1:61:4e:
         4b:a6:f5:f5:3b:0c:cd:25:2b:4a:b7:d3:8a:da:2f:85:5a:c9:
         7c:c2:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----