Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dd6ef0ad-033c-41a3-ae75-97b6a524058c.roa
File:                     dd6ef0ad-033c-41a3-ae75-97b6a524058c.roa (raw, json)
Hash identifier:          6+2eE8ScqSIrIaWkdPGGyDf7dio7cQasesBSCln1MWY=
Subject key identifier:   63:27:39:08:8F:39:B5:33:7B:60:20:0D:A6:7C:C2:5A:49:EA:C9:5F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4C74D211E8ED92C248B6531E54A0750D031C17B1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dd6ef0ad-033c-41a3-ae75-97b6a524058c.roa
Signing time:             Wed 10 Jul 2024 00:00:00 +0000
ROA not before:           Wed 10 Jul 2024 00:00:00 +0000
ROA not after:            Wed 14 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 19:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:74:d2:11:e8:ed:92:c2:48:b6:53:1e:54:a0:75:0d:03:1c:17:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 10 00:00:00 2024 GMT
            Not After : Aug 14 23:59:59 2024 GMT
        Subject: serialNumber=2898f7128c44a2df3d29a737e1ce4e2aba73753cc0819c10617ad5a1bcc2c4ca, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:51:db:ae:5e:5a:f6:06:f1:b2:ee:15:3f:
                    b7:fe:9e:ed:2e:ce:4b:c9:98:f5:5d:b2:1e:07:ef:
                    84:6f:44:61:c1:89:dd:01:b6:9c:1d:e1:03:4f:b4:
                    49:32:84:f0:62:51:dc:8e:48:5c:a2:5e:5d:a9:2b:
                    6f:e8:45:ca:c8:d8:dc:c4:b3:80:cf:6b:07:cb:57:
                    4c:62:19:2c:05:62:d3:e6:1e:30:ce:61:36:72:a3:
                    b0:98:0a:90:31:86:59:4e:eb:dd:dc:4a:56:98:f7:
                    3c:6a:2e:80:a6:a3:8e:03:16:b2:24:74:08:c8:44:
                    fb:3d:fe:de:93:66:a4:a3:1e:a2:23:18:23:dd:be:
                    4f:a1:bb:c5:d5:7b:3b:16:69:dd:ff:17:f4:71:b3:
                    00:e1:1e:dd:2e:cb:dc:3a:9f:10:b3:fe:dc:f7:84:
                    96:d1:44:4a:c5:c7:62:f2:b7:77:24:ee:be:ee:6d:
                    db:6b:79:64:9a:40:ff:a4:18:18:18:69:b1:e4:d0:
                    4c:b2:fa:86:0c:5e:1b:3f:8e:14:75:0c:2f:c1:74:
                    83:c0:59:a3:42:ba:0e:dc:ac:8b:fd:c2:7a:26:bb:
                    1d:b4:5a:62:c5:70:ef:3c:0d:83:9e:d6:4e:da:b4:
                    d9:39:1a:5a:7a:37:d2:6e:3f:e7:75:15:93:1a:b3:
                    c2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:27:39:08:8F:39:B5:33:7B:60:20:0D:A6:7C:C2:5A:49:EA:C9:5F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dd6ef0ad-033c-41a3-ae75-97b6a524058c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:c2:95:c5:22:9d:cd:b3:d4:51:8c:56:e8:06:31:5e:3e:
         30:c9:f4:a4:70:75:a6:7d:96:81:16:a4:15:cf:71:b3:d0:fa:
         cd:f1:8b:9d:5c:62:73:cc:f1:8e:cf:06:9a:fe:8c:5b:b5:0c:
         6b:c3:8e:65:f5:4d:87:10:0a:5e:04:bd:b7:21:7c:b1:fd:b9:
         63:8a:af:4a:28:ed:b2:16:fe:01:88:27:0e:8a:c5:d0:03:81:
         f7:20:cd:cc:7a:15:60:9d:ea:b8:16:21:c3:30:f4:59:2e:39:
         60:22:2d:dd:fa:ed:56:eb:08:c3:8d:44:66:dd:a3:b3:94:2b:
         4b:0a:67:c7:94:ac:ff:59:8d:72:41:11:b1:b1:7e:5b:d9:56:
         fd:68:de:91:70:40:dc:88:5e:d7:1f:06:b1:48:10:b0:4b:41:
         29:e6:6d:59:ae:86:08:99:85:95:a1:2d:7b:86:70:ec:7c:70:
         f5:e8:c7:0c:1b:db:8e:38:e7:75:eb:58:75:44:59:d9:6f:de:
         b0:a2:aa:e5:83:39:b8:d8:23:31:af:7a:86:09:4e:a3:c6:69:
         8b:7f:f9:4d:4f:6c:0e:e1:85:30:5e:4e:a5:82:8f:eb:72:5f:
         0e:bc:4a:09:0e:27:01:36:80:c2:c7:a3:c1:f7:e2:7b:c1:7f:
         2d:4a:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----