Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5255ba8-1d11-42e9-b156-973ca1921218.roa
File:                     e5255ba8-1d11-42e9-b156-973ca1921218.roa (raw, json)
Hash identifier:          AXuiUfYx8Zlz0Zj7AWMcVaZruB9ErqzC9uAJh4vUH+Y=
Subject key identifier:   AA:D7:03:23:24:D9:FA:6A:61:74:48:2A:15:00:16:87:C5:0B:8F:4A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       54D6FC30EDD72F01A624875389605DD706298478
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5255ba8-1d11-42e9-b156-973ca1921218.roa
Signing time:             Wed 11 Sep 2024 00:00:00 +0000
ROA not before:           Wed 11 Sep 2024 00:00:00 +0000
ROA not after:            Wed 16 Oct 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 07:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d6:fc:30:ed:d7:2f:01:a6:24:87:53:89:60:5d:d7:06:29:84:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 11 00:00:00 2024 GMT
            Not After : Oct 16 23:59:59 2024 GMT
        Subject: serialNumber=1347391a6474711c2d09b7a48901d042e759d1b83d7ce54de8d9fa2dc9d14252, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:b7:91:24:e4:f3:6a:9e:cf:56:5c:f1:9a:
                    fd:d5:3f:a3:a8:b3:26:09:2a:7c:34:ac:7e:56:91:
                    71:da:9e:95:82:d4:cd:38:92:49:01:71:a2:39:28:
                    08:69:43:c5:6b:cb:81:81:02:1a:ae:6c:3f:28:29:
                    c5:af:d8:1a:0c:5c:fd:c4:28:59:e8:e2:1f:13:e0:
                    0d:b4:af:07:4b:e5:3c:43:56:3f:df:3f:59:fd:85:
                    52:4b:77:70:f4:5a:a2:de:8d:0d:47:36:ce:4a:55:
                    0a:dc:16:45:98:56:ac:41:11:16:d1:e7:dd:b3:c1:
                    84:f1:11:6e:aa:4f:af:c6:4c:ed:b0:d9:e8:ab:f0:
                    5f:4a:63:e0:06:90:ea:61:4c:d9:2a:29:27:c5:30:
                    51:14:f7:fa:58:05:c0:25:ab:f7:c7:f3:ce:47:0d:
                    df:91:bf:02:01:b8:f6:2d:61:59:ae:32:b3:8f:33:
                    8c:95:c5:a5:88:f0:48:d6:ae:cf:3a:a4:d0:c2:54:
                    01:56:66:e6:18:ff:35:51:51:91:87:4d:73:b5:0b:
                    f0:d9:a2:9f:6d:de:f3:70:06:85:25:bc:e0:0d:2f:
                    7e:fc:5f:ca:f5:a8:b2:18:27:c0:57:3f:f6:87:23:
                    51:e1:8c:fd:2b:55:53:fd:2d:15:1f:45:3e:33:ad:
                    f7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D7:03:23:24:D9:FA:6A:61:74:48:2A:15:00:16:87:C5:0B:8F:4A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5255ba8-1d11-42e9-b156-973ca1921218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:37:50:0f:28:01:cb:6c:7f:6a:ac:07:73:6c:03:4e:e9:92:
         98:81:2e:12:4a:8f:22:5b:a7:32:a1:fd:62:79:bc:fe:3f:42:
         8f:7b:6d:43:8a:54:58:9b:b1:79:b4:1f:3e:2f:3d:97:e5:38:
         a6:bd:32:b6:78:45:32:6c:5b:05:b0:96:ea:13:e4:d7:79:d1:
         4c:5f:90:59:93:bd:26:47:41:63:86:4b:ad:b5:bf:2f:6f:b5:
         69:3a:5e:8d:18:8b:6d:28:ef:87:5a:29:16:d1:fb:e3:c4:c6:
         7a:74:b5:4a:35:da:4a:3c:73:e8:40:bd:89:45:5c:c6:bf:58:
         21:e8:d1:d3:d1:b8:a2:9d:69:ed:4a:9f:d8:fc:f6:67:b0:a0:
         9b:28:d1:a4:a0:95:4c:50:41:1f:9a:79:0c:38:1b:88:f5:c6:
         f6:67:f4:b3:d0:3e:0d:f0:0a:e1:99:7d:6b:96:9f:8b:62:91:
         4f:81:5e:3b:6a:de:30:b3:de:4c:f5:55:7d:06:0d:06:35:f9:
         94:95:c1:90:a2:cc:83:e7:a3:91:1e:73:26:28:24:dd:f9:b6:
         5d:7f:6c:ad:ae:41:99:dd:37:00:11:1d:94:55:d0:d0:71:ad:
         8b:94:9c:da:4e:64:92:24:c3:90:52:e6:93:4b:27:89:c6:30:
         25:d1:26:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----