Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09bb3f32-fd8b-4d17-b35d-dbd90b05b7db.roa
File:                     09bb3f32-fd8b-4d17-b35d-dbd90b05b7db.roa (raw, json)
Hash identifier:          0xg/nHD8PxcjziGJYrC70pfaj632tslha30KFjD6XvU=
Subject key identifier:   7C:C1:1E:6C:6D:A8:31:49:C1:12:D2:84:61:7D:21:71:96:36:AE:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4765E32A3782E0D7697436F4F6BB9A10FC3D67C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09bb3f32-fd8b-4d17-b35d-dbd90b05b7db.roa
Signing time:             Sat 12 Oct 2024 00:00:00 +0000
ROA not before:           Sat 12 Oct 2024 00:00:00 +0000
ROA not after:            Sat 16 Nov 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        204.31.0.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 15:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:65:e3:2a:37:82:e0:d7:69:74:36:f4:f6:bb:9a:10:fc:3d:67:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 12 00:00:00 2024 GMT
            Not After : Nov 16 23:59:59 2024 GMT
        Subject: serialNumber=c9eafc9e5d5ee1af8cd8d2d2e983cbd7fd566afbac4aae7178b99c9645297d4d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d4:44:bf:cd:f7:bf:3a:76:dc:bf:68:aa:9a:
                    83:c4:d4:74:16:a8:74:0b:a9:70:ca:91:90:c3:6d:
                    35:72:75:3d:a7:4d:af:7e:4e:81:12:81:94:d6:13:
                    09:4e:de:33:8e:1d:58:ac:d6:30:9e:f6:42:7a:d2:
                    c4:68:93:6c:58:83:0a:45:b2:8b:3e:b8:a3:c5:55:
                    11:b1:09:4d:3c:56:98:b6:3d:44:5c:38:13:3b:ff:
                    27:03:70:6e:91:3f:40:f6:57:45:1d:5f:3a:c8:9a:
                    a9:2c:66:cb:0c:18:66:54:4f:72:47:5c:ec:9c:7b:
                    70:86:bb:a1:de:d6:51:f0:71:36:e6:90:25:13:53:
                    33:91:8f:b1:2a:05:6f:de:5a:00:a6:cd:53:15:0b:
                    b8:f8:e9:96:17:0b:5f:43:dc:d0:4d:c4:bd:a2:39:
                    33:55:6a:51:90:ff:81:92:47:d1:ea:d6:2a:06:cf:
                    0c:b4:cc:a8:46:f9:41:d3:4f:57:bf:cf:f8:95:2d:
                    a7:66:cb:37:12:e9:ee:5f:65:3c:6d:ec:9d:31:a5:
                    21:4a:4a:1b:b1:cc:67:00:b8:87:23:6a:f1:f2:e3:
                    8f:08:44:51:91:cf:c9:cd:46:30:89:62:9c:da:6e:
                    07:e3:d7:9a:39:25:95:9d:31:82:24:c9:2d:7c:1f:
                    e7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C1:1E:6C:6D:A8:31:49:C1:12:D2:84:61:7D:21:71:96:36:AE:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09bb3f32-fd8b-4d17-b35d-dbd90b05b7db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.31.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:f5:de:36:cf:92:e9:b0:d6:31:50:3d:4b:dc:48:d5:c6:c9:
         24:de:27:cb:15:5c:e6:1f:b5:fd:2d:fc:ae:55:4b:1b:95:b3:
         a1:79:7c:5e:1d:ea:04:f1:27:76:88:1f:fb:5c:3f:78:de:17:
         c3:cf:3c:08:af:a4:9b:87:ae:dd:8d:b4:28:8f:69:f6:30:25:
         7f:2a:14:28:85:40:bc:4c:e8:e8:22:d1:f8:d2:33:ce:80:02:
         bc:2e:1f:07:bf:29:6e:67:1c:fc:6e:0a:31:8d:7e:b7:aa:02:
         5b:61:79:82:be:c2:93:ee:4d:88:72:d1:f0:51:a5:02:cc:e5:
         14:fb:57:59:fe:c6:2e:0b:92:19:62:3e:73:c8:06:8c:80:40:
         95:dd:9c:89:06:13:f7:0c:91:46:b0:c1:70:0c:eb:79:38:0b:
         84:df:ac:4c:02:fd:9f:08:c3:77:46:c5:8e:ba:ca:75:e6:28:
         b3:f4:24:05:1e:ae:20:db:d4:54:1d:fd:28:a1:ca:f0:39:f5:
         86:d7:36:70:2c:f0:00:72:68:ca:f0:37:41:63:f2:81:bc:68:
         dd:eb:9f:2d:4b:22:1b:43:72:bc:b0:09:2f:1a:89:a8:5b:9b:
         76:d0:75:cf:87:eb:4d:84:03:ab:4d:98:bc:d0:75:17:49:73:
         37:3b:fb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----