Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67d2516f-54fd-4d78-ade4-170b44e700f9.roa
File:                     67d2516f-54fd-4d78-ade4-170b44e700f9.roa (raw, json)
Hash identifier:          ngiQIN32V2g9Lq4MWwn7XA+wmQlqH+txRisF4XpgwYg=
Subject key identifier:   2C:BE:DA:B1:13:18:93:2B:5E:C5:D6:14:BE:8D:10:49:F6:EA:BD:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0632CCCE4C05CBA77A42D13BE75F27B4803B720A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67d2516f-54fd-4d78-ade4-170b44e700f9.roa
Signing time:             Fri 11 Oct 2024 00:00:00 +0000
ROA not before:           Fri 11 Oct 2024 00:00:00 +0000
ROA not after:            Fri 15 Nov 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        204.30.32.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 15:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:32:cc:ce:4c:05:cb:a7:7a:42:d1:3b:e7:5f:27:b4:80:3b:72:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:00:00 2024 GMT
            Not After : Nov 15 23:59:59 2024 GMT
        Subject: serialNumber=926fcb9c5b24235df1ae7235a30eb7c52e1f167984c3321d32a1e56e2c8eca32, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:36:e6:71:31:86:b7:f9:8b:4d:ae:33:b6:
                    16:ce:e3:5b:4e:b5:92:7b:b8:8d:6d:d4:e2:0a:f8:
                    9f:60:5b:af:71:cb:79:e7:25:09:6a:e6:f8:88:d4:
                    e4:89:cb:32:14:d9:d0:8b:5f:6c:a7:b8:47:aa:a9:
                    f4:a3:be:98:a0:1b:ac:78:11:c1:e8:a0:a9:38:e7:
                    b2:dd:86:9a:4a:5f:48:2b:38:d6:74:22:d6:b4:c2:
                    0a:7f:a6:65:07:1e:14:51:96:2a:ff:a7:d8:fe:6e:
                    66:b2:ad:b7:7f:89:0f:cb:25:c7:b6:22:5c:43:a8:
                    dd:df:fd:0e:1f:dd:5b:9f:05:12:d2:d1:70:b7:5d:
                    b7:5e:f6:ba:3e:87:67:74:28:06:bb:2a:d9:d0:5a:
                    ef:34:08:be:fd:a9:12:a6:1d:e0:14:41:3f:87:a6:
                    01:a5:13:20:52:9d:17:71:a7:0c:3f:06:b3:45:8e:
                    1e:d5:89:cf:5d:00:be:93:8f:70:8c:af:bb:6f:d0:
                    f8:0a:9d:33:87:e9:30:b6:f5:df:fa:f7:c0:87:67:
                    96:5f:35:b3:77:83:53:71:9e:e3:c6:d0:11:04:e7:
                    8c:f5:18:0c:79:5d:db:d1:8d:7e:01:e4:8b:4e:de:
                    80:96:14:61:5c:4a:88:55:be:88:53:7e:7d:17:60:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BE:DA:B1:13:18:93:2B:5E:C5:D6:14:BE:8D:10:49:F6:EA:BD:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67d2516f-54fd-4d78-ade4-170b44e700f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.30.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:df:39:e0:ab:2e:02:99:04:f8:0b:a4:c6:0f:5a:52:d0:69:
         a9:88:b4:f6:ab:a1:15:b5:a2:1d:2c:8e:a8:17:f0:e5:dc:22:
         3e:45:9a:f5:df:88:6b:19:32:2d:36:ab:1c:ce:9b:07:22:07:
         6d:e8:1c:bf:4c:8b:e8:5f:66:f3:e9:fd:e7:ce:8a:9a:c3:c3:
         6d:84:e3:4e:9b:55:32:ef:8c:56:23:be:a4:f2:ec:7b:38:09:
         16:8f:fe:d1:db:18:7d:14:d0:4c:24:6c:86:02:ae:ba:f9:2d:
         9c:35:6c:4e:e8:47:b1:2a:0e:32:3d:bf:42:17:de:71:42:4d:
         ff:5b:24:e6:e5:61:a2:a5:46:34:71:10:67:ee:fa:67:1d:df:
         eb:f5:11:37:d5:86:63:51:a5:e5:07:3a:4b:10:2a:47:a4:13:
         44:b9:66:d9:ab:94:ef:5e:9e:b1:af:50:4f:66:e0:20:f0:8f:
         95:71:09:bc:40:dd:e9:e7:f1:8c:33:22:bd:78:b0:68:2d:25:
         4e:68:4a:b4:86:07:36:1d:62:21:99:64:fd:df:f7:b0:65:2e:
         e6:70:f4:55:74:e1:a5:10:ca:7b:79:1b:76:df:2c:df:e7:f6:
         61:20:2e:64:fb:73:ea:a3:a4:1e:d2:37:49:e1:33:c8:d5:31:
         2d:54:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----