Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d422057d-b017-4ed3-af61-26a843338ab9.roa
File:                     d422057d-b017-4ed3-af61-26a843338ab9.roa (raw, json)
Hash identifier:          ftRu9d2DGH6xy3exoDq1XNl80dJbMljfRFLZUzNMc4U=
Subject key identifier:   97:68:82:72:42:07:59:AD:93:CD:DC:87:6B:2E:F1:05:28:5C:2C:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7ABE5530B08A96D75E300E8D42226AD606200907
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d422057d-b017-4ed3-af61-26a843338ab9.roa
Signing time:             Sat 12 Oct 2024 00:00:00 +0000
ROA not before:           Sat 12 Oct 2024 00:00:00 +0000
ROA not after:            Sat 16 Nov 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        206.216.0.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 15:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:be:55:30:b0:8a:96:d7:5e:30:0e:8d:42:22:6a:d6:06:20:09:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 12 00:00:00 2024 GMT
            Not After : Nov 16 23:59:59 2024 GMT
        Subject: serialNumber=a6aef0493df6c5884decaa4c042e5cbeebe83cff39b9cfca4f715c9ad4be6354, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:e9:b5:26:f2:e5:58:b4:41:c5:35:09:24:
                    36:bf:ea:bd:02:e6:c4:10:41:40:3b:8d:b7:da:ac:
                    d0:33:42:89:ff:64:b3:84:f1:0f:e7:e4:35:cb:23:
                    2d:6d:08:1d:fd:a5:da:22:55:45:46:df:f5:69:25:
                    70:ac:11:6d:a9:33:9a:86:a3:d8:06:03:77:2b:d8:
                    41:ad:de:8a:4e:71:87:bb:df:a4:1c:e1:ab:29:45:
                    59:a4:e5:87:2d:57:81:c8:9e:4d:91:4b:2f:06:a3:
                    67:45:30:d2:d6:16:5a:22:ef:a0:a9:72:d2:db:06:
                    50:a1:85:49:7a:be:99:3e:e9:7c:84:3d:ce:b5:55:
                    e3:40:97:5e:4c:d2:05:d8:13:59:a2:a4:30:41:e0:
                    04:2c:84:a9:9f:86:73:9c:be:07:30:ed:f3:b5:7d:
                    b3:d0:f6:73:9e:26:a1:41:fd:d3:32:0e:f6:57:7d:
                    1b:6d:c2:49:e3:bd:78:8c:46:ad:5c:b2:09:98:f6:
                    5b:1a:f4:ad:4f:cd:f7:b5:3d:24:f3:51:55:4e:01:
                    05:8b:47:4a:95:84:33:79:cb:ac:f7:5d:ff:4f:42:
                    cd:f7:99:21:e7:b8:1f:76:51:d9:dc:82:5d:b2:53:
                    bb:3e:fa:a6:fa:65:bf:74:0b:41:31:0b:c8:46:97:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:68:82:72:42:07:59:AD:93:CD:DC:87:6B:2E:F1:05:28:5C:2C:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d422057d-b017-4ed3-af61-26a843338ab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.216.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:f0:c3:fe:99:18:38:de:6a:ec:c4:4b:9b:64:17:29:b5:61:
         b0:3c:34:e4:38:0a:4a:0b:61:86:36:a4:0b:ae:8f:63:1f:d9:
         25:d8:35:8c:dd:8e:f5:bc:b3:fe:8b:d5:e0:e6:86:ff:aa:d3:
         13:8e:91:4d:c5:a4:5b:fc:ae:78:89:52:1e:41:28:a1:cc:fc:
         59:f9:70:fb:d2:0e:29:17:e7:34:6a:96:16:e4:2a:fd:d8:0c:
         f9:87:88:1d:2c:f6:ab:1f:97:40:e8:93:ad:c5:61:9b:a5:db:
         8e:17:0b:3c:ce:6b:9b:fc:e3:1b:e1:33:97:3d:17:aa:f8:c3:
         24:d8:cf:db:f9:4c:a0:34:9d:56:20:ed:da:00:dc:20:b7:1e:
         ba:80:bd:38:e8:65:94:ee:3b:bf:fd:d6:ed:04:15:d6:3d:11:
         51:fe:bf:93:69:29:6c:44:d8:d1:b7:a4:84:07:60:69:0d:49:
         cc:fe:83:7c:b2:d6:0a:9f:05:e6:34:c3:7b:62:9b:30:b2:0f:
         48:fe:be:51:83:8a:6e:6a:bd:f9:f4:cc:0f:30:54:92:45:ac:
         bd:76:60:fb:55:26:62:f2:00:25:fe:06:86:b9:4d:04:dd:cc:
         43:5d:38:d1:88:5a:c7:bc:3e:95:bb:88:53:48:b2:9f:98:76:
         81:4c:22:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----