Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6fa18f5-7ddf-4fc1-a052-77d4e2ca36f1.roa
File:                     e6fa18f5-7ddf-4fc1-a052-77d4e2ca36f1.roa (raw, json)
Hash identifier:          bYpPhKDW9k43U44w5wZRXgvHP4JBgCvKxMDroePFIWk=
Subject key identifier:   66:B9:AF:AE:39:30:DD:95:A7:34:64:3D:44:F6:03:21:14:85:D9:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08766A510E695D7D84EE610D2636FCF576AA37A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6fa18f5-7ddf-4fc1-a052-77d4e2ca36f1.roa
Signing time:             Fri 11 Oct 2024 00:00:00 +0000
ROA not before:           Fri 11 Oct 2024 00:00:00 +0000
ROA not after:            Fri 15 Nov 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        209.111.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 15:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:76:6a:51:0e:69:5d:7d:84:ee:61:0d:26:36:fc:f5:76:aa:37:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:00:00 2024 GMT
            Not After : Nov 15 23:59:59 2024 GMT
        Subject: serialNumber=26ebd8f89278db7baa1369f55ed4800281dff79e7de2882a6b3fcd85f17bc3b3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:44:75:33:c2:41:72:99:a5:8f:e0:16:48:
                    18:12:30:d5:e8:f5:22:2d:9f:97:1c:1b:95:85:bc:
                    f0:66:58:68:2b:b3:25:dc:38:2e:da:35:fa:29:cc:
                    50:d8:8b:06:18:55:f2:85:dd:c9:bc:e6:03:47:c3:
                    0e:a0:11:d4:3b:ec:25:98:3e:56:1d:27:7a:fa:75:
                    0f:83:07:28:77:52:65:b3:58:fc:63:cb:9d:34:57:
                    a8:91:81:32:18:aa:cc:3f:9e:5d:f4:bb:89:4d:d8:
                    39:21:bd:89:fa:12:78:13:83:34:e1:ed:ae:60:78:
                    cd:6f:51:82:14:cc:5d:e6:38:64:93:b0:bb:1e:e5:
                    73:34:d3:f7:24:05:c1:30:5d:c7:2a:4c:6e:7e:08:
                    aa:88:c9:91:43:3a:7d:71:66:77:83:8a:55:b3:b7:
                    59:3f:95:78:ed:90:e1:4c:99:62:71:98:fe:91:27:
                    c6:97:b9:3b:cd:cd:7c:75:2a:33:8d:ad:59:13:43:
                    c0:9d:80:c1:18:62:67:40:65:e3:61:31:5f:5a:ba:
                    4a:e5:e0:cb:73:2d:88:77:e6:99:e6:de:5b:0f:19:
                    84:3a:f2:93:a6:57:bd:19:f5:fb:9a:76:11:f1:68:
                    90:66:cf:47:6f:ef:74:db:8b:61:fb:e6:8b:b1:46:
                    a6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B9:AF:AE:39:30:DD:95:A7:34:64:3D:44:F6:03:21:14:85:D9:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6fa18f5-7ddf-4fc1-a052-77d4e2ca36f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.111.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:9c:2e:47:f2:df:7c:d2:79:83:ee:75:3d:24:ff:ee:29:8f:
         30:cc:71:16:76:81:8e:7d:36:73:71:77:be:55:0d:13:8c:15:
         68:eb:0d:c2:8c:66:ca:ff:69:b7:d4:3e:6a:dd:c6:db:5e:12:
         f8:e0:ac:f0:3f:90:69:e7:17:70:c7:e6:eb:d5:4d:af:49:1d:
         42:b6:b3:14:1b:f5:c1:d1:85:d8:28:e9:d1:57:80:9c:6e:15:
         8a:e8:2f:d1:40:1e:d8:f0:34:53:33:8d:a3:cc:ea:7f:d2:4e:
         49:a9:93:e9:c4:18:fe:fd:de:e5:10:4f:0b:72:32:50:85:b7:
         b3:23:d3:38:01:a2:67:4d:16:f4:9d:64:64:ec:2d:91:69:47:
         26:e5:e5:f0:36:14:92:02:76:e7:1c:70:ef:fc:7b:44:f7:2a:
         35:8c:68:92:53:e8:e0:81:77:b8:dc:52:4d:8f:7a:73:7c:9f:
         ba:37:b2:9f:ae:15:6a:d5:17:86:57:8f:97:18:00:7c:38:16:
         00:66:0f:98:61:f1:88:64:54:6e:1e:a9:cf:9b:93:b6:cd:a7:
         dc:14:11:1f:bc:62:0b:63:5f:5d:15:56:16:de:fe:d3:d6:ca:
         89:e0:41:57:9b:16:f3:1d:44:14:ba:57:b2:58:e6:6c:b0:3a:
         33:ad:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----