Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/17a2bfaa-0d48-4d23-b9f0-96ce8b5d2922.roa
File:                     17a2bfaa-0d48-4d23-b9f0-96ce8b5d2922.roa (raw, json)
Hash identifier:          UlYkUZToRrVamTYpkguEod2RUXEuFb47uOm1fo+6X1Y=
Subject key identifier:   FA:01:1A:2C:FB:2B:DD:3D:10:BD:37:EB:E1:F6:47:05:3A:77:33:19
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7A5470B8259E02C5E1401BE05C063A062B9654A3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/17a2bfaa-0d48-4d23-b9f0-96ce8b5d2922.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f3:cec0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 17 Jan 2025 18:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:54:70:b8:25:9e:02:c5:e1:40:1b:e0:5c:06:3a:06:2b:96:54:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=561472d610e565ba25cc34bfd1d5b9a90230aedbd177a1d05912dce3dae1d174, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6e:98:21:95:45:9a:2f:3f:88:04:11:0f:67:
                    24:bd:0c:bc:ed:e6:81:0a:6e:30:50:c9:a7:cd:bf:
                    af:26:b0:89:a2:50:a8:b8:4b:c2:be:78:d0:8d:69:
                    21:ee:d8:19:5e:3a:65:9e:97:c5:4c:74:26:a1:17:
                    b9:74:c1:80:4f:59:2f:5c:ed:cf:19:e0:30:0a:56:
                    1a:38:b2:50:25:03:91:27:9d:65:c0:d6:29:e1:45:
                    a3:e7:5f:f2:a1:ff:69:3a:a3:2d:55:6f:19:7a:88:
                    ae:91:b2:73:51:43:3a:ac:15:f4:4f:90:37:2e:aa:
                    8c:a4:4b:0c:84:f9:f9:93:ef:1e:50:74:8b:ab:60:
                    78:c3:79:5f:05:d7:7e:44:b4:5f:0d:72:45:30:01:
                    95:9e:ca:6d:c9:67:83:07:5f:42:44:61:e4:3d:08:
                    1d:ad:57:6b:5e:c1:36:79:a9:10:40:8a:70:27:8c:
                    43:21:61:7e:d7:bb:97:e7:61:fa:33:36:d2:1f:c5:
                    db:71:8a:80:91:84:f4:f2:9f:3a:a5:2d:11:58:26:
                    7f:87:db:ce:50:e3:03:96:65:0e:e9:7d:43:bf:a0:
                    c4:43:9e:1b:67:51:f2:57:51:83:e9:79:29:8a:f5:
                    99:aa:1c:97:b1:ee:cf:34:fb:c2:a7:ab:b8:6f:ac:
                    34:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:01:1A:2C:FB:2B:DD:3D:10:BD:37:EB:E1:F6:47:05:3A:77:33:19
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/17a2bfaa-0d48-4d23-b9f0-96ce8b5d2922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f3:cec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:73:ab:c2:34:db:f5:b5:cc:82:a9:05:4c:35:71:87:d6:47:
         d0:bc:d9:6f:50:fa:c8:78:84:4a:77:91:63:23:8e:96:e7:90:
         2d:55:ac:af:3b:50:1b:11:52:93:c1:89:80:94:81:4e:e0:40:
         0e:05:de:04:26:0a:5d:7b:6e:ae:e9:3b:91:68:1c:20:4d:f2:
         3b:6a:49:8c:7b:a8:4d:81:2e:b3:0c:9c:85:b4:f5:14:3f:75:
         1f:3f:0b:dc:d9:d8:f8:85:5b:d5:02:15:80:42:76:33:66:48:
         e4:4f:d3:80:a1:27:1c:f1:32:5c:c5:c2:c8:7f:13:88:0e:79:
         39:9d:a9:41:ce:4c:52:b8:08:c8:db:0e:30:39:98:08:65:4e:
         6e:28:6a:3b:2b:e0:3f:7a:87:a1:6d:5d:fe:5a:b1:e9:56:e3:
         96:b6:93:3c:ab:2c:3c:af:41:05:a9:68:06:a8:63:b5:e3:a0:
         ec:29:16:e6:e4:cf:4d:7d:60:95:f0:19:a0:7c:57:71:56:32:
         1b:d6:c3:c1:4b:fc:2a:9f:27:91:06:ac:60:a8:97:14:4f:42:
         9e:f3:f6:c1:47:a9:82:63:a0:2e:ff:c5:94:ea:8a:26:97:90:
         5f:d4:62:9e:01:da:ef:07:a1:e3:3a:a1:7a:ee:05:2e:fe:54:
         8f:18:f8:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----