Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2ddc94da-fb72-4ec2-90ab-5c4acd28f752.roa
File:                     2ddc94da-fb72-4ec2-90ab-5c4acd28f752.roa (raw, json)
Hash identifier:          gVvN3YA+wVJYOuNPTATds+dBKf3yFo5062mTPIr8VkI=
Subject key identifier:   61:A1:D7:30:4C:5F:10:18:38:D1:F8:89:E0:0A:24:34:57:2A:84:19
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       78C88AD6C89F9E75B54F2D13084DF1B58456919D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2ddc94da-fb72-4ec2-90ab-5c4acd28f752.roa
Signing time:             Fri 03 Jan 2025 00:00:00 +0000
ROA not before:           Fri 03 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:ef00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Mon 06 Jan 2025 23:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c8:8a:d6:c8:9f:9e:75:b5:4f:2d:13:08:4d:f1:b5:84:56:91:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  3 00:00:00 2025 GMT
            Not After : Feb  7 23:59:59 2025 GMT
        Subject: serialNumber=02b48ed1e55941960f305c4ee7a1b9b02c76fe89b02d0ad4593b730ec6fc20fe, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:eb:69:d2:6a:27:c1:b5:bf:0e:da:63:d2:
                    27:d3:12:dd:e0:e6:78:ec:85:37:82:ec:5c:d5:11:
                    a5:2c:29:b2:df:7f:de:27:e8:1a:46:34:dd:db:d1:
                    7a:5f:03:54:82:58:3c:06:a8:bb:78:c8:bd:c3:2c:
                    1a:21:60:9c:0b:1f:31:ae:e0:c6:15:c1:ae:2f:eb:
                    b2:78:07:96:6a:7d:92:d4:af:27:cb:c0:4e:e4:4c:
                    7c:99:13:50:5b:13:08:49:e5:52:31:2f:4d:95:2d:
                    a7:38:e2:45:1f:23:1c:4e:e3:07:e6:44:7d:cd:4a:
                    b5:7b:af:06:61:6d:1f:93:49:fe:ca:b2:c2:f2:75:
                    2a:f6:5e:ce:d9:bb:12:96:68:34:ee:25:6d:da:1b:
                    7c:11:3a:9e:73:e0:14:4d:f6:50:ab:6a:df:84:d0:
                    31:71:5c:1d:d9:e3:ec:09:be:72:5e:9a:16:45:d3:
                    cf:fc:cb:be:ad:85:25:c1:08:fd:6d:3c:01:38:28:
                    aa:2d:45:f2:51:01:e5:1a:2d:8e:41:c5:75:3c:b5:
                    5a:ba:12:50:2b:5f:36:5b:24:f8:35:87:46:56:00:
                    46:35:7c:12:e2:e8:72:3d:de:45:a4:3b:9e:71:98:
                    3d:59:76:6d:37:6e:e8:50:d2:17:58:c1:00:56:6d:
                    4b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A1:D7:30:4C:5F:10:18:38:D1:F8:89:E0:0A:24:34:57:2A:84:19
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2ddc94da-fb72-4ec2-90ab-5c4acd28f752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ef00::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:c1:11:38:a7:34:41:97:89:f2:af:3c:a9:de:c4:29:a9:67:
         2a:0a:30:1f:a6:39:1b:0a:31:87:83:97:f8:69:69:20:c1:24:
         00:1a:26:97:4b:a7:c0:a8:5e:60:c2:f0:58:82:af:44:19:6d:
         c7:50:d4:8c:1d:5c:53:8e:75:0c:11:53:9f:59:c9:40:c2:f9:
         8c:4a:53:01:1f:58:e1:4f:53:2f:1d:0c:d3:1d:cb:35:2d:4a:
         f3:f5:f4:f3:c2:78:87:55:a6:80:b6:1f:f1:21:c0:01:67:26:
         72:9f:da:94:dd:9d:b7:1b:93:3a:39:62:19:0e:6c:3c:c3:19:
         59:fa:df:f8:77:2f:6c:13:a7:96:dd:1b:2d:3a:d7:a6:70:a8:
         0a:2f:98:8d:3c:27:dd:b9:73:bd:da:ca:16:a9:9d:82:0c:a5:
         72:79:b5:c9:fe:4a:8e:64:80:d2:c3:89:93:fd:d6:36:4a:b4:
         c7:8f:ee:3b:a4:42:2a:22:f1:e1:2c:fc:8f:cb:a2:21:d1:08:
         00:f0:28:16:15:e0:c0:1c:60:ac:20:99:f8:69:3d:83:6d:0c:
         3b:13:6d:70:73:87:e6:45:18:74:0a:80:ee:e8:14:6b:74:44:
         f5:20:5f:57:15:1f:5e:6c:74:73:a6:62:81:ea:e0:67:25:27:
         37:74:4e:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----