Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4aa98e13-9b17-4acd-a867-3b3dfc9dd8c2.roa
File:                     4aa98e13-9b17-4acd-a867-3b3dfc9dd8c2.roa (raw, json)
Hash identifier:          Ae8nNJE/I9nO2ObNZSkORZuR+Ba3E+IFqv+16wSuYhY=
Subject key identifier:   4D:D7:AA:FA:B8:43:9C:BE:B5:CB:5D:23:31:11:33:5C:CD:56:92:A9
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1B17738F7E6AD6D1A204EF95C6A57F86134760AB
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4aa98e13-9b17-4acd-a867-3b3dfc9dd8c2.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f003:a200::/40 maxlen: 48

Validation:               Failed, certificate revoked on Mon 06 Jan 2025 23:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:17:73:8f:7e:6a:d6:d1:a2:04:ef:95:c6:a5:7f:86:13:47:60:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=8ac0481dec70d8d50232e5344ee7579fcd9d464bbac6b5d538c4fc35a6ff00b1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:e6:28:f1:2c:66:2b:5f:13:92:5f:d7:71:
                    7b:4e:07:5c:61:f6:e9:da:6b:35:96:cf:24:a2:b9:
                    57:6a:28:bc:c5:59:4d:07:62:41:0d:e8:bf:72:49:
                    db:91:9e:f3:d1:4a:47:10:37:c8:4e:e0:f1:33:b2:
                    ca:57:e5:0d:8c:1e:98:f4:98:97:de:12:20:81:d1:
                    09:23:ca:50:1e:cd:64:58:15:79:12:75:b6:c9:2a:
                    5c:d7:3c:59:04:26:0c:b1:2a:6d:ca:b3:ae:b1:0a:
                    8a:30:85:7e:54:a2:5b:bd:20:67:7e:57:2f:f2:0f:
                    a1:b8:5e:c9:92:82:5b:3b:b2:04:47:21:b2:f4:45:
                    ca:25:e0:ae:df:ef:15:50:e0:26:4d:38:9d:41:b9:
                    bf:0d:87:1c:01:a3:0d:4e:23:08:66:b2:5c:9f:8f:
                    c5:8d:ad:37:68:e3:a3:a2:1f:96:bc:61:ba:ba:26:
                    ba:bb:7e:22:e9:ee:e5:ae:39:82:dd:f9:2c:9d:f7:
                    e8:df:81:0b:86:24:c6:03:3f:a0:72:4a:1d:90:a1:
                    20:1e:c4:bc:88:be:b1:a4:9f:dd:0a:cd:c2:8d:3e:
                    fa:9a:20:1b:7b:df:e3:89:02:5c:b3:2b:66:14:08:
                    ce:3a:a2:cc:4d:99:f5:b6:e4:f4:d5:c6:15:76:e4:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D7:AA:FA:B8:43:9C:BE:B5:CB:5D:23:31:11:33:5C:CD:56:92:A9
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4aa98e13-9b17-4acd-a867-3b3dfc9dd8c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f003:a200::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:33:17:2b:c7:ad:01:80:4a:32:dc:2b:ef:71:89:82:2a:b5:
         92:b9:5c:6c:38:02:3f:f9:0e:84:23:3d:64:ac:63:aa:7b:5a:
         c5:60:99:d0:cf:e9:50:97:09:2c:d4:13:5e:4a:5d:fb:20:72:
         6c:f1:61:39:bb:91:3c:fb:aa:7b:1d:9d:2a:80:b3:cf:48:38:
         b6:86:9a:9f:0b:aa:43:f1:2c:40:cd:18:7d:90:78:e6:e7:92:
         e7:bf:e6:93:37:f8:db:09:3a:30:fa:d8:99:55:4e:64:e7:f1:
         c2:4d:3b:62:69:b8:f6:ce:54:38:fe:52:bc:e0:1d:8f:24:25:
         cb:1f:b0:4e:cf:d2:2e:4b:85:4d:7c:db:dc:2c:60:83:8b:56:
         2d:bc:8b:79:56:42:4a:3b:4a:91:26:d6:70:6f:f9:6a:c1:0f:
         89:d2:fc:d4:f9:6b:61:39:61:b3:c6:8f:13:6d:9b:2a:b8:66:
         ac:ea:7b:64:6c:e9:60:96:3a:23:32:bd:0b:4a:29:a6:44:c9:
         74:c0:1d:67:a3:98:ff:55:96:50:dd:da:19:ee:b9:5a:20:88:
         45:ad:2d:d9:d7:f4:5d:c0:a5:44:54:db:fe:80:6e:14:af:71:
         00:3a:7c:96:90:d3:79:57:08:18:bf:dc:cf:30:eb:f8:a6:97:
         bf:e4:e2:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----