Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5b6504d3-d0ff-4186-886f-7a19ab0f35cb.roa
File:                     5b6504d3-d0ff-4186-886f-7a19ab0f35cb.roa (raw, json)
Hash identifier:          eWtcdofGjps/0Et0ISALnwLA5BiE1yCGfa4oa0Ha/6g=
Subject key identifier:   6F:4B:16:03:4D:A3:71:07:21:98:2A:64:7D:44:FC:3B:F4:84:A8:CC
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0553B3F909B0D975B07A3321B8543438ED7080E3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5b6504d3-d0ff-4186-886f-7a19ab0f35cb.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:5537::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 06 Jan 2025 23:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:53:b3:f9:09:b0:d9:75:b0:7a:33:21:b8:54:34:38:ed:70:80:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=045a3a2e433030b024cd206b0ca27c1f7ee49bcfa16113eb7085e3884332677e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9d:96:fa:84:3e:b0:a7:64:75:cc:4e:d3:c1:
                    cc:a0:ff:9a:4e:67:ff:06:80:fa:00:ca:ba:cd:89:
                    8d:df:45:13:08:f6:b4:fc:21:2b:62:c3:ce:32:6e:
                    04:de:11:66:57:5d:82:eb:18:1c:2c:25:a9:3c:75:
                    ab:0d:85:57:7f:76:ed:ea:c1:9c:de:33:e8:a1:a3:
                    44:e9:db:94:0a:6c:41:bd:77:de:40:06:a3:b6:8f:
                    8b:78:23:91:be:eb:4e:12:9e:3d:40:55:97:c8:0a:
                    3a:bb:4b:90:13:32:ea:2a:7d:b7:8d:89:55:c4:c2:
                    59:c1:9d:aa:8b:01:9e:f2:14:17:c1:9b:b9:f3:70:
                    c2:31:25:7a:31:21:56:c4:23:cf:fe:13:90:cc:07:
                    6c:fd:49:92:5c:fd:6a:9a:b1:28:28:2c:28:ca:64:
                    6f:7c:3a:a0:01:51:53:7f:e5:50:b0:c7:19:4f:92:
                    87:d8:b0:37:11:13:e6:a2:55:10:7d:30:1f:14:99:
                    55:bd:38:2c:cb:85:f8:08:fd:0e:25:25:33:38:5e:
                    96:f3:e8:9b:67:ba:12:d8:1f:2e:9d:5e:60:af:57:
                    00:34:8b:b5:40:05:ed:84:94:f7:cf:5d:71:0b:d1:
                    a6:36:29:2b:57:94:6e:70:37:4b:50:1f:15:30:83:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4B:16:03:4D:A3:71:07:21:98:2A:64:7D:44:FC:3B:F4:84:A8:CC
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5b6504d3-d0ff-4186-886f-7a19ab0f35cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5537::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:b2:ca:e8:18:89:b5:5d:ce:ed:ad:ba:02:63:a5:c0:5e:f2:
         43:6d:78:db:ee:97:76:38:6e:6b:e5:dc:6f:06:2a:c0:97:00:
         d8:42:21:40:b7:04:2a:ef:51:0e:96:b5:01:3e:e1:68:9c:2d:
         d3:dc:22:90:7f:c8:88:f9:65:e5:ca:81:a7:81:51:fd:af:aa:
         31:62:6a:be:73:f9:8f:ad:8b:58:3a:69:1b:28:b9:b1:7f:d1:
         c2:18:79:89:39:cf:1e:b0:67:41:77:87:5a:4a:75:80:6f:ec:
         9e:00:da:ee:8b:a9:72:25:3b:bd:83:78:24:60:fb:08:d2:70:
         61:5c:e9:98:c8:b9:1a:eb:21:68:7b:22:59:3c:c4:af:a2:98:
         38:39:30:8a:1f:67:91:2c:e9:85:07:80:ef:36:0d:4c:5e:73:
         22:30:ec:fa:3f:b1:72:6c:c6:ab:4e:10:eb:c4:0b:37:65:d0:
         f1:b1:87:b6:6c:0e:a8:41:53:b2:c0:7d:1f:90:12:88:90:10:
         2b:fc:db:5b:6a:7e:81:ee:35:d5:3e:1c:73:2c:5f:ec:95:61:
         ea:56:3b:f4:c6:18:1f:a4:94:39:01:9e:a7:68:55:03:39:84:
         d4:ff:2d:3f:cf:d9:42:cb:0f:e0:37:43:8f:69:ba:6f:42:26:
         71:ee:46:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----