Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/69769812-2134-4e2d-9281-73976d623912.roa
File:                     69769812-2134-4e2d-9281-73976d623912.roa (raw, json)
Hash identifier:          KinqrxbV2MZxTv+COMJw6dlY76GepWNnioVZLcljOQQ=
Subject key identifier:   F0:05:3C:DC:61:69:1B:AE:57:8B:7A:26:19:FA:BE:CE:6B:73:E5:31
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       75114388A14924CF9FD53766BE154C4B44858271
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/69769812-2134-4e2d-9281-73976d623912.roa
Signing time:             Fri 13 Dec 2024 00:00:00 +0000
ROA not before:           Fri 13 Dec 2024 00:00:00 +0000
ROA not after:            Fri 17 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:30e::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 06 Jan 2025 23:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:11:43:88:a1:49:24:cf:9f:d5:37:66:be:15:4c:4b:44:85:82:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 13 00:00:00 2024 GMT
            Not After : Jan 17 23:59:59 2025 GMT
        Subject: serialNumber=ddf3db82b409207592f72d6832076dadfb77a29556bd6b3e6944c49d01758d98, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:ee:6d:19:c2:93:96:58:97:63:1d:e3:2c:
                    61:2b:c8:02:87:77:05:ff:3c:6b:8b:2f:03:c1:25:
                    30:08:19:e4:2e:f9:f5:90:11:8d:80:41:92:f3:11:
                    c4:ef:cc:56:5d:41:e2:b7:25:f2:88:95:23:3f:e1:
                    37:fd:3f:79:41:91:e9:1a:38:20:9a:e9:25:34:8d:
                    ad:0b:45:48:44:e8:2e:e5:c5:ca:48:ff:c1:c7:00:
                    28:53:9b:51:66:b7:e1:9e:10:08:c0:a9:ed:95:57:
                    e6:60:96:4b:63:04:ba:22:31:d7:30:6e:58:85:6a:
                    fa:c0:ec:ff:69:80:23:a6:b8:eb:02:82:0f:45:66:
                    26:18:10:b0:f7:4a:c7:ee:df:71:d1:dd:18:47:54:
                    38:25:9a:ae:77:b1:da:21:38:a1:6c:89:df:0f:64:
                    ec:de:ff:05:f3:4e:08:51:e3:98:0b:ff:cf:9e:d8:
                    d5:a8:02:58:f5:d0:8c:f2:6f:55:1e:18:de:51:18:
                    06:fc:97:8a:0e:f7:3f:cc:0e:aa:41:a8:c2:03:ba:
                    14:79:46:71:92:6e:5e:e6:06:8e:e8:21:ee:61:0b:
                    22:cd:55:1e:4e:ca:61:b5:27:c3:c9:bf:ca:98:a7:
                    a1:56:21:3f:dd:55:5a:3c:b3:26:e3:41:ed:83:d5:
                    62:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:05:3C:DC:61:69:1B:AE:57:8B:7A:26:19:FA:BE:CE:6B:73:E5:31
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/69769812-2134-4e2d-9281-73976d623912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:30e::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:3c:8d:c8:2f:46:9d:8f:ba:56:37:66:27:8b:bf:7c:83:48:
         25:bc:9d:9a:18:cc:24:d6:65:f4:c3:55:c4:c3:9a:2e:90:0f:
         1c:77:62:fa:ff:73:1a:c9:49:b2:1c:46:a1:5a:c8:db:8d:48:
         53:9e:51:b5:47:25:99:bb:ed:81:4a:fa:9f:00:35:78:eb:63:
         c8:81:69:f3:00:94:4b:ae:6d:56:72:5d:29:b6:7f:fb:98:e2:
         3d:45:de:69:60:a7:e8:ca:99:29:c4:34:36:c8:a9:0f:60:87:
         1a:22:23:f1:64:99:4e:a5:0f:59:12:41:01:66:2f:88:91:c3:
         1d:f8:34:48:10:ca:20:37:62:4a:cf:21:c5:74:9f:fa:4d:ce:
         bf:c1:66:ba:2d:37:21:02:12:d2:74:62:42:b7:b5:0d:93:47:
         e6:30:68:b5:58:bc:37:2c:19:af:fc:2e:ab:8a:21:47:ed:d8:
         46:74:58:8c:95:dc:d0:a3:71:a4:86:e2:f1:9f:6d:6e:7a:9d:
         56:1e:37:2e:68:5b:99:21:37:44:a8:4c:a7:ba:1d:c8:75:ab:
         9b:2a:24:ef:46:fd:9b:e8:ea:73:de:b4:27:fd:50:53:53:a6:
         b7:a6:60:a6:fa:c0:f6:49:64:59:9a:82:35:2f:a9:85:dd:45:
         b2:7b:83:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----