Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/824ac83b-b484-4c86-91ba-4445f42ddf35.roa
File:                     824ac83b-b484-4c86-91ba-4445f42ddf35.roa (raw, json)
Hash identifier:          UZIKYvPCyWEum3A8iDw1oCE4+2fHULwcMTU/O+UMH2Y=
Subject key identifier:   38:14:2B:BD:AF:84:77:7C:8D:54:AA:DA:9A:ED:12:97:5F:64:09:4C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       681909B2D0CC43530ACDB2586B33685E6797F571
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/824ac83b-b484-4c86-91ba-4445f42ddf35.roa
Signing time:             Tue 17 Dec 2024 00:00:00 +0000
ROA not before:           Tue 17 Dec 2024 00:00:00 +0000
ROA not after:            Tue 21 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:88::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 06 Jan 2025 23:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:19:09:b2:d0:cc:43:53:0a:cd:b2:58:6b:33:68:5e:67:97:f5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 17 00:00:00 2024 GMT
            Not After : Jan 21 23:59:59 2025 GMT
        Subject: serialNumber=520d3c875722f4402fb55ebf54f220ab2776a3a7c111cced8be48b6fdcab9b95, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:94:9b:3d:60:05:65:73:c5:86:5b:a0:3e:01:
                    db:2f:e4:9b:15:ba:8b:70:eb:b7:e0:c0:28:4b:e5:
                    a7:f9:dc:c5:d1:e8:50:4c:23:96:9a:73:af:e0:02:
                    a9:f6:41:c7:d6:6b:fd:9d:c7:96:0c:8a:92:47:49:
                    25:07:5e:26:42:b3:de:47:be:e5:cc:01:05:18:10:
                    e4:f2:aa:f5:22:c4:ba:73:7a:5f:d6:cf:86:29:d8:
                    ef:3a:1c:6d:af:a3:82:c7:e6:4d:b5:c8:52:da:97:
                    ce:f4:42:b9:2d:4a:95:5e:06:81:f2:a1:1b:34:4d:
                    68:53:7c:62:6c:1e:1c:d9:72:28:e1:07:ed:f9:5d:
                    3f:09:6d:bb:c5:c2:03:c7:52:8e:cc:52:99:36:db:
                    05:90:80:d1:1d:97:58:a1:1c:c9:fe:5a:8f:8d:eb:
                    19:61:9c:b6:e3:61:79:4c:28:ad:bb:2e:28:ff:40:
                    76:4e:c3:f9:c3:43:c5:62:88:9e:86:1c:fa:37:39:
                    a3:2b:77:8a:d5:eb:84:ac:52:bc:ac:49:ce:df:69:
                    19:c3:28:13:79:ba:40:21:05:14:fe:0e:0d:8b:76:
                    7d:7f:70:34:82:85:c3:8f:c6:b1:b3:3e:42:16:78:
                    c5:92:6b:c9:e8:74:99:21:8f:30:60:d7:7f:23:da:
                    57:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:14:2B:BD:AF:84:77:7C:8D:54:AA:DA:9A:ED:12:97:5F:64:09:4C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/824ac83b-b484-4c86-91ba-4445f42ddf35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:88::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:89:75:fa:99:92:31:3a:da:e0:39:e9:3a:a7:56:a6:2a:d4:
         57:9b:12:27:62:55:a5:71:2c:c5:65:92:5b:96:4d:1a:25:f0:
         a3:64:6d:a7:83:81:dd:ed:2f:57:6b:74:8e:10:09:2c:06:48:
         6a:20:23:31:98:17:7b:41:9f:6e:49:f4:57:4d:5b:68:d0:e2:
         67:20:c2:b0:64:b9:b5:e7:f9:ed:33:66:26:98:4f:22:10:e4:
         ca:41:a7:5a:1d:fe:af:57:c0:e7:2e:d6:2f:fb:14:8d:f1:39:
         01:6b:f6:4f:49:57:7b:3e:10:d4:33:c0:b9:82:f1:1c:60:f9:
         3d:a0:d0:11:4e:b5:26:dd:44:07:66:e4:99:e9:b0:0e:fc:18:
         00:a5:08:60:f2:c3:bf:7e:37:14:38:69:9e:ad:00:b5:d6:49:
         9a:5a:a4:71:a3:b9:20:e9:8f:9c:ef:87:3e:e4:cd:82:43:b4:
         d4:62:c0:f2:44:a7:dd:fc:46:ae:cd:02:e7:82:28:f0:94:4b:
         fe:56:83:f3:c7:f5:0e:ea:2a:0e:5a:0d:ae:c5:67:b2:90:8e:
         d6:1c:05:69:10:dc:1d:37:60:a4:6c:c0:4e:d4:12:e5:7e:45:
         6b:09:22:71:f4:fa:b9:f9:a1:01:c4:54:12:cd:8b:7b:45:a2:
         5f:6e:76:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----