Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3add044-fbee-40fe-b7e9-3861a88ad1d6.roa
File:                     e3add044-fbee-40fe-b7e9-3861a88ad1d6.roa (raw, json)
Hash identifier:          2h0vbRhfsKHHpluD7qMZ91o2uKKjjW0PWPw7aAW+jLw=
Subject key identifier:   4E:A1:24:80:B1:E0:79:57:F4:79:53:C0:D1:AA:46:D6:24:22:C2:4D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       072E00B3FE6B632BA2F91CE79A3E75FBDE68A8AE
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3add044-fbee-40fe-b7e9-3861a88ad1d6.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:551f::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 06 Jan 2025 23:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2e:00:b3:fe:6b:63:2b:a2:f9:1c:e7:9a:3e:75:fb:de:68:a8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=27a3b25a0c33f165fa1cb9228f75516f9522e6005f643971a5a93e3f5f49f0d9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:d8:f8:a9:0f:02:a7:10:d4:cc:e0:f5:fa:
                    79:78:19:95:22:e5:ad:f2:33:f2:68:20:04:80:f3:
                    ef:4d:a2:e5:49:71:d9:eb:09:36:82:3c:be:02:fb:
                    96:2c:99:3e:79:f3:67:04:14:33:54:df:27:92:06:
                    8a:35:99:26:bc:3c:94:5c:87:a2:0b:b4:83:a4:81:
                    6f:cd:03:9b:c5:f3:63:6a:4c:e0:ce:a8:62:18:e6:
                    87:22:e2:2b:3f:16:a7:9d:20:de:e0:77:ff:17:37:
                    21:0f:45:55:49:8e:b7:91:b3:53:91:02:cf:87:cc:
                    1f:6f:13:b7:39:af:44:88:13:7a:26:5c:8f:bd:88:
                    39:61:e8:f3:e5:fe:5d:1b:d7:e2:6b:db:22:82:3d:
                    8e:61:3c:78:02:0f:42:a9:4d:89:32:09:0b:f6:95:
                    a7:ce:ff:6e:0d:8e:55:2f:6a:f7:11:da:33:fc:50:
                    d4:f4:69:d9:e5:62:ae:53:85:72:dc:f4:fd:51:2c:
                    8f:ff:31:79:08:ac:52:70:e1:80:ff:a0:66:31:ac:
                    1d:83:45:d8:1e:51:2e:a3:1b:e3:68:21:34:b8:6c:
                    16:24:87:61:14:fa:16:ca:21:c4:27:c6:b0:ad:d7:
                    97:1b:de:01:02:99:a0:65:13:98:76:15:a2:7b:58:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A1:24:80:B1:E0:79:57:F4:79:53:C0:D1:AA:46:D6:24:22:C2:4D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3add044-fbee-40fe-b7e9-3861a88ad1d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:551f::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:3e:b6:61:fb:a1:c6:9f:93:2f:9d:ec:54:d9:38:ec:1c:a5:
         93:7b:bc:3f:d8:22:b5:e4:5e:b9:ea:da:57:e2:6b:79:c7:32:
         09:50:79:7d:d3:40:ba:7c:56:76:62:88:ae:a2:b6:df:72:05:
         48:12:f6:5c:da:9b:14:ae:90:13:a4:50:17:45:e4:26:f0:c2:
         d0:c9:1f:b0:5b:ec:80:1d:35:00:e8:72:66:72:15:9f:41:2b:
         47:e0:ce:26:6d:ac:ab:a5:04:0c:57:09:74:85:12:f9:f3:8f:
         d4:7c:7d:47:09:3b:f4:ce:d9:a5:ca:88:de:dd:cc:bf:dc:59:
         aa:b4:0f:8d:af:6d:be:93:ff:09:d3:7f:f3:38:26:00:17:f9:
         ad:00:c1:38:b9:90:60:05:57:70:10:55:d0:f1:d3:ae:05:a3:
         52:92:e4:03:b7:96:e7:7c:68:a8:2a:4b:9c:58:0b:bf:8f:9f:
         eb:05:3c:c3:1d:a2:aa:ed:a1:13:9f:bc:ab:e3:f4:1a:44:5e:
         e0:98:f1:fc:9d:1c:94:14:3a:65:98:3f:85:93:64:50:1f:e0:
         53:08:99:50:3d:76:c0:3a:f5:0d:f3:a9:44:6d:dc:d5:27:f1:
         cf:c6:10:2c:e1:03:d6:fd:b9:ef:f7:07:d3:01:5e:45:62:7d:
         21:2b:d2:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----