Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fd8f34f5-97c8-4ac1-bb0d-f0b93bc9c9af.roa
File:                     fd8f34f5-97c8-4ac1-bb0d-f0b93bc9c9af.roa (raw, json)
Hash identifier:          RTIgP5uMe+0wgVMeSrIrDUjnrQDgzG0DUZWthC/5vFg=
Subject key identifier:   E2:FE:A6:B4:8B:82:46:49:D0:9F:BB:7E:53:EC:74:EB:BA:BE:7B:07
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5EE38D372FA4D8ADCFF4E46F4DEF59C9241FE935
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fd8f34f5-97c8-4ac1-bb0d-f0b93bc9c9af.roa
Signing time:             Fri 19 Apr 2024 00:00:00 +0000
ROA not before:           Fri 19 Apr 2024 00:00:00 +0000
ROA not after:            Fri 24 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:f00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 14:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e3:8d:37:2f:a4:d8:ad:cf:f4:e4:6f:4d:ef:59:c9:24:1f:e9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 19 00:00:00 2024 GMT
            Not After : May 24 23:59:59 2024 GMT
        Subject: serialNumber=a39ccf20f9c68c6b21925fe378ac15a116ef65b716d131b7edb89ec9a455c2d7, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:4e:47:7c:46:61:bf:f6:e1:04:83:12:7c:
                    bf:a6:4b:04:45:5b:b8:40:86:57:89:1a:b4:dc:76:
                    9c:43:7a:e2:ab:1c:46:c5:09:ba:87:f5:d8:48:c7:
                    1b:ac:14:f5:e7:8e:6f:b2:b7:12:fb:8f:3c:55:21:
                    51:69:52:97:2c:ad:97:37:c1:af:e9:1b:8f:35:21:
                    4d:f8:f7:41:ca:61:2b:95:7f:2a:38:05:7e:a7:fa:
                    2e:c2:58:7c:bd:2c:d4:9a:8e:59:c9:4e:96:45:c1:
                    4f:cf:a6:f7:cd:71:6d:5b:b9:1e:52:15:ab:e7:c3:
                    2c:37:5c:71:90:3a:40:f9:12:7e:5a:46:8c:c8:3c:
                    af:55:54:a3:68:02:ee:7d:6d:83:86:87:18:f2:1e:
                    18:85:2a:08:b9:b8:f3:18:cc:f5:c9:1a:f8:42:d9:
                    ce:66:84:f2:2a:d1:3b:a7:92:e7:48:a9:3b:eb:ae:
                    37:ae:00:ec:67:e3:10:02:c8:e9:9b:0e:6a:86:78:
                    2d:7f:fc:9e:9c:11:83:ee:51:d7:e6:6c:b0:03:64:
                    21:aa:f9:fa:b0:de:44:96:a1:7f:7d:dc:fb:04:b5:
                    bb:0b:b8:1c:f5:b0:8a:1b:45:6f:98:c5:1e:66:b5:
                    9a:c1:6d:c7:29:01:55:d1:1d:37:d5:fc:43:62:af:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FE:A6:B4:8B:82:46:49:D0:9F:BB:7E:53:EC:74:EB:BA:BE:7B:07
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fd8f34f5-97c8-4ac1-bb0d-f0b93bc9c9af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:85:1d:a8:28:3c:2f:11:87:50:25:a2:c1:0f:f0:7e:e2:76:
         34:78:4a:ce:ed:74:fa:82:a3:2c:38:a0:db:4c:c4:23:68:e3:
         80:ac:a8:e3:09:83:a0:05:88:94:33:72:fd:9d:4e:94:cc:55:
         27:60:3c:1f:a4:64:19:2d:f5:37:e8:f5:5b:63:24:37:99:86:
         f6:ed:d1:af:5f:d6:d0:a5:e1:60:6a:96:60:dd:17:09:1a:5c:
         68:b2:08:e4:37:95:7e:8f:6b:1b:a0:a7:4f:21:63:10:0c:f4:
         58:87:e0:4a:98:69:62:85:23:9c:fe:ee:8d:93:17:87:67:03:
         32:18:76:88:a8:ae:20:ae:95:f6:bb:54:87:51:1a:b3:45:ac:
         3c:61:00:dd:1c:54:34:f6:cc:be:00:db:46:e5:ce:37:50:39:
         78:27:06:ad:33:b5:28:93:1f:54:eb:1a:fa:ae:09:57:ca:3b:
         e2:68:45:63:5a:ad:9f:16:6e:61:37:c4:ca:1e:12:46:58:8f:
         67:4d:b8:e0:4c:3a:f8:25:07:e3:34:91:b9:28:0c:2c:33:e9:
         b6:13:2a:4b:94:20:ca:05:cd:53:fa:4f:7a:dd:7e:83:e9:ca:
         9b:1f:48:38:f3:82:92:3c:dc:f2:da:07:49:04:88:ba:77:98:
         01:dd:d8:97
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUXuONNy+k2K3P9ORvTe9ZySQf6TUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDE5MDAwMDAwWhcNMjQwNTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMzljY2YyMGY5YzY4YzZiMjE5MjVmZTM3OGFjMTVhMTE2
ZWY2NWI3MTZkMTMxYjdlZGI4OWVjOWE0NTVjMmQ3MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKQU5HfEZhv/bhBIMSfL+mSwRFW7hAhleJGrTcdpxDeuKr
HEbFCbqH9dhIxxusFPXnjm+ytxL7jzxVIVFpUpcsrZc3wa/pG481IU3490HKYSuV
fyo4BX6n+i7CWHy9LNSajlnJTpZFwU/PpvfNcW1buR5SFavnwyw3XHGQOkD5En5a
RozIPK9VVKNoAu59bYOGhxjyHhiFKgi5uPMYzPXJGvhC2c5mhPIq0TunkudIqTvr
rjeuAOxn4xACyOmbDmqGeC1//J6cEYPuUdfmbLADZCGq+fqw3kSWoX993PsEtbsL
uBz1sIobRW+YxR5mtZrBbccpAVXRHTfV/ENir4ddAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU4v6mtIuCRknQn7t+U+x067q+ewcwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2ZkOGYzNGY1LTk3YzgtNGFjMS1iYjBkLWYwYjkzYmM5YzlhZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzA8AswDQYJKoZIhvcNAQELBQADggEBAJiFHagoPC8Rh1AlosEP8H7i
djR4Ss7tdPqCoyw4oNtMxCNo44CsqOMJg6AFiJQzcv2dTpTMVSdgPB+kZBkt9Tfo
9VtjJDeZhvbt0a9f1tCl4WBqlmDdFwkaXGiyCOQ3lX6Paxugp08hYxAM9FiH4EqY
aWKFI5z+7o2TF4dnAzIYdoioriCulfa7VIdRGrNFrDxhAN0cVDT2zL4A20blzjdQ
OXgnBq0ztSiTH1TrGvquCVfKO+JoRWNarZ8WbmE3xMoeEkZYj2dNuOBMOvglB+M0
kbkoDCwz6bYTKkuUIMoFzVP6T3rdfoPpypsfSDjzgpI83PLaB0kEiLp3mAHd2Jc=
-----END CERTIFICATE-----