Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/06536374-95e2-4718-9be1-2b0727bef22d.roa
File:                     06536374-95e2-4718-9be1-2b0727bef22d.roa (raw, json)
Hash identifier:          L5MBXsSvkEtdCLRZ+ABJUmPUFuyz4nW7uHtlBfm7JWM=
Subject key identifier:   6C:9F:A5:CA:00:42:45:0E:5E:12:68:CC:12:94:E1:49:09:21:78:B6
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3FD89846AA5031AA445FFF09E11A9CF968B94F4C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/06536374-95e2-4718-9be1-2b0727bef22d.roa
Signing time:             Thu 16 May 2024 00:00:00 +0000
ROA not before:           Thu 16 May 2024 00:00:00 +0000
ROA not after:            Thu 20 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 16 May 2024 19:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d8:98:46:aa:50:31:aa:44:5f:ff:09:e1:1a:9c:f9:68:b9:4f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 16 00:00:00 2024 GMT
            Not After : Jun 20 23:59:59 2024 GMT
        Subject: serialNumber=d5fb938d4b8a0eaff0a56d45913f6cdfe6b0a72cfe7ce7a99e80f96f7a0d0ad5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:ca:4a:a5:c0:e5:da:b9:66:6e:ed:06:2b:
                    00:e2:c3:1d:7c:36:b2:ad:1a:9c:a8:21:ec:9c:22:
                    0d:8e:79:55:f7:1b:e9:7f:1e:ae:e1:79:eb:bc:08:
                    b4:d2:85:82:c9:fd:38:e0:8c:b4:0b:61:60:ae:cb:
                    ba:a3:34:37:63:a9:70:11:3e:15:fb:37:1c:ab:9f:
                    03:8b:0a:81:10:af:b8:92:36:e1:18:d7:c3:2c:41:
                    e7:b2:42:4e:f1:0d:62:2b:0f:d1:30:d1:33:c0:d3:
                    58:04:58:10:5c:33:24:66:2e:da:65:6b:a9:5b:51:
                    35:7e:71:6b:1b:ec:f5:4f:ac:76:f2:2b:76:8a:b6:
                    ed:b4:3a:68:69:31:02:f4:be:08:0e:8b:08:6b:0c:
                    98:55:99:67:e1:8e:0c:7d:a6:7d:a7:3a:7b:d0:01:
                    8b:c1:64:13:5c:26:12:30:ca:04:09:b0:e7:a3:87:
                    87:28:13:95:5b:49:ab:67:73:77:d5:0e:4f:91:28:
                    42:cc:f1:54:2f:78:11:e2:4f:bb:b7:23:ca:b5:08:
                    d2:1f:0a:ba:df:fc:03:da:d5:62:0a:ea:2f:50:41:
                    c1:d7:36:b2:20:d7:39:d5:0d:54:2a:5a:b0:98:40:
                    5c:c3:47:80:64:30:2b:05:2f:69:c2:cd:c7:f1:b0:
                    29:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9F:A5:CA:00:42:45:0E:5E:12:68:CC:12:94:E1:49:09:21:78:B6
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/06536374-95e2-4718-9be1-2b0727bef22d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:aa:95:c8:6c:f0:96:e9:cf:6e:11:ab:58:ba:97:d3:d6:cd:
         b9:58:9e:92:92:aa:9d:b6:7e:b1:51:ec:2e:e6:a5:2a:e8:bc:
         a2:c6:fe:a6:72:83:05:4a:12:84:2a:34:9c:ef:b9:95:9f:22:
         c1:57:50:02:55:f0:20:75:e7:fe:89:15:40:f9:3f:f7:73:c0:
         5c:55:e5:0c:b1:22:42:79:39:6f:18:46:0c:8e:28:c1:8c:ff:
         09:1c:ba:5e:dc:85:22:89:88:ff:d0:08:2e:14:33:ce:88:ad:
         09:c3:5e:41:ee:ea:a6:f5:e1:50:8b:bb:38:bd:cb:d7:5d:f3:
         66:9c:87:b8:e3:0f:b4:60:61:bd:73:ba:7e:fe:a9:95:bb:5a:
         f9:0a:98:c4:cb:7c:13:6f:4b:37:09:ae:81:ee:6d:16:0d:be:
         b3:d4:fb:57:eb:b0:b0:e5:7f:22:33:55:26:20:21:08:4a:2e:
         94:75:40:ef:74:3e:19:de:1a:fe:03:1b:73:d2:5d:f7:ff:1b:
         38:f3:dc:3b:75:bd:e4:3e:ff:4c:99:37:ed:7d:80:df:a3:78:
         eb:56:ef:40:06:c6:83:fe:5d:23:61:c5:38:66:77:e3:63:a7:
         12:0d:54:13:8d:3e:d0:9e:ef:7b:28:22:ea:bd:08:cf:78:2c:
         84:78:df:49
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUP9iYRqpQMapEX/8J4Rqc+Wi5T0wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNTE2MDAwMDAwWhcNMjQwNjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNWZiOTM4ZDRiOGEwZWFmZjBhNTZkNDU5MTNmNmNkZmU2
YjBhNzJjZmU3Y2U3YTk5ZTgwZjk2ZjdhMGQwYWQ1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVVMpKpcDl2rlmbu0GKwDiwx18NrKtGpyoIeycIg2OeVX3
G+l/Hq7heeu8CLTShYLJ/TjgjLQLYWCuy7qjNDdjqXARPhX7NxyrnwOLCoEQr7iS
NuEY18MsQeeyQk7xDWIrD9Ew0TPA01gEWBBcMyRmLtpla6lbUTV+cWsb7PVPrHby
K3aKtu20OmhpMQL0vggOiwhrDJhVmWfhjgx9pn2nOnvQAYvBZBNcJhIwygQJsOej
h4coE5VbSatnc3fVDk+RKELM8VQveBHiT7u3I8q1CNIfCrrf/APa1WIK6i9QQcHX
NrIg1znVDVQqWrCYQFzDR4BkMCsFL2nCzcfxsClpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbJ+lygBCRQ5eEmjMEpThSQkheLYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzA2NTM2Mzc0LTk1ZTItNDcxOC05YmUxLTJiMDcyN2JlZjIyZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGeqlchs8Jbpz24Rq1i6l9PWzblY
npKSqp22frFR7C7mpSrovKLG/qZygwVKEoQqNJzvuZWfIsFXUAJV8CB15/6JFUD5
P/dzwFxV5QyxIkJ5OW8YRgyOKMGM/wkcul7chSKJiP/QCC4UM86IrQnDXkHu6qb1
4VCLuzi9y9dd82ach7jjD7RgYb1zun7+qZW7WvkKmMTLfBNvSzcJroHubRYNvrPU
+1frsLDlfyIzVSYgIQhKLpR1QO90PhneGv4DG3PSXff/Gzjz3Dt1veQ+/0yZN+19
gN+jeOtW70AGxoP+XSNhxThmd+NjpxINVBONPtCe73soIuq9CM94LIR430k=
-----END CERTIFICATE-----