Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0f9f2747-17cf-41f1-a09b-2c054fff87e9.roa
File:                     0f9f2747-17cf-41f1-a09b-2c054fff87e9.roa (raw, json)
Hash identifier:          qSI6UAjfPx6Z+65xxKUDi6FqNm3IhwOzZSVa84kSGl4=
Subject key identifier:   F2:6F:EC:1E:13:9E:8C:10:57:87:EC:A6:2C:15:33:D4:63:E5:97:4F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       679A226883B3E7D92548AFDA87F1D3BF6089A0EC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0f9f2747-17cf-41f1-a09b-2c054fff87e9.roa
Signing time:             Fri 22 Dec 2023 00:00:00 +0000
ROA not before:           Fri 22 Dec 2023 00:00:00 +0000
ROA not after:            Fri 26 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9a:22:68:83:b3:e7:d9:25:48:af:da:87:f1:d3:bf:60:89:a0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 22 00:00:00 2023 GMT
            Not After : Jan 26 23:59:59 2024 GMT
        Subject: serialNumber=6714b5b65a6574aa8d8c34b09cad3723d85b91566fe17f14824868d7ec42131d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d7:17:00:3e:fa:54:ac:8f:26:11:99:8f:04:
                    f1:53:a3:6d:52:26:15:3a:8d:f7:32:21:7f:c6:1d:
                    26:d7:f3:04:a9:04:98:0c:1e:a8:4b:c6:a2:ba:09:
                    d3:d6:34:3d:4f:40:3b:60:81:62:72:75:a0:82:4b:
                    94:71:11:5f:ba:04:cd:0b:80:9c:a7:11:b9:8e:f3:
                    d9:c4:00:c0:13:b1:69:78:57:93:31:52:0b:3b:89:
                    42:93:9c:4e:69:81:e8:ad:3a:15:b4:a7:99:f4:d5:
                    5a:8e:90:1e:25:9c:ae:5e:0e:7c:a1:d0:3b:65:ee:
                    ef:c8:96:48:81:ca:c3:fc:a7:d5:e0:bd:8e:a5:02:
                    8e:07:4a:7f:d2:e4:bb:7f:4a:b6:a6:a9:86:01:ea:
                    1f:7c:01:f2:97:c9:9f:ac:ae:2c:72:db:25:84:b4:
                    1c:f6:fc:92:6e:10:94:d1:db:f4:2a:dd:76:7a:45:
                    c5:fc:c2:14:49:db:73:cf:3b:5b:4e:98:eb:d2:41:
                    11:ce:8a:15:57:20:eb:fa:cf:f8:9f:88:19:5d:7d:
                    f3:5f:9d:8d:71:2d:7c:c8:31:af:90:f4:8d:13:30:
                    be:b3:9c:a3:b4:d7:64:bf:c9:5b:e4:8a:9c:58:23:
                    3f:07:5a:f4:07:d6:3b:0e:a6:11:cc:8d:ba:f8:8f:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6F:EC:1E:13:9E:8C:10:57:87:EC:A6:2C:15:33:D4:63:E5:97:4F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0f9f2747-17cf-41f1-a09b-2c054fff87e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:d7:6f:8d:3f:4f:e7:64:ab:c3:3a:c5:e7:57:3c:8c:0e:bb:
         4b:04:a4:e3:13:2a:8e:26:a7:fd:0e:11:65:53:ca:87:c9:d7:
         99:0d:96:63:47:b9:61:18:c7:04:b5:4c:64:f8:48:31:fd:4f:
         59:c0:9c:8d:5b:ca:fa:4c:3d:57:c7:00:58:a0:0e:c2:fa:a1:
         6b:7b:6b:5e:47:ec:f6:7e:ff:b0:7c:a3:18:93:74:55:2f:9d:
         30:82:8c:d1:c6:68:5e:2e:9c:9f:89:97:a4:e9:3b:6f:97:67:
         0b:c0:ad:24:74:e6:46:62:aa:7c:2b:65:5c:20:21:78:ec:a2:
         be:11:bd:a2:25:73:48:e1:9f:df:be:66:66:c1:e7:01:e8:1d:
         bc:37:2c:c6:fd:c0:b8:33:bd:b9:77:92:9c:97:09:38:67:e7:
         93:b5:21:64:11:5d:a8:03:69:21:3d:a4:e6:2f:43:97:3f:4a:
         60:dd:50:be:1a:66:12:c2:f6:84:b5:43:44:5c:26:ef:91:11:
         ff:95:55:f5:ce:e1:8c:26:b1:38:44:9b:4b:5d:d4:6a:55:d7:
         8b:93:6a:51:a9:1d:fd:da:8f:79:44:6c:88:2f:ce:0d:6c:f9:
         38:4e:51:08:cf:51:16:92:61:fd:6a:d9:0e:95:f4:7e:23:94:
         48:26:2f:cf
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ5oiaIOz59klSK/ah/HTv2CJoOwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjIyMDAwMDAwWhcNMjQwMTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2NzE0YjViNjVhNjU3NGFhOGQ4YzM0YjA5Y2FkMzcyM2Q4
NWI5MTU2NmZlMTdmMTQ4MjQ4NjhkN2VjNDIxMzFkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCK1xcAPvpUrI8mEZmPBPFTo21SJhU6jfcyIX/GHSbX8wSp
BJgMHqhLxqK6CdPWND1PQDtggWJydaCCS5RxEV+6BM0LgJynEbmO89nEAMATsWl4
V5MxUgs7iUKTnE5pgeitOhW0p5n01VqOkB4lnK5eDnyh0Dtl7u/IlkiBysP8p9Xg
vY6lAo4HSn/S5Lt/SramqYYB6h98AfKXyZ+srixy2yWEtBz2/JJuEJTR2/Qq3XZ6
RcX8whRJ23PPO1tOmOvSQRHOihVXIOv6z/ifiBldffNfnY1xLXzIMa+Q9I0TML6z
nKO012S/yVvkipxYIz8HWvQH1jsOphHMjbr4jyCTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU8m/sHhOejBBXh+ymLBUz1GPll08wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzBmOWYyNzQ3LTE3Y2YtNDFmMS1hMDliLTJjMDU0ZmZmODdlOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJHXb40/T+dkq8M6xedXPIwOu0sE
pOMTKo4mp/0OEWVTyofJ15kNlmNHuWEYxwS1TGT4SDH9T1nAnI1byvpMPVfHAFig
DsL6oWt7a15H7PZ+/7B8oxiTdFUvnTCCjNHGaF4unJ+Jl6TpO2+XZwvArSR05kZi
qnwrZVwgIXjsor4RvaIlc0jhn9++ZmbB5wHoHbw3LMb9wLgzvbl3kpyXCThn55O1
IWQRXagDaSE9pOYvQ5c/SmDdUL4aZhLC9oS1Q0RcJu+REf+VVfXO4YwmsThEm0td
1GpV14uTalGpHf3aj3lEbIgvzg1s+ThOUQjPURaSYf1q2Q6V9H4jlEgmL88=
-----END CERTIFICATE-----