Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b49fa79-4f10-414f-8d41-7fdad4999e2b.roa
File:                     6b49fa79-4f10-414f-8d41-7fdad4999e2b.roa (raw, json)
Hash identifier:          tTxOtAa0/QQOY2qTPtgpgm/TS16eWXI9wEhHtjJ1g8A=
Subject key identifier:   D9:E4:75:51:A8:C8:5D:A6:9B:9C:99:38:A4:52:06:0D:CD:FD:3E:BF
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       79374978B0390D3BACB1D8F07B55E19A7A7995D4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b49fa79-4f10-414f-8d41-7fdad4999e2b.roa
Signing time:             Thu 07 Dec 2023 00:00:00 +0000
ROA not before:           Thu 07 Dec 2023 00:00:00 +0000
ROA not after:            Thu 11 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:37:49:78:b0:39:0d:3b:ac:b1:d8:f0:7b:55:e1:9a:7a:79:95:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec  7 00:00:00 2023 GMT
            Not After : Jan 11 23:59:59 2024 GMT
        Subject: serialNumber=e2a2ce0269ba3ef22b6ae58ae379e8be592c09e231a06b951f81a9456843ffa1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:27:e3:3c:0b:06:07:88:8b:1a:aa:c6:a8:8d:
                    75:2c:6a:9b:bf:8e:e3:ee:cf:26:47:bc:06:34:c5:
                    79:31:d1:5f:81:06:81:89:fd:7a:34:14:2a:90:30:
                    47:b2:48:09:02:9a:bc:33:61:89:98:c7:65:bd:d7:
                    0b:b8:75:a6:40:ae:7d:cf:bd:de:4e:15:f5:61:7c:
                    35:04:a1:ed:0c:4e:a1:38:66:f7:df:84:f7:f3:69:
                    19:6b:39:2e:14:18:82:2c:f2:33:af:d3:24:b8:41:
                    0e:fa:3d:6e:4c:3d:5d:3f:65:98:7f:ca:5e:37:cf:
                    f5:8f:69:31:21:72:d1:98:08:6e:43:74:57:1e:ef:
                    30:3e:bd:36:f3:db:d5:15:82:8f:2e:7e:bb:a5:0c:
                    f5:03:8a:87:b6:ed:8d:97:e7:c0:4f:4f:2c:2d:c0:
                    75:af:4c:f5:ea:5a:54:19:a7:a5:f3:76:94:b8:7f:
                    ce:84:1e:24:4b:17:19:13:16:43:85:3a:36:95:18:
                    27:e9:c8:3a:01:40:ef:0d:c0:cc:9a:8a:d6:56:53:
                    39:19:70:40:97:cf:01:da:07:f6:8f:b3:64:dc:89:
                    18:68:8f:9f:81:9b:06:0d:0e:d9:02:8c:1f:ea:04:
                    6e:6a:6c:dc:bd:2e:64:09:73:14:f7:13:01:c2:db:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E4:75:51:A8:C8:5D:A6:9B:9C:99:38:A4:52:06:0D:CD:FD:3E:BF
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b49fa79-4f10-414f-8d41-7fdad4999e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:02:10:27:a4:af:cf:cc:f5:a6:b1:8c:2b:e1:cd:32:3d:b4:
         97:d6:39:9a:29:89:d0:e7:26:2c:af:2a:41:cc:af:8d:da:14:
         e5:50:c7:a1:f7:f7:b9:9f:7f:d0:d0:de:96:83:5e:19:73:fb:
         8c:ed:b7:67:84:0e:d8:4d:13:2b:06:df:1c:3b:55:04:b7:14:
         32:d4:07:de:ac:01:53:68:13:53:14:e5:e4:ac:9f:45:82:bb:
         d9:3e:f7:18:25:f2:52:54:32:8a:7f:ed:84:cf:1e:cb:f6:c3:
         f0:46:f5:21:bd:25:63:b1:df:85:be:97:e9:8f:bf:50:4b:94:
         ed:fd:34:80:1f:ab:1a:bd:68:71:dd:62:fa:1c:d7:3b:ab:84:
         fb:a8:9e:39:ea:4a:ae:d3:9f:65:6b:3f:38:ef:39:69:7d:95:
         d3:4d:83:a6:c2:c9:5e:15:2d:f8:bc:47:b9:b2:86:2e:57:27:
         ad:2e:19:93:aa:dd:b0:20:af:8f:da:5d:2a:4c:91:fa:19:47:
         44:8e:38:54:b3:cc:26:62:d1:65:7e:65:5a:f1:93:84:c0:80:
         54:89:ec:b6:12:6e:f3:79:25:31:09:7b:19:40:ba:a0:07:68:
         63:16:b9:15:8f:6c:90:02:63:63:84:ab:2e:86:28:94:d4:3c:
         b6:9f:1d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----