Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/773ee823-a0a2-4161-a734-e85d22d2f63d.roa
File:                     773ee823-a0a2-4161-a734-e85d22d2f63d.roa (raw, json)
Hash identifier:          ho7QzdE9rUAik1cs7P+TiG1y+UOVd3a36vud+hr/uhE=
Subject key identifier:   31:7A:E0:9D:07:21:A5:78:00:84:5B:31:B6:67:32:61:1C:A6:4B:E6
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       02855181BA81E9EDEF6CAF94618080CBFA4F3B91
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/773ee823-a0a2-4161-a734-e85d22d2f63d.roa
Signing time:             Thu 21 Dec 2023 00:00:00 +0000
ROA not before:           Thu 21 Dec 2023 00:00:00 +0000
ROA not after:            Thu 25 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:85:51:81:ba:81:e9:ed:ef:6c:af:94:61:80:80:cb:fa:4f:3b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 21 00:00:00 2023 GMT
            Not After : Jan 25 23:59:59 2024 GMT
        Subject: serialNumber=5fd975aee303ed84eb66f7ea146da13dff77b1c56b93699b1d7fb34ab3eadf6a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:85:12:2b:f9:1c:5b:82:39:5f:8f:b6:ec:
                    51:2c:87:0b:35:e7:b5:b4:a7:d6:2a:e6:ca:67:2d:
                    66:1d:bf:41:09:56:25:9b:04:f2:48:0b:ab:7a:fa:
                    6e:c1:8a:6b:0c:02:41:1b:f2:f9:89:06:79:18:85:
                    1f:58:e8:71:cd:f2:35:09:4e:3f:3d:7a:d9:91:86:
                    85:ff:19:c6:2d:0a:9c:b9:92:ab:bc:b6:fd:c1:3d:
                    cb:51:e3:a2:5d:34:ea:a2:94:71:44:18:35:21:06:
                    ed:7a:6d:cf:67:54:c0:ca:05:e1:6b:1e:43:65:3b:
                    32:89:66:b3:8a:45:4b:26:00:f2:b4:6f:a3:ce:e0:
                    ec:0d:6c:af:86:09:4a:7e:6b:11:37:b8:20:ee:3b:
                    5d:36:58:19:cd:94:c9:8f:9d:95:fe:4f:a0:98:cc:
                    b5:83:49:c5:e3:f5:e5:17:19:98:0d:3f:de:99:82:
                    85:c4:f2:76:b7:f5:c8:02:9f:eb:76:2d:66:df:cd:
                    57:e7:93:5c:c7:1c:c4:4e:c4:2d:db:7d:60:58:9a:
                    3a:d4:16:be:1c:29:88:f4:d7:2b:f2:b9:bc:23:8c:
                    73:89:1e:be:94:c7:59:34:a9:82:ef:46:2d:c0:15:
                    37:14:5e:25:33:0c:fd:73:f8:33:8a:6a:4f:f0:b3:
                    6d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7A:E0:9D:07:21:A5:78:00:84:5B:31:B6:67:32:61:1C:A6:4B:E6
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/773ee823-a0a2-4161-a734-e85d22d2f63d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:1e:18:39:ca:55:cf:d9:f0:09:05:2a:7e:a6:9b:35:18:91:
         09:01:0b:46:00:b5:54:54:c8:72:bd:75:c7:b6:87:22:4c:79:
         d0:f7:6f:91:7d:f4:99:fe:46:de:ff:86:45:0b:ad:69:86:c8:
         50:78:99:19:87:a6:92:49:77:af:9b:d8:a1:70:76:a9:49:fb:
         10:91:9c:68:9f:cb:87:fb:11:42:cd:d1:3c:74:be:d6:6d:e1:
         01:85:bb:da:26:4c:cc:f8:e0:8b:14:d4:85:cb:46:fa:93:ce:
         65:98:d7:cd:6f:6f:4f:a7:30:74:83:a1:8d:e0:21:13:b2:b0:
         9b:15:4d:7a:d4:9e:fe:05:67:e0:55:4c:1f:1f:b9:98:22:d1:
         8a:43:94:46:7b:fe:8d:be:97:2a:a5:27:9b:7f:c5:fa:89:87:
         7b:f1:f4:c1:a4:c0:75:e8:3e:06:c2:ca:dd:b7:29:41:8e:bd:
         02:60:a6:7c:86:7d:e1:66:e4:93:28:f2:63:a9:26:85:22:b9:
         37:1c:af:64:52:39:09:4f:4e:29:52:b9:59:e6:8b:86:26:e1:
         88:99:97:e2:35:0a:c7:28:81:e5:5a:f8:69:49:0d:f6:38:4e:
         eb:83:08:07:eb:fa:80:d1:bc:9f:bc:47:ed:5e:26:66:26:77:
         af:ac:ac:5c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAoVRgbqB6e3vbK+UYYCAy/pPO5EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjIxMDAwMDAwWhcNMjQwMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZmQ5NzVhZWUzMDNlZDg0ZWI2NmY3ZWExNDZkYTEzZGZm
NzdiMWM1NmI5MzY5OWIxZDdmYjM0YWIzZWFkZjZhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC944USK/kcW4I5X4+27FEshws157W0p9Yq5spnLWYdv0EJ
ViWbBPJIC6t6+m7BimsMAkEb8vmJBnkYhR9Y6HHN8jUJTj89etmRhoX/GcYtCpy5
kqu8tv3BPctR46JdNOqilHFEGDUhBu16bc9nVMDKBeFrHkNlOzKJZrOKRUsmAPK0
b6PO4OwNbK+GCUp+axE3uCDuO102WBnNlMmPnZX+T6CYzLWDScXj9eUXGZgNP96Z
goXE8na39cgCn+t2LWbfzVfnk1zHHMROxC3bfWBYmjrUFr4cKYj01yvyubwjjHOJ
Hr6Ux1k0qYLvRi3AFTcUXiUzDP1z+DOKak/ws23XAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMXrgnQchpXgAhFsxtmcyYRymS+YwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzc3M2VlODIzLWEwYTItNDE2MS1hNzM0LWU4NWQyMmQyZjYzZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAG4eGDnKVc/Z8AkFKn6mmzUYkQkB
C0YAtVRUyHK9dce2hyJMedD3b5F99Jn+Rt7/hkULrWmGyFB4mRmHppJJd6+b2KFw
dqlJ+xCRnGify4f7EULN0Tx0vtZt4QGFu9omTMz44IsU1IXLRvqTzmWY181vb0+n
MHSDoY3gIROysJsVTXrUnv4FZ+BVTB8fuZgi0YpDlEZ7/o2+lyqlJ5t/xfqJh3vx
9MGkwHXoPgbCyt23KUGOvQJgpnyGfeFm5JMo8mOpJoUiuTccr2RSOQlPTilSuVnm
i4Ym4YiZl+I1CscogeVa+GlJDfY4TuuDCAfr+oDRvJ+8R+1eJmYmd6+srFw=
-----END CERTIFICATE-----