Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8407a586-8855-4044-b3f6-13ff42e08121.roa
File:                     8407a586-8855-4044-b3f6-13ff42e08121.roa (raw, json)
Hash identifier:          YDQPkuP590A9y2J4XVDpo+gXBlO6sdXMMGaSwnXZtDQ=
Subject key identifier:   85:F7:76:EE:57:A1:8F:83:3E:24:B0:4E:37:1B:F1:04:1B:9A:46:88
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0AF9DAEB8255E077610D4E884CAB620D5CA28FD9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8407a586-8855-4044-b3f6-13ff42e08121.roa
Signing time:             Wed 27 Dec 2023 00:00:00 +0000
ROA not before:           Wed 27 Dec 2023 00:00:00 +0000
ROA not after:            Wed 31 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f9:da:eb:82:55:e0:77:61:0d:4e:88:4c:ab:62:0d:5c:a2:8f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 27 00:00:00 2023 GMT
            Not After : Jan 31 23:59:59 2024 GMT
        Subject: serialNumber=05ef3de61e4c33d2c1ed796af645bdc40c3f1a963ee1e52759c15157d6ceeac5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:c9:0b:b9:36:38:b7:55:21:68:43:a7:7b:
                    e9:d8:f4:a5:a3:c0:ed:da:b8:e9:02:da:e3:f2:bf:
                    42:c2:dd:25:3e:68:96:df:1c:47:06:58:56:ef:48:
                    78:b8:ca:26:df:3b:d6:a8:81:d4:60:70:2a:f3:bc:
                    ca:dd:1d:95:2a:80:70:7a:5a:a0:fe:a3:47:fa:cf:
                    e5:10:29:6f:d8:21:84:98:5a:de:d4:46:b9:ba:66:
                    36:d1:c6:34:46:d3:3a:25:4d:6a:fd:6a:bd:2f:ed:
                    b1:4a:a0:92:2e:93:9b:2a:35:f1:c8:9b:43:ff:a5:
                    67:0d:37:ea:71:6d:c8:9d:ea:51:b3:a3:fc:bc:85:
                    77:2e:46:4c:8a:e4:12:55:8c:db:79:6b:4c:73:23:
                    c4:f4:e2:22:9c:ec:9d:0b:bc:77:9f:98:ac:b6:52:
                    87:cd:b0:3d:de:91:94:06:55:c3:a1:2e:95:05:a8:
                    be:de:5a:6a:e7:7c:96:e1:ba:37:d7:e2:cc:72:68:
                    d3:41:0f:e0:54:4f:6b:f0:19:66:1c:13:05:c2:32:
                    0c:35:36:e5:9a:19:61:a4:aa:24:9f:29:b3:20:3a:
                    2d:f8:6c:f1:54:27:f0:42:a8:f5:87:4b:8f:e1:c9:
                    dd:ba:3a:5e:2c:b8:e3:87:73:a7:6e:d0:84:fa:38:
                    f7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F7:76:EE:57:A1:8F:83:3E:24:B0:4E:37:1B:F1:04:1B:9A:46:88
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8407a586-8855-4044-b3f6-13ff42e08121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:f0:f7:7f:30:83:78:52:2e:82:bf:b3:0a:2d:49:e5:90:e0:
         a1:ae:60:18:69:b8:13:1c:3c:42:a9:c3:a4:51:44:4c:cf:5b:
         7a:b9:19:31:ad:04:47:68:ba:44:b7:b3:4e:9c:bf:9d:34:41:
         bf:28:a5:b7:16:a3:2e:90:3d:fa:77:d0:d3:4f:fd:b3:b5:0a:
         9a:e6:d4:bb:c7:ac:60:d2:a0:62:bf:d0:02:2a:7d:7e:ed:7c:
         68:21:53:65:73:38:eb:11:30:09:ea:23:19:33:45:a7:a2:1e:
         20:3e:51:d3:bd:21:7d:92:b7:f3:e3:8c:ed:39:2f:1e:b3:23:
         d3:34:a8:35:7b:e7:b9:2f:df:d0:99:7b:75:d9:5e:32:14:c1:
         9f:b8:3f:bd:0a:f4:87:2c:0e:16:cf:d6:ab:d4:41:4b:1e:17:
         68:32:bd:c1:e3:c5:35:57:41:df:18:27:7a:ab:52:af:02:b7:
         c6:f8:a7:bf:f6:0f:08:32:b4:0f:d9:cf:53:96:cd:e6:76:92:
         5a:95:45:5c:12:e7:81:1a:98:44:d8:82:e5:29:c2:ec:99:a1:
         b7:82:21:55:81:9a:7c:90:18:64:5e:9a:c4:b5:88:de:19:e0:
         87:04:97:59:19:e0:09:0c:0e:d5:9a:31:e4:ab:07:52:5d:8e:
         6c:5b:44:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----