Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc40fef3-8608-43a7-a639-3236856d487d.roa
File:                     cc40fef3-8608-43a7-a639-3236856d487d.roa (raw, json)
Hash identifier:          9nmnyxr9mMXsvzmu+KKTc+3mmt//9NqcYdT2RlORE3E=
Subject key identifier:   91:10:5D:CE:B3:FA:4B:22:F6:2F:22:BA:6A:8A:37:C2:42:B4:F6:B2
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4DA7992F47C6E547C90367B9FC95F5C90854694C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc40fef3-8608-43a7-a639-3236856d487d.roa
Signing time:             Mon 18 Dec 2023 00:00:00 +0000
ROA not before:           Mon 18 Dec 2023 00:00:00 +0000
ROA not after:            Mon 22 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a7:99:2f:47:c6:e5:47:c9:03:67:b9:fc:95:f5:c9:08:54:69:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 18 00:00:00 2023 GMT
            Not After : Jan 22 23:59:59 2024 GMT
        Subject: serialNumber=71e1210847162a12adec7d1063fa1ed05ff30fd3c4730a923174866014d79d2a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:e1:9c:3d:7e:7d:0b:c7:4c:36:61:d5:8b:
                    74:60:56:73:79:52:80:bd:6c:e8:cc:af:e2:9d:4c:
                    eb:5d:e1:40:35:23:ce:f2:3b:46:b5:9d:3b:0d:1f:
                    c5:36:e3:a5:31:b9:b5:87:ad:ca:5a:f8:aa:d5:92:
                    da:a2:33:5e:ae:ac:6f:f0:e0:7d:a7:28:e1:68:7a:
                    cb:a0:c7:87:46:04:0d:5d:f9:87:6f:4d:f3:41:d0:
                    06:5f:98:0a:2b:29:83:f9:78:5c:50:d9:0a:df:55:
                    52:96:14:d0:4a:6d:f5:c8:cf:1a:63:0a:b8:8f:87:
                    3b:97:43:90:97:24:43:0a:39:b0:6b:00:01:a5:da:
                    43:f7:1b:30:63:ee:49:96:36:03:23:72:2e:d0:62:
                    b0:44:18:92:82:fb:64:8b:66:e6:0f:2a:22:a6:5f:
                    11:df:59:ec:a0:55:63:f1:e3:e8:6c:76:9e:5f:b7:
                    10:bb:29:00:f8:5a:a6:27:52:10:05:5f:0e:77:83:
                    a9:aa:30:bc:9b:ab:a2:f6:6f:ea:cf:e5:d6:dc:13:
                    83:14:84:42:ee:1f:2c:ed:24:f2:2f:b0:30:33:a2:
                    f3:57:4a:17:34:d7:12:f3:86:6e:0a:2a:0c:d3:e7:
                    a0:48:f2:f1:71:41:a7:27:fa:4c:87:14:b9:48:4a:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:10:5D:CE:B3:FA:4B:22:F6:2F:22:BA:6A:8A:37:C2:42:B4:F6:B2
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc40fef3-8608-43a7-a639-3236856d487d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:14:52:d2:4a:3b:92:86:c6:85:e4:93:25:03:36:fc:04:4c:
         15:4c:35:cf:0e:40:8e:6a:39:1b:61:45:29:a9:7f:62:87:84:
         3a:9d:58:76:e0:aa:bb:98:0d:25:a8:eb:e2:4c:8c:0b:d5:9c:
         21:50:80:fe:41:6b:2c:8c:50:38:4e:17:e0:d8:2a:0d:9a:fd:
         28:ef:e8:b6:49:21:bc:b9:e0:98:03:ed:8f:72:f7:a8:cb:07:
         81:d8:32:bb:4d:61:dd:a7:97:ce:ab:6b:0f:1f:8e:fe:2b:44:
         c4:fc:37:02:b4:e3:30:2f:94:1d:c5:14:d3:05:d9:a0:14:41:
         a4:0e:04:5a:d2:8f:30:c8:52:c5:8d:6a:7a:c4:5f:5a:b7:34:
         74:37:7a:be:5c:bf:dc:f0:67:8b:f7:b5:08:08:da:fa:72:77:
         14:6b:31:af:df:e3:aa:05:8f:99:e2:da:bb:ea:f8:8d:f0:a2:
         f1:4b:f0:fd:63:dc:2d:8e:b1:fb:7d:80:f0:fe:cf:47:17:db:
         90:86:b1:14:53:0c:86:fd:75:fa:de:0e:4d:a9:f5:8c:f2:7c:
         c9:97:9a:41:ad:aa:65:b9:e4:0a:b5:ed:73:a1:e5:34:c9:47:
         85:8e:80:ee:18:24:e8:7e:d1:ab:79:94:43:4b:2b:c4:5a:48:
         82:e0:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----