Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d7987d78-aaf5-46bc-b8e1-9f5fa270cc8c.roa
File:                     d7987d78-aaf5-46bc-b8e1-9f5fa270cc8c.roa (raw, json)
Hash identifier:          nQrUNbYGUTbm0kvo3ga+58SaOGV4xytYAbnVLI/cZoM=
Subject key identifier:   E8:8A:53:BD:E1:02:A5:D0:DA:EA:BC:CA:1C:FF:17:7A:55:D9:45:21
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1B0EA6D6EF581C8715C151AF4A4D5CE18C470EF9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d7987d78-aaf5-46bc-b8e1-9f5fa270cc8c.roa
Signing time:             Wed 22 Nov 2023 00:00:00 +0000
ROA not before:           Wed 22 Nov 2023 00:00:00 +0000
ROA not after:            Wed 27 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0e:a6:d6:ef:58:1c:87:15:c1:51:af:4a:4d:5c:e1:8c:47:0e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 22 00:00:00 2023 GMT
            Not After : Dec 27 23:59:59 2023 GMT
        Subject: serialNumber=e24a833a3d35df876bd8bef8989fc4e9610d53008c83440a2d12057310ff777a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6c:a0:93:ce:86:27:68:eb:2c:12:10:fc:c1:
                    fb:a0:98:ae:46:cd:d1:dc:00:e1:4c:9d:58:d6:04:
                    ee:e5:c5:35:2a:39:16:1b:ef:14:2c:32:d2:e1:03:
                    24:3e:ad:b1:ce:80:73:29:30:f7:9c:8b:3b:16:71:
                    8b:fe:80:01:b1:b5:85:99:c1:d7:9e:4f:75:ed:10:
                    f7:d6:91:cd:17:73:1d:a9:29:8a:2a:47:2e:9c:85:
                    f5:d6:93:67:c3:27:f6:c5:eb:8f:32:a3:da:a9:20:
                    a4:a8:a6:16:2b:c6:09:ab:f9:fd:e5:c1:78:9c:9c:
                    2f:b7:99:12:73:2f:e1:7d:7a:03:38:5d:82:b0:ef:
                    29:fb:41:08:9e:70:a3:d4:2a:19:92:86:78:7b:cd:
                    fb:9f:74:f1:9f:73:35:aa:34:cf:72:b1:b7:66:49:
                    0d:74:b6:a5:1c:46:74:77:45:9d:9c:a4:bb:c4:4e:
                    bb:d1:ff:cc:88:50:bf:67:bd:10:a1:b1:17:4a:47:
                    b6:60:f4:ca:f7:3f:14:c1:8e:24:24:d4:84:45:df:
                    74:0b:ff:67:c7:9c:da:13:86:3c:63:63:5a:27:89:
                    de:67:3f:ab:25:45:eb:f9:e9:b9:58:63:bf:82:02:
                    02:53:59:9d:5f:f3:7c:6e:a5:36:28:08:e0:79:25:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8A:53:BD:E1:02:A5:D0:DA:EA:BC:CA:1C:FF:17:7A:55:D9:45:21
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d7987d78-aaf5-46bc-b8e1-9f5fa270cc8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:1c:d9:07:3e:a2:82:a6:95:52:f9:48:69:1d:3d:f5:f3:86:
         9b:ae:76:bd:5e:67:a1:05:9a:eb:f2:e7:89:ad:ff:f9:20:70:
         56:d4:20:19:23:65:b0:53:da:d5:0c:bf:de:26:98:51:d5:cf:
         9c:4e:99:4e:d7:2b:7f:62:68:34:af:6e:3e:a0:b5:73:39:35:
         0f:fa:d4:54:fe:7a:f3:bb:06:02:f0:fd:74:2f:d7:03:f3:02:
         8c:fc:e7:8d:1b:89:2c:4f:10:38:e5:06:52:29:ce:e0:a9:b1:
         bb:06:89:a4:71:42:6e:e7:93:fd:34:5d:e5:ed:5d:7b:71:aa:
         1e:a9:b5:48:e2:be:09:51:36:4f:05:de:a3:c6:21:16:ea:7e:
         be:9c:2f:df:5b:8d:66:55:33:9c:82:85:5b:05:55:f3:96:6c:
         0a:14:48:11:d5:0f:17:95:81:6b:04:7a:df:3c:5a:67:f6:4d:
         c6:2d:49:9e:bf:ad:1e:5a:bd:06:55:5b:a5:26:aa:42:b5:ec:
         68:b9:19:ac:27:fa:02:ed:4b:d1:70:86:14:54:e3:bd:7b:00:
         8f:14:cc:aa:e0:64:42:50:f0:a9:3f:85:36:7d:b5:b7:50:c0:
         e2:5a:6e:9e:ba:48:94:b3:43:75:b0:26:a9:6f:43:ae:80:0c:
         1e:1a:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----