Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/faf455b3-df7e-4cea-9daa-e519d64368f3.roa
File:                     faf455b3-df7e-4cea-9daa-e519d64368f3.roa (raw, json)
Hash identifier:          BQmKkeSlRGqoqf1l0PvOPaT6aHiST4qBFPZalO1WM0M=
Subject key identifier:   8D:0A:C4:70:48:E5:3D:B4:76:F8:5B:F6:1B:C7:03:64:3C:15:EB:97
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       04E9BCFA0AC1134EC7E0F2804A644DA163F65A68
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/faf455b3-df7e-4cea-9daa-e519d64368f3.roa
Signing time:             Mon 18 Mar 2024 00:00:00 +0000
ROA not before:           Mon 18 Mar 2024 00:00:00 +0000
ROA not after:            Mon 22 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 13:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e9:bc:fa:0a:c1:13:4e:c7:e0:f2:80:4a:64:4d:a1:63:f6:5a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 18 00:00:00 2024 GMT
            Not After : Apr 22 23:59:59 2024 GMT
        Subject: serialNumber=beae4d593b0237c92ad2558be55293924c798d2b881ce17e4b54ac3aecac0547, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:61:d0:b3:67:70:66:ff:c6:c1:a6:65:1d:97:
                    ca:a5:d2:31:16:8b:cc:17:ca:15:69:7a:c3:d3:e8:
                    f5:c3:ff:5d:fc:cc:ed:2c:70:f7:2c:c8:61:54:33:
                    02:52:9a:89:9b:1c:15:65:a9:aa:1b:63:bc:35:b6:
                    e5:6b:4d:93:0b:6f:8d:4b:5c:1a:b2:e2:42:3e:9c:
                    7e:40:b6:44:d7:27:37:40:09:f3:69:0e:96:e9:b5:
                    13:97:ea:14:d9:bf:b9:20:1f:99:ba:8f:9e:bd:b7:
                    23:da:ac:1c:9f:8c:21:22:eb:4a:c4:3f:90:89:6c:
                    65:86:8a:30:64:03:11:b1:e2:5c:f7:72:45:95:4d:
                    d7:a1:2d:3e:c0:07:f0:e3:c9:e1:c7:1a:a6:27:3e:
                    1c:e6:62:c2:3d:b6:d8:ad:a4:0a:bc:ae:3b:ee:48:
                    56:d4:fb:f6:8c:29:83:03:a8:64:b3:fe:1c:9e:0c:
                    90:24:cf:a2:7e:5b:c9:47:5e:d6:b4:86:a5:c0:82:
                    12:5f:8f:f4:53:36:dd:7d:a5:f6:39:3b:d6:06:3b:
                    66:da:a7:30:81:57:7c:8f:33:e3:fc:22:89:35:2b:
                    9b:cb:a3:83:2f:75:bd:75:69:fb:1b:bb:ca:44:3b:
                    ac:0c:5a:a9:d7:e1:0d:19:52:00:58:7f:d4:06:74:
                    93:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0A:C4:70:48:E5:3D:B4:76:F8:5B:F6:1B:C7:03:64:3C:15:EB:97
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/faf455b3-df7e-4cea-9daa-e519d64368f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:74:ad:e7:57:7f:44:3a:3a:41:b4:3e:5d:95:98:48:5a:05:
         85:1b:6f:62:ee:20:d8:84:c4:4f:5e:71:b0:86:8b:d1:92:47:
         97:ab:59:b5:1f:39:34:ce:a5:ba:f2:38:8b:22:54:d1:22:5d:
         ce:85:9c:58:b4:f7:da:2b:6d:c6:6f:d1:cf:f3:f6:89:ff:16:
         41:eb:23:75:73:8a:ca:2c:53:69:53:da:71:ce:63:86:75:60:
         71:8a:bd:6c:ef:14:08:d6:18:18:28:19:f3:d5:94:2a:80:25:
         24:7f:5a:45:ce:c1:fc:84:10:18:3b:e6:fc:e4:00:d1:a6:ba:
         db:44:32:f0:4d:0e:8e:89:28:45:c5:82:1a:67:f5:5e:b7:2c:
         48:3d:df:10:64:b3:2e:13:9d:03:cb:90:6e:4f:f2:e0:ff:42:
         68:f3:d6:2f:52:0c:b3:02:e5:f6:a7:0e:06:bc:30:11:1a:7a:
         9a:b4:cc:6b:c5:8c:ff:37:13:8d:e0:cc:0f:c3:cb:76:09:de:
         d8:10:e7:a9:e1:a2:ac:02:46:0b:d4:d7:74:b8:8d:b6:ba:9c:
         ee:f6:b9:46:4c:a0:24:33:40:a5:ce:dd:55:1c:f1:a8:09:cb:
         84:77:fb:75:1d:f9:ec:7e:a1:2c:77:c7:90:a7:ca:e5:dd:6f:
         cb:f0:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----