Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f4d10d05-4796-4a5e-9225-8755dfbbe1c8.roa
File:                     f4d10d05-4796-4a5e-9225-8755dfbbe1c8.roa (raw, json)
Hash identifier:          rN3G0afCT4HfGTJk7qdDy35YLOsaWw4merVs9oC393c=
Subject key identifier:   26:F8:EA:17:88:C0:F1:BF:AD:24:22:09:CF:1F:41:13:ED:02:3C:D2
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1A086E4EF3216822888FFA9404B9AD0F8C010144
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f4d10d05-4796-4a5e-9225-8755dfbbe1c8.roa
Signing time:             Sat 14 Jun 2025 09:43:15 +0000
ROA not before:           Sat 14 Jun 2025 09:43:15 +0000
ROA not after:            Sat 19 Jul 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 14 Jun 2025 10:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:08:6e:4e:f3:21:68:22:88:8f:fa:94:04:b9:ad:0f:8c:01:01:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 14 09:43:15 2025 GMT
            Not After : Jul 19 23:59:59 2025 GMT
        Subject: serialNumber=3f2069d06f1e4cdf7cb96262bbf77a5eccab72f5e201a39641ba1d2c471b0110, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:06:9b:de:76:b9:73:43:0a:a5:00:79:0c:
                    ee:e3:71:d9:21:b6:6d:a4:54:86:94:a4:b9:13:ac:
                    d5:82:0c:2f:4c:a0:d6:cf:78:43:77:83:68:a5:38:
                    dc:e9:b4:7f:f3:4e:0b:79:94:b2:14:1d:4b:09:d8:
                    f7:02:82:3b:3f:36:05:bb:de:3b:3c:7f:68:45:06:
                    9e:39:be:d1:51:b0:55:c3:58:7a:89:1c:7a:7c:c1:
                    4c:ef:0f:d1:e3:39:5d:7d:b6:54:b3:fc:27:56:50:
                    76:ae:19:0b:50:20:b7:c7:b4:7f:5d:14:b1:df:41:
                    57:2d:0a:a8:ce:30:a8:80:85:61:3f:38:d0:f1:f9:
                    7d:b8:c4:6f:7d:04:d0:cb:11:6d:97:cb:07:3f:0b:
                    7e:47:f6:33:93:9e:3e:85:de:32:d0:94:24:ed:4b:
                    3b:cd:ef:7d:87:15:7c:c3:79:fe:4a:6b:02:54:eb:
                    e2:60:d6:c0:04:d4:ba:a9:49:36:69:c8:7c:85:cf:
                    78:b9:53:5a:93:62:1c:92:e0:f4:b1:1f:ff:d8:b3:
                    15:4d:50:2b:8a:55:7f:e2:c1:f5:12:0c:b1:30:ea:
                    70:49:41:26:b7:de:4a:01:4d:12:48:ea:a7:ed:43:
                    73:4a:82:6c:9b:60:9b:c4:88:a0:8a:1b:17:53:d9:
                    e4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F8:EA:17:88:C0:F1:BF:AD:24:22:09:CF:1F:41:13:ED:02:3C:D2
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f4d10d05-4796-4a5e-9225-8755dfbbe1c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e7:c0:49:5e:96:49:31:4d:67:66:1c:bb:bf:ad:1e:17:a1:
         12:6d:0a:3a:2b:e0:fd:32:2d:ee:48:15:bb:95:70:59:b3:40:
         4d:bb:30:dd:2f:05:83:c3:e4:89:6a:b1:c2:49:5a:bb:16:41:
         07:c2:51:26:31:81:45:d3:0c:67:e3:a1:c0:e1:b4:e3:ca:27:
         c4:4f:c6:ed:02:e5:63:de:95:16:9a:9d:3a:15:94:c2:68:3a:
         61:a1:d8:92:82:58:c6:b2:b1:46:da:fc:84:d0:e6:73:d0:c8:
         bf:1d:2f:df:39:f0:7a:fe:d8:52:a9:87:ed:64:2f:a9:1c:57:
         02:ef:3b:36:1e:7c:c7:e7:54:8d:27:5a:39:1d:5e:80:21:07:
         5e:8a:9c:69:14:af:2f:f2:ea:0e:58:43:3f:6e:09:d9:de:7c:
         0a:a2:b3:49:0f:81:13:13:8e:28:88:cf:26:35:1b:67:d3:1b:
         8d:4d:6f:0f:72:f2:a7:f8:99:16:cf:65:8d:84:43:a5:1f:9f:
         a3:09:28:b7:ea:45:0a:f2:e0:ae:8a:9e:6b:8b:a0:a8:4f:2c:
         21:38:81:28:f7:76:d6:51:be:2b:bf:35:70:b3:ce:d1:6b:a5:
         2f:7a:22:c7:b1:eb:a5:4f:b1:c0:25:cb:cb:3c:c2:1f:d9:63:
         4f:db:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----