Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fca6d788-8e6d-42aa-9c3e-b71d843f1602.roa
File:                     fca6d788-8e6d-42aa-9c3e-b71d843f1602.roa (raw, json)
Hash identifier:          fKvbw8o84pa23aMYoFZFTDAp9TEJQ9ke/78lbVzQfgs=
Subject key identifier:   13:FC:3E:B9:E6:DE:57:58:E5:92:AC:35:56:18:46:E2:E9:B3:2B:D6
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       0FADDE5614DA3710BB1D4E3BE1367301F8447C1B
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fca6d788-8e6d-42aa-9c3e-b71d843f1602.roa
Signing time:             Fri 16 May 2025 17:30:14 +0000
ROA not before:           Fri 16 May 2025 17:30:14 +0000
ROA not after:            Fri 20 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.245.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 04 Jun 2025 22:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ad:de:56:14:da:37:10:bb:1d:4e:3b:e1:36:73:01:f8:44:7c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May 16 17:30:14 2025 GMT
            Not After : Jun 20 23:59:59 2025 GMT
        Subject: serialNumber=54f08c7e8e0649a320a9d32a95955a257cd6411ced78286732af32bb4302ba7b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:23:94:db:18:3e:7f:9a:68:e0:16:75:d3:f4:
                    b5:01:99:bc:8f:e5:55:61:5e:a7:54:b7:df:06:7e:
                    76:c3:85:3e:ed:8e:ac:1e:d9:68:98:fa:55:22:e6:
                    ad:a0:34:39:fb:03:57:a2:f9:f3:ef:a5:15:0a:30:
                    be:22:d3:22:e8:98:a8:94:ca:f8:36:57:81:cc:a3:
                    0c:1c:d8:dd:4c:60:9f:c3:80:f3:05:ad:e5:90:6c:
                    c6:43:01:45:99:cd:f9:c4:97:1d:e8:bb:07:9f:dc:
                    5d:a8:68:43:b1:df:2a:4e:85:a8:e2:fb:3e:0e:c9:
                    3d:84:5a:2a:11:b8:e3:19:86:32:e0:30:de:bc:98:
                    a1:52:7d:22:d1:a3:d6:65:9a:4a:d2:e4:6d:da:53:
                    aa:b6:8b:00:21:38:a0:f9:ab:b0:eb:46:1a:b8:94:
                    ac:64:76:ac:9a:1f:d4:ae:2e:51:40:5b:9c:d4:38:
                    e3:a4:47:4d:7f:8b:bf:6f:92:7a:55:8d:ce:cd:5e:
                    fb:b7:36:84:cb:f2:df:e7:10:bf:92:85:0d:03:80:
                    d6:a3:0b:50:56:7f:c6:a1:60:db:3e:6b:69:43:e5:
                    0b:db:e6:c6:0e:fd:c0:12:26:e7:33:d3:54:a3:d1:
                    ee:74:08:18:5d:61:34:c3:fb:05:21:0d:e1:2b:df:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FC:3E:B9:E6:DE:57:58:E5:92:AC:35:56:18:46:E2:E9:B3:2B:D6
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fca6d788-8e6d-42aa-9c3e-b71d843f1602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:6c:93:6f:b9:6d:dc:fb:c1:cd:7d:b4:92:84:b4:e4:3c:6c:
         90:d2:b3:55:89:e6:76:0f:d6:94:f7:fc:11:66:ff:dd:e6:b0:
         31:28:ae:66:62:6a:fa:65:b3:4a:42:9f:2f:59:fb:f1:b4:23:
         90:02:bd:ab:7b:15:51:fe:d6:96:c7:bd:c5:3e:0d:fc:c5:3c:
         1e:a2:31:b3:da:63:df:c3:11:67:c3:7a:dd:a9:87:69:74:3e:
         cd:8e:43:b1:dc:c7:e5:8c:aa:0b:36:64:13:5b:16:bb:75:3e:
         b0:25:a2:be:60:2c:7c:eb:c8:17:8b:9a:09:95:dc:09:a6:9d:
         b1:72:9e:34:af:bf:1f:26:8d:78:96:6e:79:71:37:69:fe:de:
         b5:26:49:17:5d:9d:5f:69:ae:35:c7:bd:2f:30:68:a0:16:15:
         f0:f0:84:50:05:b4:9c:b2:30:22:5c:46:11:a9:b4:1f:e8:dd:
         fd:13:02:fa:4d:25:61:b7:2b:c5:6a:ad:2e:e2:3f:2c:e7:2b:
         50:5e:2e:52:34:5d:dd:a1:41:e8:eb:b6:1b:58:a1:5b:65:1c:
         82:85:2b:06:9a:61:e1:6e:63:54:69:6b:4d:80:93:0f:74:18:
         e8:90:8e:e6:fc:35:43:de:18:3d:93:62:6b:f8:ad:e7:fa:4a:
         b1:56:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----