Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56919d20-e020-4f89-8dd1-2d188aa8ebd5.roa
File:                     56919d20-e020-4f89-8dd1-2d188aa8ebd5.roa (raw, json)
Hash identifier:          AVsJ3PchgRGhpH06ztCfROIxI148R9Jua1goey48XiM=
Subject key identifier:   F2:48:FB:7B:AC:CC:85:3B:53:AE:87:53:D1:35:68:0B:68:48:43:6C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       65E30BC96505B7C80E4FB36CABEAE9AF5AAD8BCD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56919d20-e020-4f89-8dd1-2d188aa8ebd5.roa
Signing time:             Tue 25 Mar 2025 00:11:20 +0000
ROA not before:           Tue 25 Mar 2025 00:11:20 +0000
ROA not after:            Tue 29 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:4040::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 16 Apr 2025 18:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e3:0b:c9:65:05:b7:c8:0e:4f:b3:6c:ab:ea:e9:af:5a:ad:8b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Mar 25 00:11:20 2025 GMT
            Not After : Apr 29 23:59:59 2025 GMT
        Subject: serialNumber=a79d918104d6f2f5cfd1d1146eaa4c0d07dea190936bd43063414d433eedab5a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:83:55:c3:28:22:95:91:0b:4f:5c:b0:a6:
                    91:51:73:03:a1:f3:49:64:74:b2:6a:57:da:0e:8a:
                    86:36:4e:9c:22:61:dc:dc:9f:25:eb:1e:39:df:9d:
                    9f:32:bd:d2:03:c3:a8:e2:a4:17:4e:1b:6e:1e:c0:
                    e6:25:c0:2a:ec:ef:44:5a:77:66:f3:0c:26:97:19:
                    10:87:37:13:ac:32:95:31:19:50:b3:68:04:b9:d3:
                    94:ac:a0:52:cb:07:0e:4f:8c:27:98:eb:40:d6:59:
                    94:46:d1:ad:e4:79:2e:cb:e3:c2:33:fb:0f:ab:69:
                    cc:35:04:3b:15:4d:ee:69:58:50:16:bf:13:a2:f7:
                    c1:29:cc:27:a3:6a:ce:b0:28:da:23:e4:9f:80:07:
                    45:b4:aa:0f:c4:6c:fe:0a:d6:29:10:c4:48:74:94:
                    f2:4e:a6:d5:e3:91:5f:36:08:a9:13:ab:e1:de:1d:
                    03:c9:ee:ec:f1:d8:9f:5b:61:10:47:03:53:a8:75:
                    d3:d6:46:96:21:1d:82:02:18:12:7b:93:6f:80:01:
                    fe:3b:b3:13:f3:ad:13:ec:01:db:da:ce:a2:94:e1:
                    37:8c:65:91:cc:24:2f:a2:91:38:07:ec:11:a3:63:
                    03:88:55:0b:27:e7:54:4c:fe:7f:fd:2b:33:db:8e:
                    4d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:48:FB:7B:AC:CC:85:3B:53:AE:87:53:D1:35:68:0B:68:48:43:6C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56919d20-e020-4f89-8dd1-2d188aa8ebd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:86:2c:76:ce:37:32:bf:5a:a2:11:5e:a7:29:15:8f:72:11:
         e6:8f:da:71:b7:d9:25:d2:9d:74:0e:64:33:51:29:9c:e3:1e:
         a0:31:98:af:eb:77:f8:f0:47:53:87:8e:4d:44:eb:3a:cf:a0:
         8f:1c:c9:16:78:76:13:ae:b4:0a:00:55:43:de:d6:fa:a9:a8:
         d5:df:60:c0:11:08:4f:8e:28:b5:7e:34:c9:38:06:00:43:a6:
         c8:bc:4e:a4:53:9f:c3:37:63:82:8d:40:cd:f5:00:1e:74:61:
         9f:b8:ec:94:da:77:77:56:cb:9d:31:62:1d:e9:d7:b2:74:a2:
         45:55:69:01:03:d3:9f:cd:a2:fe:ed:00:14:2a:1a:3f:b2:5a:
         13:70:59:b8:23:7b:11:f9:26:5b:e5:bc:f4:fa:fe:2d:df:e1:
         a0:9a:7b:fa:70:2d:e1:7e:99:27:25:33:af:7a:11:c6:3e:34:
         e1:f6:00:1a:56:f2:e8:a6:76:a0:dd:c4:18:33:a4:e0:10:17:
         2e:e8:66:10:4c:37:a9:cf:35:cd:c3:97:3b:0f:7b:25:d6:2d:
         b0:69:4c:d2:91:3e:7a:5f:c4:3c:70:a6:55:0c:8f:c8:8e:60:
         26:b1:32:fa:f7:73:58:31:8e:75:68:29:ea:c4:56:3f:5a:4f:
         45:9f:37:db
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUZeMLyWUFt8gOT7Nsq+rpr1qti80wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMTEyMFoX
DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYTc5ZDkxODEwNGQ2ZjJmNWNmZDFk
MTE0NmVhYTRjMGQwN2RlYTE5MDkzNmJkNDMwNjM0MTRkNDMzZWVkYWI1YTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO+DVcMoIpWRC09csKaRUXMDofNJ
ZHSyalfaDoqGNk6cImHc3J8l6x45352fMr3SA8Oo4qQXThtuHsDmJcAq7O9EWndm
8wwmlxkQhzcTrDKVMRlQs2gEudOUrKBSywcOT4wnmOtA1lmURtGt5Hkuy+PCM/sP
q2nMNQQ7FU3uaVhQFr8TovfBKcwno2rOsCjaI+SfgAdFtKoPxGz+CtYpEMRIdJTy
TqbV45FfNgipE6vh3h0Dye7s8difW2EQRwNTqHXT1kaWIR2CAhgSe5NvgAH+O7MT
860T7AHb2s6ilOE3jGWRzCQvopE4B+wRo2MDiFULJ+dUTP5//Ssz245NDwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFPJI+3uszIU7U66HU9E1aAtoSENsMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzU2OTE5ZDIwLWUwMjAtNGY4OS04ZGQxLTJkMTg4YWE4ZWJkNS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9EBAMA0GCSqGSIb3DQEBCwUAA4IBAQBIhix2zjcyv1qiEV6n
KRWPchHmj9pxt9kl0p10DmQzUSmc4x6gMZiv63f48EdTh45NROs6z6CPHMkWeHYT
rrQKAFVD3tb6qajV32DAEQhPjii1fjTJOAYAQ6bIvE6kU5/DN2OCjUDN9QAedGGf
uOyU2nd3VsudMWId6deydKJFVWkBA9OfzaL+7QAUKho/sloTcFm4I3sR+SZb5bz0
+v4t3+Ggmnv6cC3hfpknJTOvehHGPjTh9gAaVvLopnag3cQYM6TgEBcu6GYQTDep
zzXNw5c7D3sl1i2waUzSkT56X8Q8cKZVDI/IjmAmsTL693NYMY51aCnqxFY/Wk9F
nzfb
-----END CERTIFICATE-----