Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2b2c5b4-7406-4aee-87fa-251f6472ec3f.roa
File:                     c2b2c5b4-7406-4aee-87fa-251f6472ec3f.roa (raw, json)
Hash identifier:          Bi5bcqQ4WQcipfwFqVlRQ8vyqvgQFkqg3fdTwZt+P9Q=
Subject key identifier:   10:40:83:39:02:A9:1F:22:CF:8E:55:73:B0:FB:AD:09:B7:6D:77:90
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       305CABE9EA82DB1922E3355FB3B109F00AE230DA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2b2c5b4-7406-4aee-87fa-251f6472ec3f.roa
Signing time:             Mon 24 Mar 2025 15:10:14 +0000
ROA not before:           Mon 24 Mar 2025 15:10:14 +0000
ROA not after:            Mon 28 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:4020::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 16 Apr 2025 18:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5c:ab:e9:ea:82:db:19:22:e3:35:5f:b3:b1:09:f0:0a:e2:30:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Mar 24 15:10:14 2025 GMT
            Not After : Apr 28 23:59:59 2025 GMT
        Subject: serialNumber=c2c46f77f9d149f5688e32d0fd4d1cf9ecfec3a2ac27529761479957579827ab, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:43:a3:1c:29:6e:d3:29:e3:d1:f6:25:89:
                    da:8e:1f:99:aa:f2:86:8b:f9:a2:51:cf:83:bd:e5:
                    e4:3f:58:83:a6:04:1c:e8:2f:b7:0f:45:78:a2:19:
                    18:c1:5c:16:86:6b:81:50:8c:98:15:00:42:75:a8:
                    ef:59:ac:b7:e1:31:f0:f0:f0:27:78:9e:fb:cc:62:
                    c3:a3:f6:5b:cb:07:a3:ac:11:a8:3c:bb:82:5b:a2:
                    51:e0:7b:4e:11:eb:eb:d6:9c:a4:5c:99:88:aa:94:
                    57:51:85:e9:40:51:cc:8d:e8:ce:86:6e:55:a8:e9:
                    3c:a8:08:52:5d:28:0f:f0:d7:59:b9:37:6b:69:56:
                    30:cc:08:87:b6:06:cd:08:bd:d4:b1:97:97:75:a0:
                    3c:03:90:39:a1:f0:1e:7c:4c:9f:a2:57:93:05:69:
                    64:57:1b:5c:cc:98:97:c3:09:b7:6a:29:18:28:cd:
                    57:41:87:18:9c:46:8e:d8:05:d7:37:12:ef:ba:79:
                    b7:2a:be:c6:5b:7d:31:be:04:0e:a7:8f:e8:3d:61:
                    bd:12:9f:67:6a:ce:80:e7:7a:2b:e5:b6:4f:34:c2:
                    69:32:03:3a:7c:07:ac:cb:6b:00:ba:0d:77:e8:cd:
                    28:aa:0a:74:70:b6:6c:a3:e9:50:f2:1a:9b:e3:b9:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:40:83:39:02:A9:1F:22:CF:8E:55:73:B0:FB:AD:09:B7:6D:77:90
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2b2c5b4-7406-4aee-87fa-251f6472ec3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:36:88:8d:b3:5d:3a:55:89:bc:60:d4:a9:ee:36:ea:6b:e6:
         1d:ca:fc:9a:1d:35:df:7b:01:9f:5a:f0:04:d7:ae:49:60:27:
         2f:2c:a2:50:a8:1a:d3:77:1c:64:1e:66:06:ef:bd:72:c9:cc:
         1e:04:3c:4a:29:8c:9c:37:79:e7:2e:38:aa:a1:d1:8e:7a:4e:
         64:e7:44:e7:0e:79:55:02:96:55:fe:9c:95:1d:e8:93:21:fd:
         d4:44:01:67:f0:15:00:0b:4d:99:52:f9:e8:0a:4f:0b:cb:25:
         5d:ea:0d:80:a9:cf:35:f3:76:4a:03:4f:3f:89:0f:47:3c:92:
         61:ae:8c:cf:44:16:ed:67:67:be:6d:5c:ba:fd:60:c5:f0:51:
         28:ab:37:a8:e0:9a:88:df:ce:7d:29:9b:fa:1c:0e:44:3d:87:
         38:26:4b:21:c4:6e:89:e6:a2:3c:80:4c:b3:0e:2f:08:5a:ef:
         93:48:aa:2e:39:1d:6c:ef:b8:f3:af:c4:4e:0a:52:33:8d:8d:
         0a:54:82:5b:e8:90:32:b9:e1:6d:3b:29:6e:4c:bd:25:a2:6c:
         c0:5f:e3:a6:4f:30:ab:22:8a:1c:a0:da:22:cc:68:08:fd:f2:
         88:4f:b5:0f:c3:f3:b3:ae:bd:e0:d6:36:4a:80:92:0b:b9:3b:
         96:1b:f2:c5
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUMFyr6eqC2xki4zVfs7EJ8AriMNowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MTAxNFoX
DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNAYzJjNDZmNzdmOWQxNDlmNTY4OGUz
MmQwZmQ0ZDFjZjllY2ZlYzNhMmFjMjc1Mjk3NjE0Nzk5NTc1Nzk4MjdhYjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxpDoxwpbtMp49H2JYnajh+ZqvKG
i/miUc+DveXkP1iDpgQc6C+3D0V4ohkYwVwWhmuBUIyYFQBCdajvWay34THw8PAn
eJ77zGLDo/ZbywejrBGoPLuCW6JR4HtOEevr1pykXJmIqpRXUYXpQFHMjejOhm5V
qOk8qAhSXSgP8NdZuTdraVYwzAiHtgbNCL3UsZeXdaA8A5A5ofAefEyfoleTBWlk
VxtczJiXwwm3aikYKM1XQYcYnEaO2AXXNxLvunm3Kr7GW30xvgQOp4/oPWG9Ep9n
as6A53or5bZPNMJpMgM6fAesy2sAug136M0oqgp0cLZso+lQ8hqb47ks2wIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFBBAgzkCqR8iz45Vc7D7rQm3bXeQMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2MyYjJjNWI0LTc0MDYtNGFlZS04N2ZhLTI1MWY2NDcyZWMzZi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9EAgMA0GCSqGSIb3DQEBCwUAA4IBAQA4NoiNs106VYm8YNSp
7jbqa+YdyvyaHTXfewGfWvAE165JYCcvLKJQqBrTdxxkHmYG771yycweBDxKKYyc
N3nnLjiqodGOek5k50TnDnlVApZV/pyVHeiTIf3URAFn8BUAC02ZUvnoCk8LyyVd
6g2Aqc8183ZKA08/iQ9HPJJhrozPRBbtZ2e+bVy6/WDF8FEoqzeo4JqI3859KZv6
HA5EPYc4JkshxG6J5qI8gEyzDi8IWu+TSKouOR1s77jzr8ROClIzjY0KVIJb6JAy
ueFtOyluTL0lomzAX+OmTzCrIoocoNoizGgI/fKIT7UPw/Ozrr3g1jZKgJILuTuW
G/LF
-----END CERTIFICATE-----