Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0223be86-329d-4d76-995a-e5ac5a3c8cef.roa
File:                     0223be86-329d-4d76-995a-e5ac5a3c8cef.roa (raw, json)
Hash identifier:          O1KVQH3pXq1CRgbfejDPpbzCeIvBEwAkL8ZhWwyC9Dw=
Subject key identifier:   EA:7C:5D:36:92:E6:60:C9:A6:16:49:12:3B:2F:11:5B:50:D6:0B:BB
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       607F0C7429982672A15491E59861846DA7029A8B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0223be86-329d-4d76-995a-e5ac5a3c8cef.roa
Signing time:             Thu 22 May 2025 00:51:59 +0000
ROA not before:           Thu 22 May 2025 00:51:59 +0000
ROA not after:            Thu 26 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab9:f0c0::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 19:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7f:0c:74:29:98:26:72:a1:54:91:e5:98:61:84:6d:a7:02:9a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 22 00:51:59 2025 GMT
            Not After : Jun 26 23:59:59 2025 GMT
        Subject: serialNumber=127582562300deb048676821b577e2cf48f580285c16ac1ae1efd28975b9cda1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:20:c2:3d:4d:1c:c1:14:58:50:9d:47:b0:
                    9d:c6:94:41:db:64:b1:a7:dd:86:f0:00:39:14:77:
                    f0:1a:06:92:e4:aa:3d:2c:03:5a:06:34:c9:bd:de:
                    18:de:0a:c5:02:81:7f:6a:99:52:38:e6:d0:9a:64:
                    84:b9:9e:1f:96:19:fe:1a:8b:c5:ba:aa:65:b2:3c:
                    6a:42:6f:54:b2:54:b9:2a:4d:bd:71:eb:5b:cf:64:
                    00:94:3f:45:05:49:ff:91:a4:25:dd:c8:4d:b8:c8:
                    38:41:31:58:a3:81:0e:24:ea:02:2b:b3:67:ce:2f:
                    09:7f:07:b8:8a:35:ae:bf:bd:d9:66:cc:a1:c9:c5:
                    ef:2b:71:0e:22:7c:da:6d:23:73:d8:a7:d3:44:72:
                    be:ca:7f:60:14:13:ba:de:cd:d0:e7:c1:b9:a7:cb:
                    85:cc:dc:eb:cf:08:d5:47:67:71:58:fb:f0:5a:77:
                    01:69:88:d8:f4:bc:d6:60:98:6d:bb:15:ff:91:46:
                    7d:02:7a:b0:bd:a6:9a:4a:40:61:7b:78:82:ee:40:
                    1b:3b:1b:7f:5b:4a:ae:ef:98:b6:0c:b2:6e:41:38:
                    95:7f:c0:26:6e:ae:05:9d:7b:2f:d6:02:83:f3:3c:
                    68:a2:52:d3:d5:a3:2e:1f:7f:69:7d:88:e9:e9:6a:
                    95:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7C:5D:36:92:E6:60:C9:A6:16:49:12:3B:2F:11:5B:50:D6:0B:BB
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0223be86-329d-4d76-995a-e5ac5a3c8cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab9:f0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:a7:70:21:cb:ce:90:73:77:fe:6e:8e:34:7e:29:56:06:8f:
         c1:16:7a:c4:47:11:62:fe:d8:a3:b0:1e:c6:79:28:b4:17:d8:
         ba:0c:cf:f8:e1:17:80:0e:c5:3b:c3:96:02:bf:73:23:7e:40:
         99:11:f6:d7:40:cf:71:9e:67:be:d2:3b:54:8f:59:53:b4:0e:
         eb:4a:64:99:3f:eb:fb:26:03:97:20:fb:69:79:b1:64:e5:4c:
         54:36:92:28:6c:21:ae:2f:6c:25:ff:6b:78:b0:e7:35:1f:52:
         53:6b:43:12:91:28:7e:cc:06:bd:36:a4:da:c6:bf:16:74:86:
         98:aa:c2:95:fe:c1:93:df:31:1b:bb:38:c2:e3:cc:d8:4e:62:
         5a:5c:98:b4:d9:06:05:5e:39:83:b0:9e:b8:5a:da:1b:a8:cb:
         0b:f4:e2:c8:6c:ed:ce:cf:47:f3:d3:d3:38:50:8c:99:46:92:
         5d:3f:bd:3d:1f:6b:35:db:62:06:a2:04:fe:3d:48:29:2a:06:
         95:d8:f8:f6:a4:41:97:63:d8:b4:73:ac:c7:19:18:c0:fa:c8:
         0c:a2:54:98:59:4c:c5:58:16:5f:a6:28:41:aa:a4:74:fb:f6:
         b3:75:fa:1a:f2:f5:24:7e:e6:40:2c:60:ae:1b:12:10:b3:27:
         e2:69:cf:3b
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUYH8MdCmYJnKhVJHlmGGEbacCmoswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUyMjAwNTE1OVoX
DTI1MDYyNjIzNTk1OVowejFJMEcGA1UEBRNAMTI3NTgyNTYyMzAwZGViMDQ4Njc2
ODIxYjU3N2UyY2Y0OGY1ODAyODVjMTZhYzFhZTFlZmQyODk3NWI5Y2RhMTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJsgwj1NHMEUWFCdR7CdxpRB22Sx
p92G8AA5FHfwGgaS5Ko9LANaBjTJvd4Y3grFAoF/aplSOObQmmSEuZ4flhn+GovF
uqplsjxqQm9UslS5Kk29cetbz2QAlD9FBUn/kaQl3chNuMg4QTFYo4EOJOoCK7Nn
zi8Jfwe4ijWuv73ZZsyhycXvK3EOInzabSNz2KfTRHK+yn9gFBO63s3Q58G5p8uF
zNzrzwjVR2dxWPvwWncBaYjY9LzWYJhtuxX/kUZ9AnqwvaaaSkBhe3iC7kAbOxt/
W0qu75i2DLJuQTiVf8Ambq4FnXsv1gKD8zxoolLT1aMuH39pfYjp6WqVZQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFOp8XTaS5mDJphZJEjsvEVtQ1gu7MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzAyMjNiZTg2LTMyOWQtNGQ3Ni05OTVhLWU1YWM1YTNjOGNlZi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAbaufDAMA0GCSqGSIb3DQEBCwUAA4IBAQDFp3Ahy86Qc3f+bo40
filWBo/BFnrERxFi/tijsB7GeSi0F9i6DM/44ReADsU7w5YCv3MjfkCZEfbXQM9x
nme+0jtUj1lTtA7rSmSZP+v7JgOXIPtpebFk5UxUNpIobCGuL2wl/2t4sOc1H1JT
a0MSkSh+zAa9NqTaxr8WdIaYqsKV/sGT3zEbuzjC48zYTmJaXJi02QYFXjmDsJ64
WtobqMsL9OLIbO3Oz0fz09M4UIyZRpJdP709H2s122IGogT+PUgpKgaV2Pj2pEGX
Y9i0c6zHGRjA+sgMolSYWUzFWBZfpihBqqR0+/azdfoa8vUkfuZALGCuGxIQsyfi
ac87
-----END CERTIFICATE-----