Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02b469b8-5d05-46d4-955f-296aa7147c07.roa
File:                     02b469b8-5d05-46d4-955f-296aa7147c07.roa (raw, json)
Hash identifier:          TsOeqLwtKhn3a/fe5k/7dzymjZhGtTOD/GSi7PqbljY=
Subject key identifier:   3C:0D:8D:99:2D:83:D0:67:3E:71:E3:C6:57:93:C9:35:00:94:D4:D8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0AD181FAF7A302947A439E1CA21B33860C1A00D4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02b469b8-5d05-46d4-955f-296aa7147c07.roa
Signing time:             Wed 30 Jul 2025 00:50:13 +0000
ROA not before:           Wed 30 Jul 2025 00:50:13 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:e040::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d1:81:fa:f7:a3:02:94:7a:43:9e:1c:a2:1b:33:86:0c:1a:00:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:50:13 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=5356f4f2d95f3c2818778977406e9ac182b284ab59bf9c3b92f809683421c22c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:5d:93:55:e7:c8:c7:20:4b:f9:f4:10:97:
                    42:e4:5b:4a:74:44:22:b1:aa:4b:43:f4:14:ec:c0:
                    eb:6a:d1:78:30:82:88:38:b8:25:17:32:c7:c0:bb:
                    79:49:34:74:1e:f6:f7:4a:99:e0:45:73:98:8e:3c:
                    42:0a:f5:b5:44:05:90:0e:8a:df:af:a0:d8:88:d2:
                    4d:2d:4c:c3:05:48:ec:d0:2b:99:77:f7:98:1f:5b:
                    e5:be:a4:86:25:c5:c9:d7:78:f1:c5:ba:c9:e0:22:
                    38:9c:ed:83:e2:c1:ca:d8:50:3c:9b:10:30:27:9f:
                    c6:9a:7f:6b:09:74:f0:c1:a8:c1:57:0f:44:e3:2d:
                    15:d3:29:03:76:c5:4f:ac:fb:b5:58:4e:2e:93:16:
                    ad:56:81:39:62:70:33:a5:1e:d8:49:e5:73:5c:47:
                    18:16:27:48:c9:40:cd:fb:9e:80:aa:c3:61:0e:69:
                    b4:ec:87:af:e0:7f:6f:50:1f:b0:1f:d5:1d:e8:0a:
                    9a:44:11:76:56:d8:71:a4:ae:10:f8:88:f8:07:f0:
                    14:ad:86:e7:55:52:2f:22:a0:fa:96:2d:6b:c1:df:
                    8e:da:08:f6:47:1f:fe:9b:cc:7a:f2:26:73:78:13:
                    13:0a:c5:e3:83:39:27:34:b8:ed:1b:f3:ba:3f:85:
                    1c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0D:8D:99:2D:83:D0:67:3E:71:E3:C6:57:93:C9:35:00:94:D4:D8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02b469b8-5d05-46d4-955f-296aa7147c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:e040::/46

    Signature Algorithm: sha256WithRSAEncryption
         3c:8d:36:e5:48:1a:f8:4b:ba:f0:a8:c8:61:98:e7:1b:c1:cf:
         16:8c:61:1d:fd:67:7a:7b:f6:1d:6f:00:b0:67:b0:72:07:33:
         0d:db:63:c9:f8:12:d5:d5:51:35:9b:4a:2a:60:e5:42:f7:3f:
         ef:9e:10:9d:98:58:a2:14:b8:36:31:02:98:57:31:c4:cd:9a:
         b9:c4:f4:99:c9:76:3a:2f:3c:ec:c9:64:b2:aa:73:5b:ba:2c:
         6e:3f:00:40:df:2e:ca:d4:f4:48:7f:dd:34:09:21:f3:23:48:
         a0:30:18:1c:43:83:77:f3:e5:f7:52:db:cc:ff:05:af:ee:4a:
         c5:9e:88:6f:b6:2a:85:c9:e5:1c:b5:68:b9:2a:6a:77:94:14:
         aa:2e:56:66:86:47:de:89:8b:84:2d:44:f3:eb:6f:56:e2:4d:
         19:a6:25:9b:1f:dc:ad:34:36:27:4e:16:37:0b:20:90:77:f9:
         a6:ef:7c:9e:4f:ca:90:fb:ff:f4:19:22:88:2c:0e:24:3c:60:
         be:70:43:f2:67:fd:b9:42:f1:03:39:d8:6f:91:bb:d5:ce:2b:
         9f:83:ce:3b:66:b6:55:b7:28:a1:d5:75:3e:ad:41:17:5f:f8:
         a0:27:bc:0a:7b:2d:84:65:df:ef:8d:a8:c7:6d:03:54:00:2b:
         a6:80:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----