Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d66763-ca3b-4f03-892a-534a85b8d01e.roa
File:                     02d66763-ca3b-4f03-892a-534a85b8d01e.roa (raw, json)
Hash identifier:          40INhPWzPX6suozER7SO8+YKrvUbOiMcVm1detN635s=
Subject key identifier:   2E:81:B8:60:90:07:92:A8:75:7F:8E:EB:F6:D7:C5:58:7B:BC:D4:2E
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1075499F329390D1BCCC3B5080B536C2286EA26C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d66763-ca3b-4f03-892a-534a85b8d01e.roa
Signing time:             Wed 30 Jul 2025 00:40:04 +0000
ROA not before:           Wed 30 Jul 2025 00:40:04 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:c840::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:75:49:9f:32:93:90:d1:bc:cc:3b:50:80:b5:36:c2:28:6e:a2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:40:04 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=135bce308f354af2e3ae0cb6396b82a98fe12847d9be54a2db150a85cfb68592, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:74:24:69:19:8a:90:0d:c4:ed:ac:61:d9:
                    79:5c:41:71:61:df:22:e1:e5:59:56:64:24:22:15:
                    18:06:d2:71:52:f7:97:0c:5d:f6:15:2c:fa:0a:7b:
                    b1:f8:e3:af:e2:f9:bd:bd:ec:ed:25:ec:eb:2d:86:
                    f9:42:ee:41:52:17:53:05:72:e3:28:f9:c7:9d:1f:
                    66:89:c8:3e:16:e1:e2:67:10:9d:66:ba:df:a2:ac:
                    d9:3f:b8:32:f6:8b:5d:d5:6d:d5:7f:c3:99:af:ff:
                    9b:37:21:b0:77:ec:93:08:82:0c:6b:f3:a1:bb:fc:
                    e3:6b:b7:ab:ef:de:83:83:d2:84:ed:9e:58:4d:05:
                    42:81:3c:a5:52:9c:6e:55:e1:ed:86:c5:c0:b4:2d:
                    1e:de:7b:59:f7:f9:6f:b7:e4:3d:90:1d:86:81:02:
                    3f:34:2b:da:60:4a:01:66:2b:40:47:21:8e:f4:89:
                    c0:c0:a3:54:a6:c3:0b:a9:fd:18:07:6f:4c:f9:8b:
                    ef:22:7a:c2:58:0f:90:7b:e1:5c:b5:06:ab:ec:71:
                    23:8c:7c:76:34:ac:fd:e5:7b:d9:af:92:53:64:5b:
                    03:8a:d9:59:59:6a:32:73:06:bf:13:b5:96:a1:e5:
                    81:6b:de:04:60:8a:8e:f3:ee:45:bc:5e:4a:e0:4f:
                    77:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:81:B8:60:90:07:92:A8:75:7F:8E:EB:F6:D7:C5:58:7B:BC:D4:2E
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d66763-ca3b-4f03-892a-534a85b8d01e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:c840::/46

    Signature Algorithm: sha256WithRSAEncryption
         83:45:6b:dc:55:a3:26:58:17:4e:8b:7e:8d:a9:ee:f5:a5:24:
         18:98:d6:4d:ad:53:fd:bc:80:04:97:ae:db:3b:21:4f:c1:9e:
         69:10:c6:d3:ee:b8:76:00:f0:7f:a6:5f:62:2a:f1:96:25:d3:
         7e:b2:3f:ea:34:13:ae:12:51:b9:c9:28:86:68:19:d1:76:66:
         e6:c1:49:7c:a7:d1:d5:9d:42:14:62:ce:ec:6e:a5:5a:69:b2:
         1f:29:62:1f:d0:9c:1b:db:8f:7a:0d:f0:08:fa:f0:44:a8:6a:
         09:69:d0:c7:39:c1:27:40:9d:0a:7e:b6:87:36:3e:ae:5c:1a:
         de:33:f3:08:16:e0:7e:2d:50:46:d6:9d:61:6a:41:69:9a:02:
         f2:51:86:a5:58:de:bb:15:00:4a:ac:8d:71:e2:89:fe:5f:e5:
         44:7b:a3:aa:71:33:91:bd:0f:d7:15:87:0b:88:7c:ae:9a:c6:
         fb:50:ee:c7:78:63:db:d2:13:6c:b9:9b:a7:35:d9:b1:e6:a0:
         9e:aa:17:a3:ac:4a:38:43:30:03:56:9c:00:6c:d3:ae:11:76:
         fc:56:35:b6:97:40:5f:d1:f1:e3:0e:d7:d8:52:a4:b9:0e:34:
         a3:0d:dd:28:ea:5a:31:ce:e7:f8:88:1d:c3:d4:41:de:f7:51:
         57:8e:3c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----