Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0d508791-7f08-4c5c-94e2-b498cfd414e9.roa
File:                     0d508791-7f08-4c5c-94e2-b498cfd414e9.roa (raw, json)
Hash identifier:          jin5YOLFU+OkeR4LoRUtv+G4warrn7TIiyq3U8oP+N4=
Subject key identifier:   42:A3:42:A1:04:F9:54:EE:9F:E4:3F:78:97:C5:D8:EC:9F:1D:F5:04
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       04E80F5DB907641B78A442E5C03EB1D7F609C5C0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0d508791-7f08-4c5c-94e2-b498cfd414e9.roa
Signing time:             Wed 30 Jul 2025 00:10:56 +0000
ROA not before:           Wed 30 Jul 2025 00:10:56 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:4880::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 17:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e8:0f:5d:b9:07:64:1b:78:a4:42:e5:c0:3e:b1:d7:f6:09:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:10:56 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=c4fbde8b521276cc0f0920a4e13179ea22a414455ca9357bfebae889b74b6782, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:66:5c:b3:7a:70:e7:a5:a7:bd:29:bb:6c:15:
                    73:5d:1c:04:22:c9:1c:df:5f:ff:1e:ad:e8:84:11:
                    bd:d8:3b:e0:47:9f:fc:35:10:4e:fe:44:c3:13:60:
                    41:01:67:8e:2d:d1:b7:7b:ab:f2:8a:06:5d:c3:5f:
                    65:68:d3:c1:d5:5b:1c:38:c5:1b:98:89:8d:a1:7c:
                    d1:96:05:64:0e:8d:bc:60:4a:44:d3:d5:a7:51:42:
                    57:4c:75:95:6b:45:38:e5:95:5d:67:68:f1:2e:f5:
                    85:5d:fe:e2:d7:ab:0d:d1:ec:f2:ac:92:9d:c1:5a:
                    c0:b5:ce:e7:d3:24:cb:57:a9:a8:70:46:bd:9d:7b:
                    12:16:63:12:52:db:32:9e:1f:a7:e2:59:8e:a3:ca:
                    5c:f3:76:19:8c:42:25:e6:20:b5:17:af:7c:81:4b:
                    f2:76:1c:d2:5c:95:c3:65:00:b7:48:fd:4e:ff:c0:
                    46:2f:80:df:d0:61:40:bc:6d:95:09:a6:ad:81:81:
                    c0:59:f0:8b:5c:7a:2d:f3:a6:27:9d:da:4e:38:b2:
                    bb:ad:e0:c7:16:83:0a:8e:e9:a3:b6:46:f2:e5:89:
                    05:bf:4f:50:c0:b8:94:19:a0:1f:be:fb:2e:09:75:
                    3d:72:a3:85:06:46:29:ec:25:ad:d6:f5:7e:7e:e2:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A3:42:A1:04:F9:54:EE:9F:E4:3F:78:97:C5:D8:EC:9F:1D:F5:04
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0d508791-7f08-4c5c-94e2-b498cfd414e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:4880::/46

    Signature Algorithm: sha256WithRSAEncryption
         77:82:4f:35:8c:53:40:46:e2:07:76:ed:98:4f:45:b5:e8:da:
         ed:dc:14:19:d6:e9:8f:a7:3f:f3:c3:3e:89:b3:15:d2:28:1b:
         2a:65:85:09:e5:37:69:6d:3a:e7:e9:20:ee:30:b5:88:2b:30:
         bb:a7:05:d0:d6:c0:ae:39:d7:1e:0e:e8:af:af:8c:0c:39:41:
         3f:bf:13:a2:cb:ed:ff:23:d7:fb:0f:c2:3e:b1:ce:3c:04:e6:
         64:b6:b6:53:48:05:f0:eb:c5:ba:11:c0:b1:53:45:2c:4a:ec:
         36:9a:5d:9e:20:03:d6:63:26:38:26:fc:d9:15:db:51:b3:3d:
         ea:6e:96:c9:01:e0:4d:bf:fe:eb:76:09:cf:b7:47:22:39:82:
         0b:21:b9:9e:e4:2d:d6:a8:b2:a6:95:0c:16:41:59:ae:a3:02:
         78:14:46:bf:70:70:30:ab:51:78:03:45:5f:9c:71:40:80:58:
         71:89:ec:6a:dd:12:24:a7:0d:f2:dc:73:be:06:78:37:d8:0d:
         54:83:46:cc:42:6e:f2:76:f1:ff:9f:5b:4c:71:ce:ad:14:d5:
         ab:7a:3d:16:81:70:74:3e:6f:c5:4a:a8:6f:97:37:69:f7:75:
         ea:b0:05:cb:5d:52:78:5f:31:ca:11:62:ff:ee:7e:94:74:00:
         ed:29:17:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:57:21 2025 by rpki-client