Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17401e4c-0efe-451f-8a30-4d161fbab45f.roa
File:                     17401e4c-0efe-451f-8a30-4d161fbab45f.roa (raw, json)
Hash identifier:          eEXMwRRcsaI1INVxAI6MNZz0t9wuUYaD9btMFR7a4oQ=
Subject key identifier:   7B:B8:FA:95:66:64:99:BE:3A:35:6D:31:62:CE:C8:F1:5C:BC:7B:FA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7EEC22BA73A0DBFAA68FF8EA5B8B730D0288670C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17401e4c-0efe-451f-8a30-4d161fbab45f.roa
Signing time:             Wed 30 Jul 2025 00:11:26 +0000
ROA not before:           Wed 30 Jul 2025 00:11:26 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:4080::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ec:22:ba:73:a0:db:fa:a6:8f:f8:ea:5b:8b:73:0d:02:88:67:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:11:26 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=c9e05edbd421fa192766ff1bc62b34d03d7933eb4b5fc59bea576d78c168514c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:e5:04:30:e0:88:11:ca:fd:cc:92:df:1a:
                    70:f8:e8:33:80:97:63:3c:9d:73:a5:8a:1d:b7:8f:
                    d7:f5:8c:c9:f9:bb:f8:45:60:c2:2d:40:cc:00:ec:
                    80:62:d0:71:f3:30:bf:c5:22:ff:90:b3:88:4a:f7:
                    15:c0:05:31:1d:54:63:2f:bf:49:06:65:15:92:85:
                    db:ac:86:74:2c:1f:a7:70:a5:e6:a1:d3:6e:7f:9f:
                    53:9d:24:e9:a1:52:78:ad:74:77:c1:e9:43:2e:31:
                    26:c4:d3:71:da:1d:78:80:70:08:0d:71:8b:8a:5b:
                    73:82:21:99:f4:e1:2a:e6:54:fb:ed:7d:7e:a7:14:
                    b3:5f:ec:8d:0d:82:40:13:98:21:78:5c:31:f2:c4:
                    cb:f8:28:0f:26:71:bc:64:b0:a4:4f:c3:d5:5f:f2:
                    e8:51:1c:0e:e4:33:20:0d:05:24:c3:33:a0:c2:bd:
                    26:e6:f9:41:55:91:e5:44:d1:ac:db:b9:4a:1a:ea:
                    c1:0f:59:5a:27:1c:0f:98:de:b9:0b:2e:85:48:6a:
                    72:f9:2f:3e:9d:d5:06:41:31:b0:fe:7f:3b:9b:8f:
                    2b:aa:be:89:46:d3:a3:b8:21:d2:24:dd:c4:a5:9b:
                    7f:d0:6e:6d:f4:db:e7:72:01:45:2b:40:90:41:a2:
                    c0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B8:FA:95:66:64:99:BE:3A:35:6D:31:62:CE:C8:F1:5C:BC:7B:FA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17401e4c-0efe-451f-8a30-4d161fbab45f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:4080::/46

    Signature Algorithm: sha256WithRSAEncryption
         79:41:f3:b9:e3:d7:50:3b:9a:e5:06:74:34:62:7b:ed:58:88:
         13:8d:2d:af:46:f2:80:d3:5e:37:77:b7:66:18:6e:55:ad:a9:
         f6:94:01:9d:79:74:0d:be:72:06:2b:4d:ca:ed:d3:a1:8e:e6:
         8c:d2:01:f4:8c:22:b4:9b:7f:18:b5:1f:07:9f:2c:ac:2a:bd:
         80:df:47:61:9a:ab:5a:25:65:d9:e9:1e:c4:f1:e2:e4:51:cc:
         87:85:25:2c:0c:23:c5:07:0d:31:72:c4:f6:0a:b4:24:e3:8f:
         be:fa:f7:02:8f:ac:5b:37:7f:96:ad:e9:80:78:b8:b6:7f:50:
         d2:77:84:83:83:be:e2:88:b3:bd:9a:f1:09:65:17:f2:4d:8c:
         a9:38:54:cb:ff:17:36:0d:bb:c2:00:33:f1:33:15:36:a8:fa:
         3d:5f:db:ff:dc:9e:9c:26:0a:12:4b:50:1a:c6:ca:1a:6c:fb:
         22:69:d9:13:ab:a7:34:25:03:98:b7:07:2a:05:6e:85:76:ca:
         a2:bf:2e:43:74:38:7b:8a:71:0a:fd:72:80:73:04:43:a9:80:
         06:80:24:7b:73:a7:e2:c7:b2:07:07:b9:37:15:63:7d:b0:22:
         04:68:36:c7:8f:00:e2:25:4d:d6:24:45:40:bb:c1:c2:17:da:
         88:5b:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----