Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b24227e-4b42-4138-97ef-776285e988c1.roa
File:                     2b24227e-4b42-4138-97ef-776285e988c1.roa (raw, json)
Hash identifier:          PQndpgNGLWyicBHhl9r2CX8+hw8/8DMWMcR6yuvRkb4=
Subject key identifier:   13:8E:CA:73:EA:61:36:42:92:C6:3D:7E:1C:FA:79:73:59:7F:FA:F0
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5C8479D199EC8A51C674D9BA45BB18E08F10E027
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b24227e-4b42-4138-97ef-776285e988c1.roa
Signing time:             Mon 07 Jul 2025 15:00:11 +0000
ROA not before:           Mon 07 Jul 2025 15:00:11 +0000
ROA not after:            Mon 11 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:6080::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:84:79:d1:99:ec:8a:51:c6:74:d9:ba:45:bb:18:e0:8f:10:e0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul  7 15:00:11 2025 GMT
            Not After : Aug 11 23:59:59 2025 GMT
        Subject: serialNumber=a0fdf65d8d2d201c436e75781d1379a8a8f2743baaf31d52053c328464ec8318, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:46:ec:97:16:96:f3:6b:21:cb:e1:08:09:
                    7d:1c:06:5d:b0:1a:44:f9:e1:4f:ca:54:22:97:1b:
                    60:94:38:bc:95:18:74:fb:e9:bf:8e:7e:34:07:58:
                    c9:ee:3e:37:f3:46:48:db:27:3f:cb:39:8b:4e:bc:
                    e3:87:75:dd:22:4b:d8:9a:c8:9d:47:ac:54:d6:7a:
                    af:f4:66:90:1c:57:13:14:dd:fa:d6:01:00:62:52:
                    4e:0d:ec:4e:fd:5d:9f:7b:14:0e:98:f6:30:16:bb:
                    3d:1c:7d:a0:24:3c:52:ad:fc:0c:9a:f8:6e:79:68:
                    3e:00:87:dd:bd:38:70:a7:6d:f6:59:6b:d6:47:5a:
                    86:d2:9b:56:9b:df:ac:c2:55:1d:14:c8:ca:f7:42:
                    e4:e0:ff:51:f5:33:d7:81:9e:8d:38:19:b6:c9:52:
                    c4:04:7f:5e:ea:63:b5:92:90:37:3f:b0:c6:38:43:
                    e3:b8:4b:8d:7c:65:c9:3f:29:fa:ec:c8:6e:41:d4:
                    e5:49:99:89:8f:98:d7:27:cc:66:ba:e5:62:6e:64:
                    5a:88:f5:d3:29:80:be:83:7e:39:70:e1:90:b3:81:
                    2a:81:6b:35:9c:06:ed:71:20:b1:b3:d1:fb:84:b9:
                    50:aa:62:57:ee:d8:e5:f9:3b:43:b7:3a:81:f1:e4:
                    f6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8E:CA:73:EA:61:36:42:92:C6:3D:7E:1C:FA:79:73:59:7F:FA:F0
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b24227e-4b42-4138-97ef-776285e988c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:6080::/46

    Signature Algorithm: sha256WithRSAEncryption
         84:27:57:11:2e:86:52:c5:3a:2e:c0:8c:47:94:f5:09:a8:a0:
         56:b3:d7:82:92:59:38:3e:7a:1e:e1:fe:04:94:1e:c5:f6:f9:
         a1:d0:17:ce:28:72:b8:e2:4c:3f:e4:ea:c3:03:48:51:54:d8:
         43:ec:57:e3:b3:e1:e6:88:f0:07:57:bc:f5:f7:6b:ee:4d:0f:
         6d:f4:da:45:b9:b5:9a:09:a7:12:1d:30:d4:86:fa:81:42:32:
         4c:d4:be:72:fd:27:04:50:2b:a4:b1:ed:8b:c2:33:bd:c0:20:
         e5:ec:8b:24:dd:cd:28:9f:75:e7:e8:e2:a2:d2:15:ad:7a:4d:
         f2:83:38:ae:8e:29:e2:74:36:d6:be:e3:5e:19:56:8e:4e:a4:
         51:57:e3:16:ef:a4:44:32:76:e9:be:a6:10:18:c0:24:9d:2f:
         4a:13:3d:ff:0d:87:3e:5b:11:a3:d1:33:19:1b:00:40:12:6d:
         54:7c:ad:6a:c1:82:93:c6:a3:bf:75:f3:6e:18:53:09:4a:18:
         53:85:ea:69:b9:03:ba:1c:cd:91:d3:dc:ac:d7:2f:bd:d1:d5:
         e2:0c:7a:2f:d7:08:e9:02:ab:b2:6c:18:8f:31:62:1c:d1:c5:
         b3:c7:75:96:b5:b8:e9:b0:26:f1:82:68:63:cf:a6:f6:a0:0a:
         b2:3d:10:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----