Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ef94ee4-4310-4cee-8115-190220d10277.roa
File:                     2ef94ee4-4310-4cee-8115-190220d10277.roa (raw, json)
Hash identifier:          4plFwzZ+oEQ7X+RYDnFRbzkVCtqAfZcFWUGEX8KqnGU=
Subject key identifier:   64:6E:EB:74:CA:A5:B3:A2:74:6C:A7:2A:9E:7F:93:FF:29:82:02:2F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4B88CFF17C01AAD7C3C835DC230748AA1F9B6BA2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ef94ee4-4310-4cee-8115-190220d10277.roa
Signing time:             Wed 30 Jul 2025 00:50:05 +0000
ROA not before:           Wed 30 Jul 2025 00:50:05 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:840::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:88:cf:f1:7c:01:aa:d7:c3:c8:35:dc:23:07:48:aa:1f:9b:6b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:50:05 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=f483296301b9ffbcb7ea9f5c23f97e53eef83ba292d9fe2d90c0d81a012f71dd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8a:bf:02:70:d1:d1:51:62:88:93:9a:c3:fe:
                    4b:7e:88:d8:09:4c:bb:d4:29:1b:b7:74:67:ef:66:
                    65:31:4f:f9:07:03:54:10:36:70:83:ac:5a:90:77:
                    33:81:bb:92:d0:af:06:15:b9:13:d6:03:99:57:ca:
                    51:b0:e3:64:76:53:da:c4:7d:45:97:73:00:ef:0d:
                    e4:1a:84:fe:0a:13:70:7c:ea:cd:36:ef:8d:e8:11:
                    48:13:16:17:b8:30:dc:99:4e:cf:eb:46:d4:1a:91:
                    a1:fe:aa:f9:e3:49:77:80:c9:d0:eb:4f:f7:4c:b2:
                    a3:c2:87:8b:cf:82:07:71:2a:ff:f0:40:98:df:f8:
                    8d:e1:9c:53:4e:5a:41:d9:16:cc:7f:21:2b:c9:5e:
                    9f:da:63:95:03:07:94:df:b1:e7:21:3f:91:ce:b7:
                    e6:01:4a:85:74:65:95:8e:40:be:6f:0e:b2:1f:39:
                    70:a9:e6:1b:57:18:f1:de:2b:9e:49:33:4c:75:87:
                    35:d5:a4:7c:1e:f4:89:cb:82:aa:8f:45:a5:87:97:
                    63:ed:53:b3:8f:f2:0c:32:f4:de:2e:0c:7e:88:5e:
                    bc:35:c3:47:77:81:9f:75:db:0f:62:80:b4:00:be:
                    61:f2:7e:c5:71:d5:51:5b:e8:94:b0:f4:5e:ec:77:
                    33:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6E:EB:74:CA:A5:B3:A2:74:6C:A7:2A:9E:7F:93:FF:29:82:02:2F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ef94ee4-4310-4cee-8115-190220d10277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:840::/46

    Signature Algorithm: sha256WithRSAEncryption
         8f:d4:f0:a9:6a:55:f6:d7:f5:05:b8:68:98:14:b8:93:75:cc:
         2a:d5:3f:15:57:06:c7:3a:77:6e:ac:e4:e8:03:15:c5:60:4f:
         67:cc:be:6b:ac:6b:94:e5:e7:80:56:2a:41:59:97:d0:4c:d5:
         7a:c4:6c:41:d4:f6:af:40:9f:c5:36:91:b4:e0:90:f1:c6:4d:
         50:02:17:26:f8:f7:3f:99:0b:88:2f:33:ec:cb:76:7a:e8:a6:
         cb:ed:40:c1:de:c9:b1:49:7c:41:f3:d2:5d:72:f7:d5:67:db:
         11:15:5e:e1:8d:97:b4:31:11:a6:ce:4d:a8:7a:ba:05:2b:d4:
         17:f7:b9:08:47:04:cd:9c:e8:4e:a2:d1:97:14:c8:a5:b3:e7:
         8b:64:b6:de:20:eb:4b:d9:cd:53:e1:52:fd:fd:c8:b3:9f:e8:
         62:c2:ea:7d:d7:dc:23:b1:02:e3:01:d8:90:f9:8a:9e:3d:5d:
         94:de:e0:3e:df:bd:a3:7b:99:62:e8:e4:b8:28:80:7b:57:f9:
         b0:d5:09:3c:b6:4f:dd:a4:ba:f1:f4:69:03:3c:d3:cf:38:54:
         c4:45:77:35:d0:08:fb:a5:20:20:30:07:91:74:a2:5f:92:ad:
         cf:ae:d4:3f:31:a6:ba:79:b3:4f:ea:b6:3a:15:05:f0:a1:ea:
         08:69:b1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----