Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32ec7e70-fe89-4ce7-af86-a7f5b19f50c3.roa
File:                     32ec7e70-fe89-4ce7-af86-a7f5b19f50c3.roa (raw, json)
Hash identifier:          Jyp9wP6V1310d2XSHAL1Lqr+W6dTtPGXl/GCF6Hchr8=
Subject key identifier:   AA:64:59:A8:61:C0:00:15:6B:8C:CE:7F:1D:44:40:6B:AA:E9:80:68
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       717FBD8BBB858EA47DE753665C82DE23E202B557
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32ec7e70-fe89-4ce7-af86-a7f5b19f50c3.roa
Signing time:             Wed 30 Jul 2025 00:41:38 +0000
ROA not before:           Wed 30 Jul 2025 00:41:38 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:c000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 17:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7f:bd:8b:bb:85:8e:a4:7d:e7:53:66:5c:82:de:23:e2:02:b5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:41:38 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=2dfb914e4bd643da601bce4aab9a1b2d3ac15c55934a137e2e762fea65782eb6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:d2:80:19:40:57:58:5b:0a:2c:11:f4:8c:
                    f4:bf:ee:d9:4d:fa:4a:28:46:41:09:81:11:46:35:
                    4c:ec:52:fb:5e:56:02:5d:95:fd:ff:4d:6f:7d:71:
                    9b:4d:be:ab:7a:bf:9f:e8:ec:de:ae:d3:e8:d0:35:
                    1a:d7:b8:f5:26:41:93:c2:b2:95:12:8e:07:67:47:
                    0b:4e:db:d5:b2:1a:40:54:1b:9e:db:68:9b:99:a9:
                    28:48:d4:b0:f9:dd:09:41:78:40:de:38:ce:5e:87:
                    77:a1:66:56:b5:3c:52:47:72:e2:95:64:c5:f7:9f:
                    52:85:d0:1e:59:b3:1b:73:9e:f8:ff:04:c6:01:a9:
                    88:79:09:7b:0d:9b:93:29:93:db:d4:f1:8c:1a:0e:
                    a3:0c:d3:37:ff:55:06:c6:c5:be:bc:62:31:26:28:
                    13:74:b8:43:fe:d6:7c:33:21:f9:3a:18:ed:dd:c5:
                    54:fd:fe:9d:4e:a2:54:ca:88:65:42:82:f4:69:e6:
                    33:5d:28:02:a9:75:79:8d:2c:5b:f6:2d:a7:ac:17:
                    8c:dd:c8:bc:32:48:bc:73:75:13:d9:fb:f7:ec:f2:
                    90:35:16:04:e8:e9:88:87:fa:cf:f4:d3:13:84:50:
                    eb:e6:81:2d:bc:e8:08:18:7f:eb:08:1c:f9:48:ea:
                    e6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:64:59:A8:61:C0:00:15:6B:8C:CE:7F:1D:44:40:6B:AA:E9:80:68
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32ec7e70-fe89-4ce7-af86-a7f5b19f50c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:22:b3:b5:a2:c4:11:4c:f6:b9:37:c3:2f:fb:fa:5b:c7:44:
         1a:a9:58:6f:a9:62:ea:e2:2e:ae:06:c9:c4:56:7d:0a:59:01:
         16:94:19:b2:7c:85:4a:30:21:fc:fd:ca:34:c5:4c:2f:7b:eb:
         37:41:88:cc:db:27:83:d9:cf:6c:71:44:6d:6c:af:25:ff:81:
         f5:c9:b0:7d:62:45:7c:a0:ea:47:45:63:dd:4c:dc:01:f6:b3:
         37:36:ea:56:c7:5a:00:04:fd:07:56:5e:bb:14:5b:9d:99:75:
         d3:a8:40:1c:8b:9e:b6:49:3c:6b:65:90:2a:c8:dd:57:62:ec:
         ad:ad:15:03:24:ca:16:9c:cf:f2:62:e7:31:dd:35:90:d4:78:
         96:97:01:d0:b0:01:27:84:7c:e1:a4:46:9e:ca:06:2e:39:00:
         ac:1e:c6:43:9a:88:82:57:98:c2:d7:2f:65:9c:7e:b1:97:cc:
         7b:35:e1:90:41:8f:db:bf:91:10:68:9e:98:97:3d:f1:5c:14:
         7c:d5:67:4a:cb:ca:6b:d1:f0:55:68:bc:ab:3e:17:ab:ea:24:
         0d:c2:82:44:a4:f9:c2:0a:7c:40:17:27:3f:4b:64:04:b8:d5:
         4a:eb:d0:7b:b5:e5:7d:51:49:5e:eb:9e:49:6c:e3:8b:04:72:
         e8:fc:27:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----