Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34f0a7a2-e26e-4df2-8831-0d777cdb488c.roa
File:                     34f0a7a2-e26e-4df2-8831-0d777cdb488c.roa (raw, json)
Hash identifier:          31gkvQ9MJ+TF5wNsmF++TNsmlrIbBZilKTfV1K5sFgU=
Subject key identifier:   29:28:90:45:C6:8F:A5:D1:15:A4:8C:74:BC:23:90:CE:9C:BD:3F:53
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5DAC8661F9221A2E52D5CBAAAF3CDB9614C53F41
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34f0a7a2-e26e-4df2-8831-0d777cdb488c.roa
Signing time:             Wed 30 Jul 2025 00:30:30 +0000
ROA not before:           Wed 30 Jul 2025 00:30:30 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:2840::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 17:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ac:86:61:f9:22:1a:2e:52:d5:cb:aa:af:3c:db:96:14:c5:3f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:30:30 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=8937e63955ca223347ab40e8fdcd4461bdba96a6acc8ae870d5fe5fec01886f0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:91:c6:2f:1c:32:30:51:b2:4e:dc:65:78:
                    e3:20:ee:44:bc:99:74:5e:02:c9:79:bd:3d:f5:69:
                    89:ca:d3:fe:5a:d5:f4:38:eb:ca:4d:53:9a:60:ad:
                    6c:d9:65:59:41:b4:e5:78:67:62:e4:82:e4:46:c6:
                    bb:a9:93:3e:7f:26:51:be:76:db:db:f8:0a:d4:72:
                    f3:d1:a5:7c:77:a1:45:25:1c:91:f2:1b:c8:71:60:
                    a9:e0:b3:ed:28:0c:da:ac:29:2d:e0:a7:7f:26:75:
                    d4:64:50:b7:f1:7d:15:5c:0a:cb:2f:25:7d:ce:a3:
                    39:e1:c3:80:22:ab:9e:45:20:5c:19:81:21:5e:28:
                    04:ea:97:d2:8d:fd:b2:2b:06:17:75:55:f4:45:10:
                    8f:c8:d8:1e:4c:c1:61:84:d8:6c:a6:54:f7:3c:2f:
                    04:a0:ef:b2:2d:4b:4f:73:41:3b:bd:83:bd:30:2d:
                    91:35:7f:51:3d:d3:48:f1:e7:71:61:a8:d6:d8:a0:
                    f2:3e:8a:b9:41:9b:b5:9c:72:5e:b1:00:fa:da:c2:
                    fe:05:f1:2f:c7:47:78:6b:bc:3d:e5:fe:d0:91:ee:
                    b6:df:b6:4d:5a:51:af:ae:4e:43:10:ce:f1:72:a1:
                    b0:ec:82:a8:ba:7f:91:d6:89:c5:0b:5d:ca:4c:cc:
                    56:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:28:90:45:C6:8F:A5:D1:15:A4:8C:74:BC:23:90:CE:9C:BD:3F:53
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34f0a7a2-e26e-4df2-8831-0d777cdb488c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:2840::/46

    Signature Algorithm: sha256WithRSAEncryption
         73:19:32:92:49:52:e3:47:69:c2:70:37:9b:cc:3a:26:65:1c:
         11:eb:7c:7d:08:e4:d2:36:3a:cf:e1:04:09:f1:e9:19:4d:c9:
         26:6e:a3:10:1b:c9:3b:aa:ae:00:d8:84:0a:5e:25:9d:b4:84:
         a6:3f:39:ce:dd:63:d8:69:6a:dc:18:11:55:4b:95:80:c7:3d:
         cf:95:ab:64:d2:f5:80:c6:82:cb:0c:3e:c0:5f:30:1c:bd:f5:
         c5:87:82:54:3c:6b:a2:7b:1d:d4:64:2e:21:39:1c:b7:83:54:
         12:ea:e7:43:4d:9c:0e:31:98:48:c5:fc:8c:00:35:04:e3:86:
         39:8b:2f:63:0f:68:20:da:33:63:db:f7:3a:07:7e:55:cf:17:
         11:b6:2f:b2:11:c5:42:2c:e8:76:73:49:eb:d9:37:54:55:fe:
         1c:19:71:71:ae:f2:a9:99:0a:66:95:c5:87:8f:a4:50:4a:c8:
         c0:6b:f2:27:34:ba:ef:55:f2:36:24:de:1f:d3:a3:17:f5:d3:
         f2:23:cd:11:dc:25:2c:03:e6:27:55:b2:17:43:c1:80:60:ea:
         2f:6c:8e:6a:35:0e:47:83:28:25:be:78:05:96:8f:43:bc:f6:
         b9:92:0d:51:31:0d:a6:7a:06:d6:ba:30:f2:e1:d4:9d:aa:7d:
         11:6d:58:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----