Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e55030e-ff00-40de-a0ee-251a02025059.roa
File:                     3e55030e-ff00-40de-a0ee-251a02025059.roa (raw, json)
Hash identifier:          y+8/ONJfgegCb7mnrN4ISqE2VriNfddVTWcDdOcTGnw=
Subject key identifier:   E1:2E:3E:A4:42:C3:52:84:4A:0F:C2:80:CC:80:FF:3E:FD:BE:35:E8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       60DC56F25003625FBE74E1316FCBBCB73AA24386
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e55030e-ff00-40de-a0ee-251a02025059.roa
Signing time:             Wed 30 Jul 2025 00:30:16 +0000
ROA not before:           Wed 30 Jul 2025 00:30:16 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:6080::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:dc:56:f2:50:03:62:5f:be:74:e1:31:6f:cb:bc:b7:3a:a2:43:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:30:16 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=c88f3b78ba16c0b03050206fea53172afa4d5a02c5306d4f05e03cbfe058da99, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c4:c3:59:c8:0e:dc:df:08:2b:82:cf:84:98:
                    ac:a8:9a:14:30:42:8d:aa:b9:fc:6c:ee:c7:0b:27:
                    10:f3:c5:a5:d1:12:c5:1a:55:28:c8:7d:4c:b2:1d:
                    88:f2:90:e7:f9:b3:2f:9d:8d:12:e2:e3:9d:c4:46:
                    45:d7:5b:00:f4:0d:b8:b8:cd:8a:86:a2:77:46:38:
                    e0:49:95:b8:53:91:df:69:48:ed:cf:f4:bb:ab:0e:
                    53:a2:e1:48:05:73:e0:01:48:a5:48:fb:14:9a:67:
                    e3:69:13:b2:ad:e9:2e:73:83:4d:a6:ee:65:8e:bd:
                    42:4a:de:19:9f:72:61:e0:74:fb:c8:81:74:09:ad:
                    10:fa:5c:34:b8:f2:e9:ed:d2:0e:f9:96:08:17:28:
                    9c:13:96:e8:b7:9e:a8:ec:c7:ae:1b:9f:94:64:29:
                    01:8f:dd:89:cd:34:57:6a:41:63:8f:21:d3:8e:1c:
                    11:77:6e:62:44:40:fe:c1:e4:00:e9:9b:b3:0c:d6:
                    be:89:ca:f5:a0:80:92:06:8e:2a:ce:38:6f:bf:3a:
                    a8:9d:13:fb:64:db:9d:44:00:c8:74:77:34:ae:b3:
                    88:f9:68:1e:d5:ef:74:58:9f:f3:8d:7d:07:40:23:
                    ee:6f:68:34:69:b3:a0:1f:aa:74:bc:29:17:a2:92:
                    e7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2E:3E:A4:42:C3:52:84:4A:0F:C2:80:CC:80:FF:3E:FD:BE:35:E8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e55030e-ff00-40de-a0ee-251a02025059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:6080::/46

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:a8:42:f4:b5:c5:e7:0a:97:9e:2e:ed:96:d7:85:50:27:
         6a:7e:19:da:4c:f4:fc:9f:66:39:7f:5e:e7:27:96:34:b5:56:
         9f:4c:e4:03:0e:41:4e:4b:e9:5a:c9:4b:ad:c4:81:45:f4:f3:
         7a:1c:d6:9e:a5:63:1c:fe:77:b3:4c:53:f2:bf:c5:f6:0f:09:
         34:08:8d:e1:83:19:71:da:f3:db:ee:ba:8b:1c:79:57:96:b4:
         ae:9c:d6:60:cf:74:95:f3:9c:0d:17:a1:a2:ff:7f:37:4f:ff:
         21:ae:84:7f:26:97:c6:c4:73:c5:f8:6c:1a:23:4e:8b:dc:2e:
         8b:52:62:7b:e5:81:c5:c2:09:61:77:30:76:be:d3:a6:2e:dc:
         21:9e:fc:bf:27:d1:9f:ad:24:81:10:33:8d:21:54:a5:54:96:
         dc:b6:f8:f9:43:2c:60:60:9b:cc:e8:9c:fc:f3:15:6d:a6:f8:
         60:8e:0a:7e:ab:1c:20:67:03:fa:ae:bf:ce:0a:60:02:ff:7b:
         17:a2:85:41:fd:03:51:e2:27:f9:94:2a:5b:62:48:ef:0a:1a:
         4b:43:d1:bb:97:22:77:7c:c1:49:22:c2:53:2a:b8:b2:6a:8d:
         3a:41:6a:9e:91:1f:ba:9b:ba:89:29:4b:e6:f5:74:e8:f9:a2:
         ec:87:29:51
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUYNxW8lADYl++dOExb8u8tzqiQ4YwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwMzAxNloX
DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAYzg4ZjNiNzhiYTE2YzBiMDMwNTAy
MDZmZWE1MzE3MmFmYTRkNWEwMmM1MzA2ZDRmMDVlMDNjYmZlMDU4ZGE5OTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cTDWcgO3N8IK4LPhJisqJoUMEKN
qrn8bO7HCycQ88Wl0RLFGlUoyH1Msh2I8pDn+bMvnY0S4uOdxEZF11sA9A24uM2K
hqJ3RjjgSZW4U5HfaUjtz/S7qw5TouFIBXPgAUilSPsUmmfjaROyrekuc4NNpu5l
jr1CSt4Zn3Jh4HT7yIF0Ca0Q+lw0uPLp7dIO+ZYIFyicE5bot56o7MeuG5+UZCkB
j92JzTRXakFjjyHTjhwRd25iRED+weQA6ZuzDNa+icr1oICSBo4qzjhvvzqonRP7
ZNudRADIdHc0rrOI+Wge1e90WJ/zjX0HQCPub2g0abOgH6p0vCkXopLn8QIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFOEuPqRCw1KESg/CgMyA/z79vjXoMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzNlNTUwMzBlLWZmMDAtNDBkZS1hMGVlLTI1MWEwMjAyNTA1OS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba+2CAMA0GCSqGSIb3DQEBCwUAA4IBAQBEH6hC9LXF5wqXni7t
lteFUCdqfhnaTPT8n2Y5f17nJ5Y0tVafTOQDDkFOS+layUutxIFF9PN6HNaepWMc
/nezTFPyv8X2Dwk0CI3hgxlx2vPb7rqLHHlXlrSunNZgz3SV85wNF6Gi/383T/8h
roR/JpfGxHPF+GwaI06L3C6LUmJ75YHFwglhdzB2vtOmLtwhnvy/J9GfrSSBEDON
IVSlVJbctvj5QyxgYJvM6Jz88xVtpvhgjgp+qxwgZwP6rr/OCmAC/3sXooVB/QNR
4if5lCpbYkjvChpLQ9G7lyJ3fMFJIsJTKriyao06QWqekR+6m7qJKUvm9XTo+aLs
hylR
-----END CERTIFICATE-----