Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4456e0d3-b82d-4583-bca5-67fb811dbd9c.roa
File:                     4456e0d3-b82d-4583-bca5-67fb811dbd9c.roa (raw, json)
Hash identifier:          CV0QG8G0mLfHqC1BF1j/BmYc6EI4aVU9sAig3Z9qz7I=
Subject key identifier:   05:F5:AA:DA:ED:66:D6:B1:D3:81:2F:77:7E:79:0D:6E:A0:B0:D2:5A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       66B45087CC4761D2A8F5102AAA28B2C244EA1209
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4456e0d3-b82d-4583-bca5-67fb811dbd9c.roa
Signing time:             Mon 07 Jul 2025 15:00:04 +0000
ROA not before:           Mon 07 Jul 2025 15:00:04 +0000
ROA not after:            Mon 11 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:8040::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 17:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b4:50:87:cc:47:61:d2:a8:f5:10:2a:aa:28:b2:c2:44:ea:12:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul  7 15:00:04 2025 GMT
            Not After : Aug 11 23:59:59 2025 GMT
        Subject: serialNumber=74b16c1501d7b6ddd5fd16cb0f855b63ea275ef50422ab195c6df50255ce7e2b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:0a:f8:72:81:7d:4d:b0:63:5b:4c:f8:bc:
                    66:83:92:c3:cc:da:f5:32:3e:b6:04:3c:ba:bf:c6:
                    cb:19:5d:49:b2:e3:71:cb:7b:56:ba:8c:86:e0:ed:
                    ae:fc:c6:21:70:c2:46:5e:12:f4:f5:bb:03:2a:60:
                    f8:86:29:e2:40:93:c2:b6:4a:69:e7:6b:a1:af:d3:
                    6c:42:69:99:c9:1e:75:e5:a0:fd:88:11:24:72:81:
                    2b:fd:95:b6:c5:15:8c:16:5e:34:50:48:7c:aa:41:
                    f0:ca:68:ad:85:8e:cb:54:31:fd:58:da:38:a1:5b:
                    34:c5:23:a9:e2:a3:92:e8:7e:b4:a5:f6:8d:c8:9b:
                    a3:27:a4:44:01:28:d2:f6:8d:32:cd:42:69:d3:b0:
                    b0:71:63:ca:d4:f8:3d:6c:e7:2d:73:82:27:8f:ff:
                    fa:34:3b:2e:fa:1f:bb:71:14:3a:78:3f:c8:bd:48:
                    c9:1c:b0:be:60:ca:ae:26:f8:73:5a:71:3d:6e:11:
                    bf:28:54:c5:a6:63:ff:af:91:49:53:5e:6d:1e:9f:
                    ee:03:dd:3b:af:61:cf:67:84:ce:e7:6e:7b:db:3e:
                    d1:fa:04:9f:2c:7c:1f:b4:36:50:6c:a8:2f:37:97:
                    cc:56:9a:a5:46:c2:8c:af:e2:44:f9:4b:6b:b9:38:
                    41:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F5:AA:DA:ED:66:D6:B1:D3:81:2F:77:7E:79:0D:6E:A0:B0:D2:5A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4456e0d3-b82d-4583-bca5-67fb811dbd9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:8040::/46

    Signature Algorithm: sha256WithRSAEncryption
         96:1c:b9:cd:b6:ca:65:8c:c0:45:e8:82:44:60:f1:d9:ee:9b:
         6d:6b:1d:63:6f:94:09:8b:d9:52:fc:e2:03:65:09:c7:04:ad:
         4a:b6:c9:08:20:6e:90:7e:8e:62:6d:fe:fa:81:9d:9b:f2:71:
         f2:ef:21:9a:50:21:4c:dd:a2:b1:49:65:34:a4:0a:ee:30:de:
         72:d2:d3:75:49:5b:7a:f2:18:73:11:f8:82:13:98:d6:e5:5b:
         be:65:96:d9:17:74:b1:bf:76:ab:6f:67:a4:04:b5:06:8f:65:
         4d:46:d2:69:82:8d:e8:14:95:2b:60:91:04:d9:c4:f5:98:2a:
         e9:52:18:20:47:c9:12:6a:b2:cc:66:d9:70:63:8e:d9:54:b0:
         c2:b2:67:50:84:64:3a:87:14:a1:10:0f:ec:37:bf:c6:85:5f:
         ad:3c:04:bb:a5:c8:7a:ad:14:3b:77:60:cd:ca:0a:0f:9b:58:
         db:a5:5a:6b:6b:cd:5c:ac:1a:63:a7:8b:73:f6:c4:aa:2d:52:
         6a:49:f4:4d:7f:19:0d:13:c2:7e:80:90:39:61:92:e2:43:68:
         2a:94:13:0d:13:96:14:80:99:4a:08:f5:e0:c6:7e:32:72:12:
         b9:e4:10:73:74:20:cb:3f:28:db:77:1b:05:ff:ee:d6:32:0a:
         23:2e:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----