Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b36d747-c3be-40bb-8ae0-a344a4ee6f55.roa
File:                     5b36d747-c3be-40bb-8ae0-a344a4ee6f55.roa (raw, json)
Hash identifier:          VPGmBNIBbcQkeRXmWPq/LX3sucErYTPlNkFkRJD7UoQ=
Subject key identifier:   60:D8:80:75:C5:68:7C:80:E6:13:00:B4:2E:10:65:AC:3E:38:BA:5D
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       613B5A24932DC426A23E9895889FEAE381C9288D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b36d747-c3be-40bb-8ae0-a344a4ee6f55.roa
Signing time:             Wed 30 Jul 2025 00:31:01 +0000
ROA not before:           Wed 30 Jul 2025 00:31:01 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:9000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 17:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3b:5a:24:93:2d:c4:26:a2:3e:98:95:88:9f:ea:e3:81:c9:28:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:31:01 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=d137462bb70bfcc7430a9e2c7849ea6a007ea551ba48bb507a1af4e7b51163d8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:19:3c:f6:d8:f5:94:2b:43:0e:fe:a9:83:
                    2e:c1:af:2c:aa:be:f5:bd:e5:e8:0f:b0:be:eb:c6:
                    75:bf:d5:37:4a:fe:b2:82:aa:37:e4:b3:81:92:a7:
                    48:1e:f5:bf:d3:8e:4f:32:83:73:a5:00:ca:c1:a3:
                    9d:5b:94:6d:6a:88:80:09:9b:67:ca:a3:c8:80:8a:
                    21:7c:7e:78:33:6a:65:10:e5:8f:d3:30:cf:24:d4:
                    ff:a7:e8:c3:44:91:dc:7c:b6:f6:bb:66:13:b6:58:
                    5d:f8:91:ce:a2:37:13:44:0b:24:ef:b0:2e:f3:1d:
                    a8:c0:39:0d:37:2f:fc:05:03:3e:72:0a:39:67:95:
                    fb:51:71:b0:84:4a:d0:df:60:7d:05:a4:8d:57:16:
                    41:08:bd:73:a6:0c:cc:15:cc:12:c8:70:e8:f5:6a:
                    6b:08:16:c8:37:40:1d:a9:3a:a0:90:f3:5c:f7:f5:
                    86:67:f3:bd:13:4c:05:0b:08:f3:6d:df:10:a7:2c:
                    e8:82:06:d0:bd:89:01:ee:2c:9f:cf:53:eb:74:8e:
                    9a:c7:49:10:d2:03:f5:59:c4:6a:66:8c:89:8c:d4:
                    e7:03:6d:83:77:f4:cf:d0:25:bf:c2:c0:ae:e0:17:
                    fe:75:70:7e:c9:11:1f:33:d1:a9:58:bf:86:c3:93:
                    00:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D8:80:75:C5:68:7C:80:E6:13:00:B4:2E:10:65:AC:3E:38:BA:5D
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b36d747-c3be-40bb-8ae0-a344a4ee6f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bc:1c:d6:1f:54:d0:2f:ed:e6:19:24:b8:1f:80:a7:9d:95:aa:
         d2:28:de:48:11:78:15:84:b6:3c:a1:ca:1a:bb:91:3f:a0:d3:
         4e:0d:cf:38:07:5e:ed:b1:e1:7f:5a:30:1b:bc:0e:8c:69:c0:
         51:df:60:b9:4b:77:15:79:3a:e5:b3:18:33:04:6a:08:53:80:
         e7:9d:3b:6d:1c:75:4d:2d:66:59:2d:a0:1a:73:d8:c9:02:15:
         29:2a:c4:ab:31:c2:8c:58:b9:2a:68:50:20:81:82:31:a5:c9:
         07:34:11:c2:68:9f:06:7f:39:e6:c3:10:6b:c4:b8:6e:52:04:
         d6:5e:f9:78:8f:e9:5f:7f:a7:4c:0b:ba:51:27:58:42:00:63:
         b4:27:c0:c9:41:60:2f:2a:5e:48:f9:ef:03:b4:29:f0:d6:02:
         b3:5a:8a:0b:87:93:e0:af:31:a2:09:94:5e:7d:ae:dc:47:a4:
         a2:6f:8a:87:91:da:50:28:9a:63:ad:f1:be:1a:cc:1b:c1:e6:
         cb:93:44:b0:30:32:9b:ee:b4:64:6e:89:2d:18:04:0d:54:fc:
         45:99:c5:ad:67:aa:37:15:65:8a:e0:0c:36:d9:d4:4c:c9:04:
         1f:e0:33:a1:3d:65:80:37:19:57:69:a4:dd:db:3a:6e:fe:71:
         a3:15:65:b0
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUYTtaJJMtxCaiPpiViJ/q44HJKI0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwMzEwMVoX
DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAZDEzNzQ2MmJiNzBiZmNjNzQzMGE5
ZTJjNzg0OWVhNmEwMDdlYTU1MWJhNDhiYjUwN2ExYWY0ZTdiNTExNjNkODEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTIZPPbY9ZQrQw7+qYMuwa8sqr71
veXoD7C+68Z1v9U3Sv6ygqo35LOBkqdIHvW/045PMoNzpQDKwaOdW5RtaoiACZtn
yqPIgIohfH54M2plEOWP0zDPJNT/p+jDRJHcfLb2u2YTtlhd+JHOojcTRAsk77Au
8x2owDkNNy/8BQM+cgo5Z5X7UXGwhErQ32B9BaSNVxZBCL1zpgzMFcwSyHDo9Wpr
CBbIN0AdqTqgkPNc9/WGZ/O9E0wFCwjzbd8QpyzoggbQvYkB7iyfz1PrdI6ax0kQ
0gP1WcRqZoyJjNTnA22Dd/TP0CW/wsCu4Bf+dXB+yREfM9GpWL+Gw5MAewIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFGDYgHXFaHyA5hMAtC4QZaw+OLpdMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzViMzZkNzQ3LWMzYmUtNDBiYi04YWUwLWEzNDRhNGVlNmY1NS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba+5AwDQYJKoZIhvcNAQELBQADggEBALwc1h9U0C/t5hkkuB+A
p52VqtIo3kgReBWEtjyhyhq7kT+g004NzzgHXu2x4X9aMBu8DoxpwFHfYLlLdxV5
OuWzGDMEaghTgOedO20cdU0tZlktoBpz2MkCFSkqxKsxwoxYuSpoUCCBgjGlyQc0
EcJonwZ/OebDEGvEuG5SBNZe+XiP6V9/p0wLulEnWEIAY7QnwMlBYC8qXkj57wO0
KfDWArNaiguHk+CvMaIJlF59rtxHpKJvioeR2lAommOt8b4azBvB5suTRLAwMpvu
tGRuiS0YBA1U/EWZxa1nqjcVZYrgDDbZ1EzJBB/gM6E9ZYA3GVdppN3bOm7+caMV
ZbA=
-----END CERTIFICATE-----