Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bbba35a-ebdf-420c-9fbe-831fe4124982.roa
File:                     5bbba35a-ebdf-420c-9fbe-831fe4124982.roa (raw, json)
Hash identifier:          ZfyV8FCGj6bUVYOH1Bz5PfDNw82GiIaUhYXN/YkAUWk=
Subject key identifier:   39:EC:9F:7F:A5:79:90:AC:23:B1:97:55:7A:99:89:8D:55:DD:E8:C0
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0714BC80D15678A57D49607534256DA552362390
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bbba35a-ebdf-420c-9fbe-831fe4124982.roa
Signing time:             Wed 30 Jul 2025 00:50:12 +0000
ROA not before:           Wed 30 Jul 2025 00:50:12 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:6040::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:14:bc:80:d1:56:78:a5:7d:49:60:75:34:25:6d:a5:52:36:23:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:50:12 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=39a5f4e90bb32c073417f7cfbef3ee17c92633b176225cc15e37d9362ba7bd8c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:11:18:7f:d5:71:8f:b6:2c:a8:0a:ac:8d:1e:
                    dd:7f:6e:2c:58:f2:36:f1:2a:e2:1b:21:c5:73:b7:
                    f3:be:fe:cb:9c:0f:85:a6:67:7f:9d:01:20:dc:4e:
                    77:06:87:7f:83:f1:95:e2:04:e0:97:d8:40:89:c5:
                    3c:40:88:f3:97:39:6d:32:5e:1a:f3:c4:1c:04:a2:
                    f3:7f:8a:ac:2c:24:66:23:c0:39:a2:06:63:2b:8f:
                    c4:c2:bc:56:36:57:e8:12:e6:f3:eb:31:6e:71:8e:
                    fa:24:74:bc:9b:59:ee:f4:e4:cf:46:41:4d:3f:d8:
                    57:ea:f8:9e:07:fb:88:e2:0b:30:7f:c4:b4:b9:7d:
                    50:2d:d3:18:41:c7:dc:01:30:0c:25:eb:07:1b:89:
                    ee:75:ed:ff:98:bc:1a:8f:2d:01:b0:0e:53:40:68:
                    11:36:4f:80:cb:91:e7:9f:82:4f:72:ce:3c:51:c4:
                    bf:6b:80:fd:05:d0:3e:d0:bc:30:b0:9b:e6:3f:c8:
                    cf:cb:6c:f5:ab:75:62:f7:b0:ad:dd:e2:d0:6b:89:
                    17:fa:55:32:45:7b:b8:a1:0d:34:c0:71:5d:0b:77:
                    47:43:1c:fc:1b:ab:1e:b1:7f:fb:e7:42:99:02:a9:
                    9b:25:1e:39:fe:16:f9:7a:62:1a:53:d7:8b:23:fd:
                    8b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EC:9F:7F:A5:79:90:AC:23:B1:97:55:7A:99:89:8D:55:DD:E8:C0
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bbba35a-ebdf-420c-9fbe-831fe4124982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:6040::/46

    Signature Algorithm: sha256WithRSAEncryption
         9e:16:4b:bf:e2:41:ff:b0:ed:50:4b:eb:f0:ff:f1:b5:67:fa:
         9b:04:ee:ff:0e:71:c1:41:3a:ab:14:55:23:0b:19:60:29:9a:
         3c:c9:97:9d:f5:82:94:5b:a4:8c:20:13:69:c2:09:9b:fd:75:
         00:bf:37:28:5f:e7:bb:b3:8c:ca:35:5a:b7:3c:1f:7b:a6:4b:
         ff:51:94:fb:e4:a6:8d:96:63:0b:20:30:13:6e:45:df:9e:12:
         ef:8b:a5:fa:3c:e8:d2:ad:33:c0:04:17:ec:af:1b:47:be:8b:
         0d:46:49:c1:a8:ce:78:49:e7:16:b3:de:c3:2f:ec:61:9c:29:
         86:69:27:ce:bb:2d:a4:ae:74:7d:04:e6:29:73:9b:bc:61:6d:
         2e:08:67:47:5d:69:79:01:fb:8b:22:05:7d:14:d8:1d:71:30:
         a3:37:08:9a:1a:3a:57:09:c4:ca:49:87:c6:31:d2:b8:eb:a1:
         56:bf:11:2a:5f:b3:ce:63:1f:c8:29:a6:ff:f7:45:65:5a:f5:
         d2:02:b6:4e:90:06:11:42:ce:53:be:1d:ba:62:4f:9c:5e:b4:
         b6:62:03:2d:fd:36:4f:00:50:10:38:e4:30:70:03:32:f6:2a:
         5b:60:fa:75:08:a4:6b:95:b3:8b:e0:cf:f5:9b:b7:03:ee:ef:
         aa:97:c9:54
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUBxS8gNFWeKV9SWB1NCVtpVI2I5AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwNTAxMloX
DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAMzlhNWY0ZTkwYmIzMmMwNzM0MTdm
N2NmYmVmM2VlMTdjOTI2MzNiMTc2MjI1Y2MxNWUzN2Q5MzYyYmE3YmQ4YzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hEYf9Vxj7YsqAqsjR7df24sWPI2
8SriGyHFc7fzvv7LnA+Fpmd/nQEg3E53Bod/g/GV4gTgl9hAicU8QIjzlzltMl4a
88QcBKLzf4qsLCRmI8A5ogZjK4/EwrxWNlfoEubz6zFucY76JHS8m1nu9OTPRkFN
P9hX6vieB/uI4gswf8S0uX1QLdMYQcfcATAMJesHG4nude3/mLwajy0BsA5TQGgR
Nk+Ay5Hnn4JPcs48UcS/a4D9BdA+0LwwsJvmP8jPy2z1q3Vi97Ct3eLQa4kX+lUy
RXu4oQ00wHFdC3dHQxz8G6sesX/750KZAqmbJR45/hb5emIaU9eLI/2LQQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFDnsn3+leZCsI7GXVXqZiY1V3ejAMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzViYmJhMzVhLWViZGYtNDIwYy05ZmJlLTgzMWZlNDEyNDk4Mi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba+2BAMA0GCSqGSIb3DQEBCwUAA4IBAQCeFku/4kH/sO1QS+vw
//G1Z/qbBO7/DnHBQTqrFFUjCxlgKZo8yZed9YKUW6SMIBNpwgmb/XUAvzcoX+e7
s4zKNVq3PB97pkv/UZT75KaNlmMLIDATbkXfnhLvi6X6POjSrTPABBfsrxtHvosN
RknBqM54SecWs97DL+xhnCmGaSfOuy2krnR9BOYpc5u8YW0uCGdHXWl5AfuLIgV9
FNgdcTCjNwiaGjpXCcTKSYfGMdK466FWvxEqX7POYx/IKab/90VlWvXSArZOkAYR
Qs5Tvh26Yk+cXrS2YgMt/TZPAFAQOOQwcAMy9ipbYPp1CKRrlbOL4M/1m7cD7u+q
l8lU
-----END CERTIFICATE-----