Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/755b4fcb-1a64-4574-a1e3-742632f6382c.roa
File:                     755b4fcb-1a64-4574-a1e3-742632f6382c.roa (raw, json)
Hash identifier:          CPm5xGLtla6W+mtTqk/CEfqFDNdS157sX3uiT6M9P8s=
Subject key identifier:   61:37:DD:F1:91:AD:04:CD:EC:86:A8:92:01:93:4D:FD:C7:F3:64:AA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       61EB1582456FF6AA9C90BD6822B6CEF484C390CC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/755b4fcb-1a64-4574-a1e3-742632f6382c.roa
Signing time:             Wed 30 Jul 2025 00:11:35 +0000
ROA not before:           Wed 30 Jul 2025 00:11:35 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:8080::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:eb:15:82:45:6f:f6:aa:9c:90:bd:68:22:b6:ce:f4:84:c3:90:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:11:35 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=a92f12ad8539efc3dabf37dfa16c5036355486520d4b4bfe6a9d4d5630c6eecd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:17:ca:46:ba:7f:4c:4d:dc:39:9b:e6:7b:1a:
                    11:e6:07:a8:02:89:c2:ad:9c:91:ea:91:01:b7:77:
                    4f:27:de:1f:41:41:7c:b5:1a:d3:8d:a4:f3:d1:96:
                    ba:7c:cd:20:3b:51:e0:fb:3d:b8:61:96:34:16:01:
                    56:b8:c0:52:15:80:12:5b:82:16:a6:63:ea:6a:23:
                    17:a5:73:0d:92:04:15:31:f5:82:a6:b3:b2:8f:5b:
                    40:3b:f8:99:4a:23:01:db:66:a4:23:52:97:28:4d:
                    af:c9:ef:77:48:c7:47:b5:b8:cd:ae:00:47:c8:70:
                    dc:3a:ee:85:2a:e5:7b:5c:27:c1:68:0a:da:eb:b7:
                    04:b9:01:a7:7b:3b:f2:34:9e:4c:07:1e:b6:dd:82:
                    4e:5f:52:56:3c:82:c6:0c:c3:6a:17:07:77:19:1d:
                    ea:89:1b:a8:20:77:08:31:78:42:f7:89:13:d0:26:
                    9a:dc:6d:4e:6c:fa:b3:90:e1:33:76:7d:24:22:0c:
                    97:6b:ee:23:80:c6:1d:5a:91:a4:34:18:cf:ae:ea:
                    9a:20:8d:e2:9b:5a:0f:92:c8:f4:7e:c2:fb:7b:6d:
                    00:22:30:5e:1f:ad:a2:f7:d8:07:a2:86:65:d7:06:
                    b5:f8:35:ff:13:d0:26:1e:8d:19:bb:5c:c4:f6:74:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:37:DD:F1:91:AD:04:CD:EC:86:A8:92:01:93:4D:FD:C7:F3:64:AA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/755b4fcb-1a64-4574-a1e3-742632f6382c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:8080::/46

    Signature Algorithm: sha256WithRSAEncryption
         b9:4e:b9:17:fe:ef:e8:23:75:6e:ba:27:df:ea:42:f0:a6:9c:
         25:85:c4:6c:3d:a1:c0:fb:66:f9:5c:6c:4d:8a:3e:fa:36:f3:
         f0:1c:87:de:19:ec:0c:d4:b1:dc:b3:7b:b4:31:fb:56:9d:7b:
         6d:e4:6a:7f:36:9d:01:34:8a:50:bd:35:81:26:e3:98:30:b7:
         bf:83:94:0a:75:db:25:e9:b4:c3:73:ea:56:f7:81:36:42:1b:
         0b:0f:fb:35:9d:5d:ba:69:72:8f:b0:24:41:4e:8c:e7:31:e7:
         0c:65:01:37:e0:3e:f1:82:19:91:73:4e:9a:c1:5e:a1:1f:61:
         52:e6:44:54:c2:6d:72:d1:29:a7:48:fd:d3:5a:f2:47:24:2d:
         ac:bd:60:9f:21:de:33:64:1f:e1:4c:98:96:dd:c0:6a:55:1f:
         d9:76:0b:02:00:f6:26:50:38:13:f6:7c:b3:74:ea:10:94:b4:
         6c:cf:51:b8:8f:e2:5a:1e:8e:aa:dc:59:4d:18:9f:3c:4f:cc:
         00:6a:fe:5d:4f:96:d5:b8:d5:45:75:6a:d5:64:e5:96:ff:38:
         42:20:cc:ae:18:97:9c:9a:39:b0:6b:37:39:8f:d9:db:d4:9d:
         a4:b4:98:44:2e:95:38:0f:ec:f0:f9:75:34:b9:6e:a8:79:ed:
         fd:6e:e6:5c
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUYesVgkVv9qqckL1oIrbO9ITDkMwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwMTEzNVoX
DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAYTkyZjEyYWQ4NTM5ZWZjM2RhYmYz
N2RmYTE2YzUwMzYzNTU0ODY1MjBkNGI0YmZlNmE5ZDRkNTYzMGM2ZWVjZDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBfKRrp/TE3cOZvmexoR5geoAonC
rZyR6pEBt3dPJ94fQUF8tRrTjaTz0Za6fM0gO1Hg+z24YZY0FgFWuMBSFYASW4IW
pmPqaiMXpXMNkgQVMfWCprOyj1tAO/iZSiMB22akI1KXKE2vye93SMdHtbjNrgBH
yHDcOu6FKuV7XCfBaAra67cEuQGnezvyNJ5MBx623YJOX1JWPILGDMNqFwd3GR3q
iRuoIHcIMXhC94kT0Caa3G1ObPqzkOEzdn0kIgyXa+4jgMYdWpGkNBjPruqaII3i
m1oPksj0fsL7e20AIjBeH62i99gHooZl1wa1+DX/E9AmHo0Zu1zE9nSidwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFGE33fGRrQTN7IaokgGTTf3H82SqMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
Lzc1NWI0ZmNiLTFhNjQtNDU3NC1hMWUzLTc0MjYzMmY2MzgyYy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba+4CAMA0GCSqGSIb3DQEBCwUAA4IBAQC5TrkX/u/oI3Vuuiff
6kLwppwlhcRsPaHA+2b5XGxNij76NvPwHIfeGewM1LHcs3u0MftWnXtt5Gp/Np0B
NIpQvTWBJuOYMLe/g5QKddsl6bTDc+pW94E2QhsLD/s1nV26aXKPsCRBToznMecM
ZQE34D7xghmRc06awV6hH2FS5kRUwm1y0SmnSP3TWvJHJC2svWCfId4zZB/hTJiW
3cBqVR/ZdgsCAPYmUDgT9nyzdOoQlLRsz1G4j+JaHo6q3FlNGJ88T8wAav5dT5bV
uNVFdWrVZOWW/zhCIMyuGJecmjmwazc5j9nb1J2ktJhELpU4D+zw+XU0uW6oee39
buZc
-----END CERTIFICATE-----