Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7974622f-4ca2-41cf-a120-c997e94d7512.roa
File:                     7974622f-4ca2-41cf-a120-c997e94d7512.roa (raw, json)
Hash identifier:          xlu70sMqEtzzZJiER4aTL6O1lyV6++Tjdwp0RuGiYF4=
Subject key identifier:   6E:CA:7D:38:8F:FD:FA:B7:04:88:28:03:AA:CC:E5:93:B1:01:9C:62
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3C7090E964ED03D37637C93F1FE551B0185B3484
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7974622f-4ca2-41cf-a120-c997e94d7512.roa
Signing time:             Wed 30 Jul 2025 00:21:00 +0000
ROA not before:           Wed 30 Jul 2025 00:21:00 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:b040::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:70:90:e9:64:ed:03:d3:76:37:c9:3f:1f:e5:51:b0:18:5b:34:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:21:00 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=c58a87db26845bab5d6e55ee8fc5321aa7d9f2bc5e7800a34c3d7473abea6524, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:07:eb:21:cc:01:31:5d:a1:98:03:b9:de:
                    f8:43:66:e6:92:10:21:04:49:72:ff:e4:cc:95:e5:
                    bd:60:59:9b:80:e4:07:18:4f:a0:15:1a:39:1f:5b:
                    28:8b:6f:22:b8:25:94:09:31:f8:dc:25:9e:5b:e8:
                    ff:e9:1d:ba:a1:e0:81:34:b5:53:78:61:da:83:26:
                    24:9c:98:64:14:0b:c9:22:84:09:1b:b2:37:f8:d9:
                    1b:9b:e5:c8:35:0f:11:13:53:7c:cc:17:69:10:f8:
                    7f:56:a5:cc:8d:91:ea:80:13:b1:89:9a:4f:8a:5e:
                    64:ca:3a:34:63:a7:67:49:04:32:80:e1:63:89:6b:
                    21:45:b9:5d:ea:28:b0:ea:ec:76:32:58:91:3d:a7:
                    69:bf:2d:ca:9c:19:bb:ec:5a:21:0b:24:f6:b9:29:
                    37:51:7a:19:68:e1:9a:93:2b:1c:99:5e:5e:4e:a2:
                    6a:5e:5a:07:42:48:08:89:24:f6:c4:af:7e:3f:7f:
                    2b:03:4a:47:76:cb:bc:7a:b9:20:75:8e:eb:82:4f:
                    f6:91:af:fe:13:42:68:c3:ad:ba:b7:04:b6:0e:6d:
                    12:e8:67:e7:e3:a5:85:06:16:75:70:f3:97:c8:3e:
                    d9:d8:5c:b7:8e:48:15:58:f4:74:2e:42:2a:d3:e2:
                    62:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CA:7D:38:8F:FD:FA:B7:04:88:28:03:AA:CC:E5:93:B1:01:9C:62
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7974622f-4ca2-41cf-a120-c997e94d7512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:b040::/46

    Signature Algorithm: sha256WithRSAEncryption
         a8:a3:0b:6a:8e:35:8f:56:10:3e:e3:f6:cd:73:dc:3f:ed:ef:
         6e:c6:66:d6:ef:3e:44:05:84:32:7f:35:f0:98:9b:f5:70:79:
         2c:41:3f:7b:1c:c6:71:99:f3:42:da:be:94:f9:fc:20:2c:22:
         be:ec:a5:7e:a7:43:4d:9d:f8:fc:5c:82:ea:bd:6e:85:c2:f0:
         ed:3e:54:5b:5f:35:07:3f:ab:ee:b7:b2:c7:10:07:4c:4d:b6:
         bc:a4:df:92:b2:9f:1d:c5:ab:19:8a:ab:59:83:7c:3f:04:dc:
         3f:9f:3c:a1:7d:4c:37:2e:72:02:92:11:ed:b0:1f:be:ab:7a:
         c0:0a:ab:7f:31:52:06:b9:14:31:e1:91:33:63:ef:b5:8f:63:
         3c:af:dd:78:ce:6f:55:2b:1a:4f:d6:0c:8c:34:0b:db:55:d4:
         4c:ff:eb:77:80:2d:19:88:14:e1:57:d1:44:e6:9c:a4:4f:41:
         da:85:4c:01:0b:04:f3:ec:73:09:8b:b4:43:98:f3:41:53:92:
         35:26:54:90:05:79:a9:78:9f:ab:f5:ca:77:20:88:5c:5e:f4:
         2c:43:88:df:a5:4f:f2:f4:2e:d9:22:cd:c2:4d:3f:f6:6a:93:
         a3:f8:5c:fd:0d:fd:57:59:fd:2a:5c:e7:22:ac:07:aa:69:8c:
         57:3d:cd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----