Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/836fdc3d-bac2-4ce4-947a-8830881cb8e8.roa
File:                     836fdc3d-bac2-4ce4-947a-8830881cb8e8.roa (raw, json)
Hash identifier:          IKOquOfOxIA/Y8WilvD72xAWrSd0HzlAXHGsFMsgxZA=
Subject key identifier:   25:9F:63:14:8D:EB:7E:98:BF:9A:BC:FD:6D:92:32:2B:46:0D:E1:16
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1E0F17671A810FBEC1B219CDB2DB8DCF8F26AEBF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/836fdc3d-bac2-4ce4-947a-8830881cb8e8.roa
Signing time:             Tue 29 Jul 2025 00:50:40 +0000
ROA not before:           Tue 29 Jul 2025 00:50:40 +0000
ROA not after:            Tue 02 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:880::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0f:17:67:1a:81:0f:be:c1:b2:19:cd:b2:db:8d:cf:8f:26:ae:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 29 00:50:40 2025 GMT
            Not After : Sep  2 23:59:59 2025 GMT
        Subject: serialNumber=4c540ae983ebfb2d028f7627ffba721cb266df929f069999c978b76310dc77cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:84:e5:4e:6d:c7:87:96:58:01:36:05:41:
                    0f:a5:24:c4:b9:39:5f:4a:08:e9:94:b7:df:ac:a8:
                    d6:90:16:2a:30:52:f6:d3:9d:48:7b:84:22:99:bc:
                    cc:b9:e3:eb:1f:08:13:af:88:b6:8b:88:fb:28:32:
                    8c:0a:a8:f9:35:39:e5:5c:8d:7e:40:41:4c:57:60:
                    1c:10:2c:a4:62:f8:28:ab:b6:6f:93:4f:e7:a8:da:
                    fd:52:18:63:7b:c9:a8:a5:b1:d1:e1:6b:80:3f:97:
                    7c:64:b4:22:7a:5c:e4:57:0a:a6:96:2f:b8:82:d2:
                    ab:11:e9:c4:9f:21:a9:4e:2b:31:46:c0:2a:74:3a:
                    aa:e2:28:1a:5f:07:f6:ef:dd:f7:23:4e:c2:45:0f:
                    01:f3:22:17:ea:cf:26:4f:04:42:07:e9:9f:91:d9:
                    c1:b0:d1:08:12:74:36:c9:f0:02:06:d8:b5:9f:a2:
                    16:9f:8e:90:b4:92:b7:88:18:d6:5f:ce:b1:5b:dd:
                    fc:89:6f:ec:c9:f3:9b:da:41:eb:49:ea:a9:83:8e:
                    90:6e:70:18:a5:26:8e:85:e4:c9:ac:66:7a:a9:13:
                    8e:00:58:72:8d:1d:16:12:54:9a:32:12:f8:3c:d2:
                    57:5f:e4:1e:75:c1:1d:a8:3a:73:e4:b0:61:75:7f:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9F:63:14:8D:EB:7E:98:BF:9A:BC:FD:6D:92:32:2B:46:0D:E1:16
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/836fdc3d-bac2-4ce4-947a-8830881cb8e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:880::/46

    Signature Algorithm: sha256WithRSAEncryption
         49:ec:17:06:85:8f:3e:e7:e1:56:94:b2:2a:ef:db:0c:ee:80:
         11:7e:20:a6:01:05:54:a6:5e:6c:e1:fc:e8:54:e1:44:09:3e:
         a9:59:69:16:3e:83:16:fe:bd:fc:e8:60:b9:34:a3:0b:7b:49:
         17:bd:83:68:45:6b:4f:8c:a1:0f:bb:42:1a:96:3d:be:75:c7:
         b5:48:af:21:4f:66:22:11:69:a3:a6:68:c1:6e:db:2e:f3:6d:
         62:d7:64:4e:5f:ea:79:18:6a:9a:ea:02:35:2d:31:85:64:34:
         cd:db:47:5f:cd:75:86:7b:8d:ca:bd:01:37:61:ce:2d:12:71:
         8e:fb:fc:e1:3b:44:94:2b:20:0a:03:e0:a8:ee:67:76:ed:43:
         68:3a:8a:84:8c:c6:18:4e:44:ca:d0:16:7a:1f:7e:2a:6d:cd:
         ba:95:42:61:7f:e0:f5:f4:b8:7e:8e:e3:0d:29:e5:4d:27:0d:
         04:d5:d0:de:bb:a6:df:7b:13:25:c5:1d:fe:bd:9a:1a:86:97:
         0c:f8:29:3b:1a:47:d4:d5:d2:3d:ff:bf:ca:31:b6:66:85:47:
         da:3e:aa:3e:2e:cb:8c:fb:b6:a5:56:75:ad:a5:de:56:95:ea:
         60:15:39:24:76:e1:27:73:17:47:c0:f4:a0:35:20:fb:87:68:
         67:d1:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----