Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd4259e-98a7-47c1-bd49-308f40e49350.roa
File:                     8fd4259e-98a7-47c1-bd49-308f40e49350.roa (raw, json)
Hash identifier:          6WW/XvOwDd0pdtDfo+v1c+qWNAbbW/iRp4PQhnmnRYM=
Subject key identifier:   EE:19:8D:6A:51:09:6D:D0:31:E0:4D:A9:51:EC:4F:33:7A:A0:AB:36
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7930143070F61DBF2FD557116211FDE651B3BC4A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd4259e-98a7-47c1-bd49-308f40e49350.roa
Signing time:             Wed 30 Jul 2025 00:30:59 +0000
ROA not before:           Wed 30 Jul 2025 00:30:59 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:c040::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:30:14:30:70:f6:1d:bf:2f:d5:57:11:62:11:fd:e6:51:b3:bc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:30:59 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=e9afd6ac5e41c3db8cd311792df070c0a5808f126012ae67293dc1eb0181a80f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:8c:ab:b8:bd:8c:87:27:c2:91:00:22:b7:
                    af:d4:7f:43:39:83:3f:3f:1f:c4:e5:9f:26:75:c7:
                    7a:b8:f7:a2:c9:1d:b5:7e:39:22:dd:d4:37:65:d3:
                    78:fc:17:18:cc:4b:11:d0:3f:80:cb:92:d7:c3:a9:
                    08:d7:98:ae:42:38:c5:48:b5:3d:b4:3b:3e:fb:46:
                    02:c9:59:6e:39:84:74:0b:9a:2e:ca:0b:55:5f:13:
                    d2:4a:38:68:d3:08:d3:7c:5a:18:6b:89:4c:c2:99:
                    8a:19:30:18:b6:31:10:e7:43:65:4a:a1:0d:90:bc:
                    1d:8c:9d:f0:ae:e6:d4:79:cf:82:33:63:b9:e9:f9:
                    1c:f7:d9:8d:76:0f:d9:a9:07:3a:62:6f:0f:c8:48:
                    45:e9:e6:b3:58:08:d2:e2:dc:64:3b:2d:e2:2d:11:
                    7b:16:99:8b:6a:ff:53:70:c2:50:c1:9b:da:1b:79:
                    d7:cb:a4:77:37:36:05:60:46:61:d0:d5:b3:0b:8b:
                    7d:2f:ad:d2:1b:cd:64:e7:c1:09:00:80:1e:be:ee:
                    8f:38:2f:62:b2:98:f2:a3:b8:31:8c:f8:7b:38:ef:
                    72:19:ee:83:f2:7a:bc:1e:06:f4:52:95:83:f3:cd:
                    1a:3b:2a:1b:77:e6:26:5a:51:7e:10:5e:86:ee:18:
                    9e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:19:8D:6A:51:09:6D:D0:31:E0:4D:A9:51:EC:4F:33:7A:A0:AB:36
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd4259e-98a7-47c1-bd49-308f40e49350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:c040::/46

    Signature Algorithm: sha256WithRSAEncryption
         04:27:12:3b:74:e4:5d:ce:e8:cf:a9:dc:af:e2:ac:a7:bc:23:
         e2:bb:41:ec:2c:51:b9:0d:4c:f4:0e:41:09:b9:ca:17:b3:74:
         e8:b3:41:9e:3b:36:4a:20:c2:40:d7:51:7a:f4:5b:c0:4d:e7:
         aa:9e:0e:9d:d7:7b:cb:66:7c:18:c1:c6:b3:8c:5a:19:64:43:
         82:78:7f:aa:33:6c:b4:78:97:75:f7:54:d3:e1:d0:6f:76:d9:
         9f:92:d1:11:7a:e2:12:3a:00:96:c3:c6:f7:38:ef:9a:dd:e8:
         41:4a:f5:2d:db:96:9a:91:5a:ed:a4:ab:98:2f:85:28:ef:17:
         de:d7:f4:b8:87:8d:c0:3b:28:6a:27:c9:09:7d:e9:25:30:ff:
         d7:0b:d8:94:f3:ec:39:b9:e3:38:8e:9d:8d:c8:e6:cf:44:e0:
         e1:c0:21:51:29:b5:53:9f:68:d7:a5:fd:28:3f:2d:df:bf:d1:
         ca:4e:31:05:cc:6c:38:be:af:e8:2b:cd:81:7c:50:5f:15:02:
         e9:a7:48:8c:ac:39:29:c9:42:c3:ee:e1:29:29:54:1c:89:e8:
         cf:73:6c:be:3a:a0:62:6f:38:83:dd:ab:85:1d:57:ac:e6:6c:
         95:fd:02:b9:9d:22:30:8e:5d:3c:b9:8c:f2:c5:31:a0:fd:fe:
         07:df:75:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----