Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a82a4699-15b2-4cc5-8957-de9928293f28.roa
File:                     a82a4699-15b2-4cc5-8957-de9928293f28.roa (raw, json)
Hash identifier:          laHwwcizJiIg55RH9/Ee81YubVSeFaxgRxk+t3jFN2Y=
Subject key identifier:   8D:DE:0F:E9:5A:D5:C4:77:46:A5:EA:F2:A5:C0:2C:E0:FE:5F:05:52
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       06CA76F32A4292BBDD9AB50D2CA542F7BA5A491D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a82a4699-15b2-4cc5-8957-de9928293f28.roa
Signing time:             Wed 30 Jul 2025 00:50:08 +0000
ROA not before:           Wed 30 Jul 2025 00:50:08 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:800::/40 maxlen: 40
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ca:76:f3:2a:42:92:bb:dd:9a:b5:0d:2c:a5:42:f7:ba:5a:49:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:50:08 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=eac426025178a130566fba00fa0e5168d67189d397651c5b6cd76855723f569b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:62:ec:1a:3c:b1:56:dd:c8:7d:c0:f4:01:c2:
                    35:c5:8c:a5:b2:4e:9d:31:28:94:65:dd:01:bb:01:
                    44:82:92:93:86:32:0d:c9:85:25:67:e9:61:57:a3:
                    b9:60:cf:ef:9a:d2:04:d2:8d:d0:49:1f:7e:b8:8c:
                    82:6e:74:b5:62:db:84:d5:37:c4:d8:75:25:9d:3c:
                    b9:44:8f:4d:3c:20:de:3e:17:6b:b7:81:f9:3b:02:
                    c6:7a:1e:f7:23:e5:aa:18:5a:e3:ce:e2:88:33:75:
                    35:d1:bb:7f:23:91:74:2a:2a:50:9b:84:1c:4a:3f:
                    d2:3e:6b:bc:f9:46:31:5f:1d:df:89:c1:0e:a1:d4:
                    3a:23:db:29:0f:ba:d6:c9:a0:f5:d9:3b:be:ec:5a:
                    e8:dd:53:d6:13:95:bd:ef:f1:53:10:77:50:5f:bb:
                    b6:f7:88:aa:6e:a6:cc:eb:81:c6:ad:27:d7:da:a9:
                    68:77:e3:b9:fd:cd:23:3e:da:c7:7f:72:38:c8:ce:
                    08:07:55:58:37:87:1b:c4:d8:4a:0c:54:7a:fe:8f:
                    0e:44:7d:06:70:d9:86:6c:0b:55:88:aa:df:f6:15:
                    7d:75:74:b1:37:8a:84:54:60:cd:fa:45:da:bd:28:
                    ba:82:ab:fb:ca:02:09:8e:74:28:c6:bd:79:c3:ce:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DE:0F:E9:5A:D5:C4:77:46:A5:EA:F2:A5:C0:2C:E0:FE:5F:05:52
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a82a4699-15b2-4cc5-8957-de9928293f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:0d:f2:11:88:26:bd:da:df:7e:de:af:6e:05:2e:94:bc:74:
         c3:a0:df:a6:02:cd:d2:12:7f:ba:20:f7:36:b7:fd:11:11:3d:
         3c:6e:65:e4:c8:37:ff:22:ca:4b:c5:e2:2f:3d:ab:46:2a:db:
         85:62:a8:ff:26:d5:e2:9e:35:6f:04:d9:74:f6:49:a6:1e:64:
         df:b9:7b:65:73:5a:7b:c4:71:a2:0e:c0:5e:6e:d2:f7:09:ab:
         c0:e7:98:bc:84:9a:83:0e:99:7d:25:18:0e:e5:67:d2:0c:82:
         07:00:6d:ab:16:bc:b4:20:f0:f0:8d:46:ef:78:51:b4:1b:a5:
         e1:3b:72:30:0c:03:4d:b7:8b:65:33:b1:8e:2d:3e:4b:f8:db:
         06:d2:0b:53:11:60:68:4f:93:66:0c:6b:92:b1:a6:06:e4:76:
         2b:b2:f2:be:d9:31:35:1f:ac:48:e1:f0:01:6d:33:84:2e:78:
         f9:5f:f3:a5:e8:99:47:b8:ea:6f:dc:b1:76:1c:44:53:12:45:
         85:93:04:3e:15:36:c6:5d:0b:03:d3:50:1d:96:6a:4f:83:9f:
         67:3e:c7:f0:0c:9f:90:2e:b2:c9:f7:0e:48:42:10:46:b9:f6:
         68:d3:64:da:24:a5:5f:22:ed:06:03:ef:ab:f4:25:f6:50:54:
         95:f1:a9:da
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUBsp28ypCkrvdmrUNLKVC97paSR0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwNTAwOFoX
DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAZWFjNDI2MDI1MTc4YTEzMDU2NmZi
YTAwZmEwZTUxNjhkNjcxODlkMzk3NjUxYzViNmNkNzY4NTU3MjNmNTY5YjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mLsGjyxVt3IfcD0AcI1xYylsk6d
MSiUZd0BuwFEgpKThjINyYUlZ+lhV6O5YM/vmtIE0o3QSR9+uIyCbnS1YtuE1TfE
2HUlnTy5RI9NPCDePhdrt4H5OwLGeh73I+WqGFrjzuKIM3U10bt/I5F0KipQm4Qc
Sj/SPmu8+UYxXx3ficEOodQ6I9spD7rWyaD12Tu+7Fro3VPWE5W97/FTEHdQX7u2
94iqbqbM64HGrSfX2qlod+O5/c0jPtrHf3I4yM4IB1VYN4cbxNhKDFR6/o8ORH0G
cNmGbAtViKrf9hV9dXSxN4qEVGDN+kXavSi6gqv7ygIJjnQoxr15w855lQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFI3eD+la1cR3RqXq8qXALOD+XwVSMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2E4MmE0Njk5LTE1YjItNGNjNS04OTU3LWRlOTkyODI5M2YyOC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba9wgwDQYJKoZIhvcNAQELBQADggEBABsN8hGIJr3a337er24F
LpS8dMOg36YCzdISf7og9za3/RERPTxuZeTIN/8iykvF4i89q0Yq24ViqP8m1eKe
NW8E2XT2SaYeZN+5e2VzWnvEcaIOwF5u0vcJq8DnmLyEmoMOmX0lGA7lZ9IMggcA
basWvLQg8PCNRu94UbQbpeE7cjAMA023i2UzsY4tPkv42wbSC1MRYGhPk2YMa5Kx
pgbkdiuy8r7ZMTUfrEjh8AFtM4QuePlf86XomUe46m/csXYcRFMSRYWTBD4VNsZd
CwPTUB2Wak+Dn2c+x/AMn5Aussn3DkhCEEa59mjTZNokpV8i7QYD76v0JfZQVJXx
qdo=
-----END CERTIFICATE-----