Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a928810e-4caf-46b4-bb5f-1456d8fb002a.roa
File:                     a928810e-4caf-46b4-bb5f-1456d8fb002a.roa (raw, json)
Hash identifier:          oUZT5b5jG3ZC+XEQT1c5w/xfLCkHk+RjtrlGlFDxeEE=
Subject key identifier:   11:D8:6C:BC:1B:E4:B4:39:87:AE:B4:59:E5:E4:E6:DA:A9:9E:F4:31
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2AB3D47CC10A698AA7F7DCB5746304373411E650
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a928810e-4caf-46b4-bb5f-1456d8fb002a.roa
Signing time:             Wed 14 May 2025 00:51:26 +0000
ROA not before:           Wed 14 May 2025 00:51:26 +0000
ROA not after:            Wed 18 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:6040::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 19:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b3:d4:7c:c1:0a:69:8a:a7:f7:dc:b5:74:63:04:37:34:11:e6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 14 00:51:26 2025 GMT
            Not After : Jun 18 23:59:59 2025 GMT
        Subject: serialNumber=850371bdbe94c2eaa62e973c7212a273eff81814bdcc5ef6803d34b107a971fa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:c0:6d:12:d7:c2:2d:a6:ae:ff:46:82:4a:
                    db:92:1e:38:8b:b6:ec:c4:7f:53:74:b9:4e:4a:1b:
                    1f:e9:0e:9f:b0:f0:20:3b:eb:f4:3f:d4:36:38:f3:
                    d0:86:f0:0b:ff:d7:c5:b2:79:9e:c5:71:0f:32:c8:
                    33:d3:5c:82:78:94:4b:bc:43:75:f1:3a:34:22:d7:
                    af:a3:e7:0e:d1:3c:84:2f:0f:9e:b6:c7:ba:7d:87:
                    36:40:92:77:05:61:31:78:6f:ef:25:c5:a7:7a:aa:
                    e1:a5:c4:67:6a:84:a1:fb:23:d8:72:5f:f2:87:37:
                    89:64:8b:1d:12:2e:ab:ae:a5:a9:90:b9:21:aa:fc:
                    09:bb:1d:d3:8f:c0:66:4f:08:09:4b:91:92:65:6e:
                    24:48:44:e2:ba:3a:10:53:1b:bc:4f:64:e7:e4:9d:
                    06:00:ba:ed:53:2e:28:4e:d3:47:80:dc:0b:e8:a3:
                    db:97:f9:57:47:cd:dd:fa:a8:ed:13:a7:5d:89:02:
                    aa:ed:d9:4f:54:80:f5:08:c0:3d:ae:54:8c:e3:13:
                    c2:36:15:5a:b6:3a:cd:90:56:33:2f:9c:95:00:77:
                    b5:04:e3:27:07:69:4b:03:bf:a8:9b:81:65:ce:d3:
                    0a:92:74:ee:2a:77:d9:dd:20:72:1a:b9:e5:d2:58:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D8:6C:BC:1B:E4:B4:39:87:AE:B4:59:E5:E4:E6:DA:A9:9E:F4:31
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a928810e-4caf-46b4-bb5f-1456d8fb002a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:6040::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:e2:ab:cc:d5:98:35:7e:18:d5:cf:77:d6:24:ab:46:29:d7:
         dc:4d:4d:68:7c:ca:dd:7e:1f:8d:6d:11:fc:d2:bb:9a:bd:d8:
         eb:99:38:12:86:c4:50:09:29:d2:e2:9c:60:b9:e9:07:c0:68:
         ea:9d:16:07:f9:55:8b:a0:23:af:55:67:93:08:a3:fb:2b:f9:
         5a:ce:66:53:e0:53:9c:f4:d9:ff:4b:cf:b6:dc:ed:0c:fa:e0:
         33:91:65:63:14:a4:a9:3b:c7:ca:74:fc:22:2a:75:8f:a7:91:
         9e:f9:e6:d8:12:83:42:9a:53:7c:27:c0:90:a3:00:76:fa:e4:
         a7:48:22:87:f2:e2:95:16:21:e0:f6:c3:dc:a0:28:d2:66:0a:
         12:d5:2b:36:87:dd:32:77:20:82:13:9b:0f:45:e8:94:95:a8:
         33:12:4d:3d:39:f1:ad:ba:bb:ef:8d:9d:7e:63:19:59:28:89:
         02:cf:df:33:c7:9d:91:0a:b5:2f:da:0f:3d:8e:1f:a0:6c:27:
         7e:85:df:ec:5e:b2:aa:08:27:90:a3:78:93:b5:c9:58:e7:d3:
         8d:d2:cb:79:51:8c:03:59:97:c3:74:40:0b:71:1f:94:7a:c1:
         52:a6:90:c5:be:8f:3f:37:06:e8:99:6c:25:69:c0:c5:3a:dc:
         c1:ef:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----