Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acb970c2-49a7-4496-80b2-ad372f8148f6.roa
File:                     acb970c2-49a7-4496-80b2-ad372f8148f6.roa (raw, json)
Hash identifier:          Zpk8jniagEbvrdXQyTUHCifEIuB3/z9S5JBsRjD2fEQ=
Subject key identifier:   C3:2E:A2:C4:EC:70:87:EB:F3:BB:B1:E5:94:42:A8:54:4C:09:85:C8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       15EC7F8E0CE262F510AB742C86EF22BA5CBB5EA7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acb970c2-49a7-4496-80b2-ad372f8148f6.roa
Signing time:             Wed 30 Jul 2025 00:10:18 +0000
ROA not before:           Wed 30 Jul 2025 00:10:18 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:1040::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 17:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ec:7f:8e:0c:e2:62:f5:10:ab:74:2c:86:ef:22:ba:5c:bb:5e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:10:18 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=d2577ab141dfcd4443e570878f64e1ba05e8a889ad27dea0d8c3ae85dddccdbb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:2a:99:f7:a6:d6:38:6b:6b:14:d0:d8:5e:
                    2b:d0:6f:0e:c0:67:e9:11:43:cb:7c:ec:17:59:96:
                    14:93:43:ef:e7:41:3c:51:f2:79:4d:03:ed:4f:e9:
                    e4:3a:b1:b0:90:aa:e4:89:b5:15:2c:d8:49:f9:fd:
                    c9:6b:79:62:ef:e9:32:4d:d4:78:3c:6b:82:58:99:
                    82:dc:75:8a:20:99:63:40:4c:87:c6:42:4c:1d:fe:
                    23:b9:25:62:bf:45:8c:2f:04:c9:80:a1:18:7f:f5:
                    57:a0:e9:cc:73:a2:db:d8:a8:e5:bc:f8:0d:a2:15:
                    04:a3:f6:c3:cc:7f:25:9e:c6:41:f8:a9:f8:d7:a0:
                    35:ff:38:e4:2c:8d:74:6f:56:eb:e1:76:cc:72:3f:
                    40:e5:b9:69:20:28:8c:fc:4c:83:67:d0:4e:2d:77:
                    88:26:b2:06:f2:ab:d6:4b:e6:bf:e4:c6:f8:22:35:
                    ae:ff:11:da:5a:18:32:a9:2c:86:49:f6:7c:0c:4e:
                    c1:32:a5:6c:6d:68:f8:c7:6a:98:a7:03:be:c2:2b:
                    9d:f5:5c:58:6a:76:ad:79:5d:18:df:77:01:ea:17:
                    d0:ab:ec:d1:4a:b9:8e:92:a1:92:27:47:50:f5:20:
                    89:9f:76:e2:79:b8:5c:d3:69:47:16:49:d6:68:a0:
                    92:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2E:A2:C4:EC:70:87:EB:F3:BB:B1:E5:94:42:A8:54:4C:09:85:C8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acb970c2-49a7-4496-80b2-ad372f8148f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:1040::/46

    Signature Algorithm: sha256WithRSAEncryption
         16:4f:5d:e7:ca:cf:14:ae:fc:7f:cf:b9:85:4f:a0:af:62:72:
         95:70:f3:1a:be:f4:30:72:b1:b7:ed:23:1d:05:ce:8e:2e:df:
         ad:dd:b8:b3:9e:ce:2f:66:5b:04:a4:cc:20:72:96:40:59:75:
         02:10:ae:9c:96:44:0c:c6:96:ba:1f:89:22:53:a4:22:36:9a:
         39:e4:3e:46:bb:a9:05:7f:8d:39:53:82:dd:1b:62:38:64:91:
         ce:6e:2c:ef:77:7c:33:44:d0:a8:06:d4:0f:be:6b:7b:b1:1f:
         62:98:31:f4:3e:21:41:87:1e:10:ac:7e:b5:22:8e:ba:a8:6c:
         2d:a8:e1:a3:56:a9:2e:4c:12:31:3a:29:fe:f6:7c:6f:fc:1d:
         78:46:88:51:23:dc:bc:e0:20:51:57:b9:ce:23:d2:d4:b2:4c:
         6f:5d:29:55:fc:72:30:66:5b:59:b9:21:37:23:b3:0b:d2:da:
         a0:bb:9e:ae:d3:97:29:14:9b:99:f2:90:8b:6b:4e:60:86:5c:
         de:53:5a:d3:a5:5b:c8:d7:9e:46:95:c0:65:ce:b9:49:63:ac:
         7a:78:49:b2:e2:1e:aa:3d:f5:a1:82:e7:f2:b6:72:94:4a:39:
         c7:21:21:7c:94:e0:d8:06:5c:1c:87:bd:6a:00:63:7a:4d:ae:
         63:10:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----