Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af8b3ecb-e097-475f-ad47-1a2c6df1db32.roa
File:                     af8b3ecb-e097-475f-ad47-1a2c6df1db32.roa (raw, json)
Hash identifier:          rS/+fchUgrLaFAuxLNB9WcXibnib8TOmDzqxJtItRGQ=
Subject key identifier:   DB:57:C3:84:DB:A7:7B:BE:66:CE:7A:D9:41:CF:A5:F5:61:E2:A6:40
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       53C4F1644D6CA3D4F1C6EB76802305521F99930E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af8b3ecb-e097-475f-ad47-1a2c6df1db32.roa
Signing time:             Tue 13 May 2025 00:21:08 +0000
ROA not before:           Tue 13 May 2025 00:21:08 +0000
ROA not after:            Tue 17 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:f040::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 19:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c4:f1:64:4d:6c:a3:d4:f1:c6:eb:76:80:23:05:52:1f:99:93:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 13 00:21:08 2025 GMT
            Not After : Jun 17 23:59:59 2025 GMT
        Subject: serialNumber=b3285708534939dea564b535e158e27b93b5096811bfaac18bdd10a7afc49560, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:2e:33:af:b4:67:ef:33:ca:5d:fb:b7:b3:
                    67:f4:57:e5:e5:aa:7e:11:d5:bb:8d:40:ac:23:29:
                    bc:c4:52:c5:6a:30:ec:e6:a6:c7:c1:6f:27:f1:ec:
                    79:08:cb:3b:fd:65:bc:dc:7a:74:ee:35:c2:fc:91:
                    69:2c:9e:3b:0f:ed:b2:a2:78:87:f4:52:9b:bb:0f:
                    b6:e8:a4:e5:51:74:9e:c4:4e:96:a2:4c:4a:6e:78:
                    05:2a:1a:69:ec:35:2f:5d:e3:ff:d3:15:4e:be:28:
                    6a:42:20:f6:ec:1f:56:42:62:e9:83:23:19:4c:9a:
                    54:95:26:19:1b:3f:a2:de:7d:b4:21:8c:8f:16:84:
                    0d:0f:ec:6b:b0:41:4d:a0:23:dc:15:02:c4:8c:06:
                    bf:ba:70:04:00:44:4f:12:3f:50:fd:25:05:1a:6a:
                    49:d5:35:cd:e9:fc:45:60:d8:9a:5e:76:be:57:ad:
                    2c:0f:24:f0:68:d2:06:19:03:90:94:05:32:60:c2:
                    4d:46:2a:62:b5:ca:92:a6:b1:04:45:1a:f4:51:e6:
                    54:72:53:cd:e8:1d:e5:f3:d4:4c:97:81:48:c3:e3:
                    37:df:1d:77:03:5f:66:b7:2b:63:0f:5f:a7:55:47:
                    30:aa:57:fa:37:2b:cd:0b:13:bb:ba:38:37:63:6d:
                    83:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:57:C3:84:DB:A7:7B:BE:66:CE:7A:D9:41:CF:A5:F5:61:E2:A6:40
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af8b3ecb-e097-475f-ad47-1a2c6df1db32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:f040::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:2f:f1:18:b1:7c:7e:61:d5:52:68:04:69:f5:ef:ac:75:51:
         fd:d7:45:6a:cf:cd:a4:b5:01:e5:4c:21:7e:70:7c:d6:08:ef:
         0b:20:e0:ce:6f:fa:f1:96:c4:11:10:87:69:c0:e4:ef:d5:46:
         37:03:82:d8:b9:dd:22:d9:bc:4d:e9:91:0d:bc:81:ac:c6:99:
         98:16:0c:85:0d:8d:ca:08:06:ec:8f:ad:a5:ea:9e:d7:e7:1b:
         6f:a7:3e:5f:9e:60:50:76:7f:a7:4b:ce:a7:16:92:90:57:50:
         18:3b:36:71:31:93:fd:8f:86:a2:aa:ee:97:67:78:cf:e6:40:
         3d:71:3d:27:1b:bd:76:d9:c5:c1:b2:f4:9b:3e:33:b1:b0:2d:
         09:12:55:2d:27:2d:c7:a2:b0:68:88:6a:06:49:6a:69:53:e2:
         0c:24:6b:b6:c3:6b:e7:ba:39:d4:8c:a7:56:4c:fa:aa:94:c1:
         e5:79:21:0e:58:dc:bf:98:46:69:81:e7:97:2f:91:f1:86:0a:
         c1:71:8d:f5:72:b8:e6:fd:45:84:d2:0a:27:83:79:2b:97:25:
         bf:6a:39:18:6e:71:b3:43:d9:59:80:e5:c3:a6:a4:47:13:0c:
         ea:13:d8:4d:04:1c:5d:b6:61:d2:0d:92:bb:f1:75:4e:72:34:
         9f:de:83:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----