Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b17b22ee-80a1-41f9-b887-0dcc173f823b.roa
File:                     b17b22ee-80a1-41f9-b887-0dcc173f823b.roa (raw, json)
Hash identifier:          /MikSeFOv23u16omoX2MVBDW97nodEA5x8yxakuqrYA=
Subject key identifier:   F2:DC:2E:36:20:FB:AD:62:DE:B9:67:D5:0B:42:EB:71:EF:73:3D:22
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       386D153ABD2D7A07E84A82DC6FE8B6F33B4C7AF2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b17b22ee-80a1-41f9-b887-0dcc173f823b.roa
Signing time:             Wed 30 Jul 2025 00:31:23 +0000
ROA not before:           Wed 30 Jul 2025 00:31:23 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:e040::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6d:15:3a:bd:2d:7a:07:e8:4a:82:dc:6f:e8:b6:f3:3b:4c:7a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:31:23 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=601843bf0f186ad459f04cfc5ec5b7e8aa3249002a9cb454db9896e9166fae4a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:4f:a7:9b:63:1a:be:f2:9e:cc:e3:19:b1:
                    0b:69:ac:58:14:92:45:e9:bc:86:4c:35:af:33:a9:
                    c0:a0:f7:06:b6:8a:71:3a:da:2b:ba:10:f1:6c:e9:
                    95:6d:04:3d:eb:f5:49:f7:a7:3e:69:1d:84:db:47:
                    71:5c:ee:1d:d7:d0:24:6e:c9:08:f2:1a:b1:53:c0:
                    7e:ae:9e:a2:26:08:cb:26:3f:c3:dc:30:a9:67:a7:
                    6d:5e:da:98:b1:9e:ec:2f:c4:4f:23:d0:05:65:80:
                    8e:14:2d:9f:59:40:f1:c7:03:ae:ad:52:0c:16:88:
                    d8:75:f1:fc:38:40:dc:87:3d:eb:6b:2a:52:b4:e4:
                    84:ac:6a:a4:a3:e3:29:08:ff:fc:6e:d9:f6:4a:c2:
                    e5:54:c6:e8:8f:02:fe:0f:1e:2a:58:46:aa:df:21:
                    85:82:b8:30:b5:e4:b2:35:73:df:4d:42:af:bb:47:
                    65:6c:36:33:7d:d6:19:98:8d:00:61:9d:a2:3c:c2:
                    36:27:00:a3:5f:0b:ba:7c:00:b4:cb:b9:09:64:b3:
                    40:77:d2:02:fb:d4:e2:01:46:2f:b2:7f:3b:f8:c6:
                    ce:c1:ed:44:29:55:01:86:92:ba:45:53:a1:34:4e:
                    06:13:e6:bf:be:37:2e:de:b8:90:63:ff:d4:6c:0a:
                    d2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DC:2E:36:20:FB:AD:62:DE:B9:67:D5:0B:42:EB:71:EF:73:3D:22
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b17b22ee-80a1-41f9-b887-0dcc173f823b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:e040::/46

    Signature Algorithm: sha256WithRSAEncryption
         58:f3:3f:cc:50:3a:12:34:ed:3b:27:38:ee:6a:56:e2:74:7e:
         cf:99:74:09:00:a5:bd:07:ba:29:35:78:b0:09:dc:1f:5d:f1:
         bb:d6:30:b8:34:1f:6f:48:c3:54:39:9b:55:05:8b:42:1e:e1:
         e6:15:e6:13:4f:22:f6:c9:51:0f:f6:2f:64:bf:57:20:b6:16:
         d3:eb:e0:d2:1b:1e:78:12:70:81:20:9f:6b:4b:29:75:25:a3:
         1c:a2:b7:d7:1c:eb:09:ae:de:c0:01:68:63:29:f3:97:8a:6d:
         00:40:38:76:66:ae:05:65:e5:d4:8a:d5:31:46:04:00:79:07:
         17:85:a7:04:64:5c:74:19:6a:00:cd:a5:48:5d:80:ab:cd:51:
         81:96:5f:e6:98:b7:0f:41:36:23:58:20:c7:07:35:65:c9:73:
         e4:d6:2a:78:5d:ab:81:a2:6b:a4:3a:af:6e:9e:39:95:2d:47:
         e5:05:56:4e:b6:fa:df:c9:6a:ab:19:74:79:7d:65:08:a0:40:
         9e:a7:da:ca:af:ef:7f:33:3a:53:a9:04:9b:1a:c0:5b:d6:1f:
         d1:e3:46:79:ad:fa:89:fb:50:54:85:c1:b5:ce:fa:81:4d:c6:
         51:77:a7:c6:dc:0b:5a:bd:53:f1:d9:24:69:76:46:87:ae:42:
         2a:d0:9f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:57:27 2025 by rpki-client