Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20e4da9-5b91-4842-953a-dc2ccf035e85.roa
File:                     b20e4da9-5b91-4842-953a-dc2ccf035e85.roa (raw, json)
Hash identifier:          4NkMPOeRoL4Um3lmCSKgWjhW2ofFnIIBIFGwegihQQU=
Subject key identifier:   C6:67:9C:B6:38:24:AB:BC:E1:62:9F:7E:E9:3E:71:71:07:DF:98:9F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       661C11622CDBE2DFD7F3F783A332E16CEBF208BB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20e4da9-5b91-4842-953a-dc2ccf035e85.roa
Signing time:             Wed 30 Jul 2025 00:31:32 +0000
ROA not before:           Wed 30 Jul 2025 00:31:32 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:4000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 17:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1c:11:62:2c:db:e2:df:d7:f3:f7:83:a3:32:e1:6c:eb:f2:08:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:31:32 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=642c610dab3312c19fa854fa29873998fe5330772d1a1f0a31bf79dbc53fb1ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:33:72:1d:dd:b3:94:30:0f:06:fd:c9:9a:
                    d1:1a:38:3d:0b:18:3f:a9:92:d4:ac:72:94:da:1e:
                    1b:03:a6:d5:f9:0b:c3:1b:57:8e:09:d7:b5:ae:9f:
                    26:9d:d6:1c:64:03:ee:c7:bf:fe:d9:fc:7a:7d:0f:
                    3a:da:0a:c6:de:0f:43:98:3e:17:1c:8b:a9:db:98:
                    27:bf:83:75:c2:a0:65:9a:7f:9a:97:8a:f7:f1:66:
                    71:c5:81:66:73:22:3f:88:0f:60:fb:5b:0d:6e:7c:
                    ae:b0:58:98:b8:b1:be:e5:52:e4:a7:eb:ff:4b:c7:
                    82:b6:bb:35:f4:d7:82:82:e6:06:ad:9d:be:18:e6:
                    64:3f:bc:e4:a5:1f:bb:d3:19:32:d5:bb:74:e7:08:
                    90:59:62:e5:22:09:cf:6b:95:94:87:96:fd:5d:b3:
                    26:9e:66:84:e2:79:e1:7d:8c:6f:a3:e6:2e:73:db:
                    de:fc:bc:a0:39:e1:03:63:cf:6d:1b:c8:03:84:1a:
                    4e:53:c6:e3:c5:65:cb:a3:9a:77:bf:a9:8a:3c:d0:
                    7a:d0:67:76:d8:7c:e8:f5:a1:70:4a:99:e8:97:a7:
                    dd:76:b1:63:af:d3:18:62:b6:d4:97:9e:f1:ef:a3:
                    e2:49:7f:97:5d:45:76:25:ae:69:85:a3:4d:49:00:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:67:9C:B6:38:24:AB:BC:E1:62:9F:7E:E9:3E:71:71:07:DF:98:9F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20e4da9-5b91-4842-953a-dc2ccf035e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:04:bb:a1:ac:c9:ce:bf:7d:86:b8:6f:ea:36:af:9a:82:4a:
         20:d8:8c:d4:9b:2b:41:36:e9:b9:dd:31:1d:cf:0e:f1:8f:be:
         c5:aa:39:75:2b:44:af:d5:30:77:3c:f6:11:54:97:36:d8:92:
         dc:09:ca:0c:f4:7a:40:43:18:00:e3:27:ad:06:38:4f:a7:aa:
         ab:19:86:2e:6b:26:78:cf:54:d5:25:78:4d:a8:dc:e4:70:ea:
         11:41:86:df:c7:67:cf:fd:db:e5:41:16:0b:43:d2:f5:80:8a:
         b2:48:07:66:b4:c0:5d:6c:81:a2:42:43:b6:95:1f:ac:4f:be:
         af:10:6b:dd:64:34:0e:b1:06:56:82:59:05:8d:a1:e2:f7:e3:
         75:cf:3a:ac:df:1e:8c:01:d9:74:d8:83:e3:63:68:04:d5:0f:
         46:d6:3b:6e:01:87:05:7d:09:1e:ee:f4:c5:11:41:12:31:79:
         0d:a3:7f:d5:1a:6c:2b:ee:d0:ba:46:7a:3d:2b:16:3d:8f:18:
         64:66:60:c4:c9:41:7c:b8:26:60:26:cd:85:4d:1a:6f:9d:a4:
         8a:ca:f7:fd:b0:1d:e4:69:f2:a9:53:33:0a:f0:a7:c3:f4:8b:
         28:94:3c:b5:e2:48:b2:58:ed:f8:26:66:1b:78:90:f2:54:c8:
         f5:0c:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----