Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2a9d81c-c177-4553-8773-18437c58c714.roa
File:                     b2a9d81c-c177-4553-8773-18437c58c714.roa (raw, json)
Hash identifier:          mqKEIt8p43DrOiN1cLs83NmSalufNWTl7THSjMR8L6M=
Subject key identifier:   16:41:E1:F4:F3:D8:CE:28:6F:19:A5:70:AE:76:73:2E:F4:51:75:E8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7969DA34F237730FF1F9888869E019F7B66B9139
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2a9d81c-c177-4553-8773-18437c58c714.roa
Signing time:             Wed 30 Jul 2025 00:50:22 +0000
ROA not before:           Wed 30 Jul 2025 00:50:22 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:a080::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:69:da:34:f2:37:73:0f:f1:f9:88:88:69:e0:19:f7:b6:6b:91:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:50:22 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=103d6dcf80530ec689d03395e04af3b77c1b155891c3635b678262abe3e6ec81, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a3:9e:02:00:25:02:37:1c:32:d4:5f:23:bd:
                    ac:b4:c3:75:75:bf:13:f1:c9:7c:a2:e4:61:77:b5:
                    45:22:12:c4:cf:1f:d6:89:75:9b:17:9c:9b:52:59:
                    cc:fb:02:8f:53:dc:d8:ba:2c:81:f6:47:1d:53:91:
                    0d:6a:e5:b8:d6:13:cb:53:82:cf:76:83:d8:d6:16:
                    aa:89:31:b8:14:83:4b:67:63:e4:09:ac:07:d0:8b:
                    bc:f4:fd:6e:d7:30:a8:15:1a:ab:14:9b:ee:fa:2e:
                    c9:7c:1f:89:8a:90:ff:8d:52:f7:54:82:84:bb:cf:
                    b1:27:25:b9:55:ed:3a:87:ed:39:b0:b5:fa:3c:c0:
                    d9:89:47:0a:e3:1f:47:32:34:7b:55:19:08:60:3c:
                    5b:dc:9d:a8:4b:d4:2d:58:f3:93:6d:71:ec:71:1c:
                    6f:76:94:73:2b:cc:41:4b:80:40:96:be:f0:9f:45:
                    68:90:ce:74:fa:d5:24:15:50:82:83:61:d0:b0:08:
                    85:6e:bc:3d:51:9b:26:38:c1:5e:4d:92:f1:fc:41:
                    e0:d2:e4:6a:7f:a2:1d:dc:47:4d:1c:b0:02:93:86:
                    46:ca:c0:08:0d:eb:43:be:17:20:13:e1:bc:bf:cf:
                    e7:60:fe:d2:40:04:46:69:ba:5e:fe:1e:0e:32:e7:
                    ef:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:41:E1:F4:F3:D8:CE:28:6F:19:A5:70:AE:76:73:2E:F4:51:75:E8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2a9d81c-c177-4553-8773-18437c58c714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:a080::/46

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:8e:a2:67:db:68:36:3c:bc:62:a1:79:e7:db:ef:6e:e4:
         51:6d:08:28:b8:35:02:0a:23:ba:69:a8:a0:56:ea:2a:74:f4:
         14:f4:d6:81:c6:18:64:f2:93:84:24:24:80:8d:90:e9:69:dc:
         48:a3:2d:e5:e8:82:4f:c4:5c:a9:a1:68:65:ce:38:9e:80:93:
         c8:38:c8:37:fd:01:d7:ef:01:d1:09:a7:aa:0d:7e:00:b8:2c:
         c4:cc:e8:b7:1d:cb:0e:e5:d1:02:28:79:7d:b3:75:66:86:d9:
         67:ab:95:17:a6:d5:1d:4a:fc:68:86:c8:df:75:19:be:f6:8b:
         f3:c5:f6:3c:5c:76:49:92:49:b8:c6:39:12:13:df:41:d3:3f:
         93:61:d9:65:c5:74:52:cf:99:76:16:df:36:7b:f5:55:f5:56:
         f0:04:82:8a:fe:a2:60:8f:a2:b1:26:3a:81:d0:ba:33:75:80:
         31:28:3d:73:ac:22:2e:1a:6b:3d:62:fe:aa:e1:8b:02:c9:d9:
         85:b3:39:a1:55:53:24:30:b8:48:33:9d:9c:61:b4:96:36:14:
         5c:3b:d2:a3:15:1e:6d:53:10:39:18:24:25:a1:1a:ff:67:c7:
         c6:7d:fb:a0:b8:95:66:bf:48:16:c7:09:64:17:b0:45:dd:e3:
         8f:07:09:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----