Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7098b1b-6bd0-466e-a15c-33904bf1fc03.roa
File:                     b7098b1b-6bd0-466e-a15c-33904bf1fc03.roa (raw, json)
Hash identifier:          gZdQ2Sb1LsDjjqzkJwMYiSnKMakBSHk3Kut+ehHUxeM=
Subject key identifier:   10:B5:34:20:67:52:25:D0:DA:FA:5F:76:BA:33:FC:41:EA:39:A9:8D
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       72E773E38D916B198D13A40455F3CAD293519B0C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7098b1b-6bd0-466e-a15c-33904bf1fc03.roa
Signing time:             Wed 30 Jul 2025 00:31:35 +0000
ROA not before:           Wed 30 Jul 2025 00:31:35 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:40c0::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e7:73:e3:8d:91:6b:19:8d:13:a4:04:55:f3:ca:d2:93:51:9b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:31:35 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=5a33b23ba187ecd58dff938b44e5437607c7e1913e2cc5f3a854a26b28c4dadc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:9c:9d:f7:cc:85:81:a9:4f:fe:92:8c:ec:
                    30:d5:c0:76:23:4d:32:c4:9d:23:15:ce:03:36:ac:
                    a4:8f:98:d2:e2:51:19:e8:11:31:0c:b0:ec:dc:1a:
                    46:5b:92:f6:91:11:9a:d7:f3:55:53:2a:b2:b7:55:
                    89:a9:1f:9d:f2:b7:42:2f:2c:24:1e:6f:6b:4a:9e:
                    55:e6:34:45:a5:06:d4:8b:6f:4c:c2:5f:19:28:04:
                    ee:ce:a6:6a:af:2b:49:b6:68:3e:08:1f:c0:39:83:
                    4a:01:9b:a2:e5:c4:09:20:c5:2a:dc:19:a9:23:5d:
                    a6:91:a1:9d:c9:ac:5c:9e:95:26:3f:05:4e:2c:05:
                    b7:da:42:58:85:18:ac:ce:08:12:99:ca:32:25:a3:
                    d4:26:1f:b6:2b:46:11:b3:7e:25:7b:a7:ef:06:ea:
                    7b:9c:5c:78:eb:d0:ad:59:04:60:57:64:07:3e:d5:
                    b5:5b:8a:20:d5:57:6b:4d:25:67:fe:57:92:10:6d:
                    4a:ff:84:f1:81:17:4b:9b:89:20:a0:b5:bc:ff:56:
                    2c:3a:4c:19:aa:13:c8:c3:f5:9b:4e:19:84:b9:44:
                    7d:b7:ef:66:92:dd:e1:d7:73:10:e6:4b:65:ad:44:
                    d0:46:5e:10:51:47:17:1e:6a:3c:09:b9:30:7e:cd:
                    9e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B5:34:20:67:52:25:D0:DA:FA:5F:76:BA:33:FC:41:EA:39:A9:8D
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7098b1b-6bd0-466e-a15c-33904bf1fc03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:40c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         0e:95:b2:56:7c:ae:c9:f6:41:63:40:c6:c6:26:b9:51:cd:f0:
         28:47:c3:8e:6a:fb:33:6f:56:f2:b2:35:28:db:e8:7d:66:d2:
         44:5d:1c:d6:84:ff:c0:30:4e:f4:b0:ee:27:85:96:4b:c4:7b:
         32:7a:32:83:fd:a7:21:cf:9b:2c:93:46:4a:2a:d3:05:e1:ff:
         6b:5a:65:e5:ba:69:90:73:36:5c:60:e0:5a:80:8c:18:e2:81:
         d6:ca:8d:a0:c9:3a:bc:9f:fa:5e:e9:a5:5c:f8:a4:40:43:59:
         99:b8:f9:be:4f:b0:ec:0e:b1:26:d0:97:b6:6a:a7:46:52:92:
         26:84:7b:db:e5:10:99:ca:c7:40:32:75:04:50:b9:87:06:46:
         67:1b:73:38:34:83:ac:00:69:d2:fb:46:b7:a4:16:0e:57:78:
         c8:54:4d:6e:70:38:39:cb:93:5d:91:e4:21:a7:44:9d:ef:3d:
         6f:9f:9e:2b:a3:85:c8:19:65:1f:9c:eb:1f:b2:4a:01:f7:e9:
         75:8d:86:0a:6c:11:fa:03:1b:4f:50:1a:02:35:d0:20:b9:f0:
         57:fd:09:13:a7:39:16:06:d9:9d:99:8a:ab:f1:11:87:fd:f6:
         56:36:cd:14:50:94:aa:f8:c7:df:57:2e:36:a9:eb:0d:90:d6:
         8a:89:20:b9
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUcudz442RaxmNE6QEVfPK0pNRmwwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwMzEzNVoX
DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNANWEzM2IyM2JhMTg3ZWNkNThkZmY5
MzhiNDRlNTQzNzYwN2M3ZTE5MTNlMmNjNWYzYTg1NGEyNmIyOGM0ZGFkYzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd+cnffMhYGpT/6SjOww1cB2I00y
xJ0jFc4DNqykj5jS4lEZ6BExDLDs3BpGW5L2kRGa1/NVUyqyt1WJqR+d8rdCLywk
Hm9rSp5V5jRFpQbUi29Mwl8ZKATuzqZqrytJtmg+CB/AOYNKAZui5cQJIMUq3Bmp
I12mkaGdyaxcnpUmPwVOLAW32kJYhRiszggSmcoyJaPUJh+2K0YRs34le6fvBup7
nFx469CtWQRgV2QHPtW1W4og1VdrTSVn/leSEG1K/4TxgRdLm4kgoLW8/1YsOkwZ
qhPIw/WbThmEuUR9t+9mkt3h13MQ5ktlrUTQRl4QUUcXHmo8Cbkwfs2eVwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFBC1NCBnUiXQ2vpfdroz/EHqOamNMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2I3MDk4YjFiLTZiZDAtNDY2ZS1hMTVjLTMzOTA0YmYxZmMwMy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba+0DAMA0GCSqGSIb3DQEBCwUAA4IBAQAOlbJWfK7J9kFjQMbG
JrlRzfAoR8OOavszb1bysjUo2+h9ZtJEXRzWhP/AME70sO4nhZZLxHsyejKD/ach
z5ssk0ZKKtMF4f9rWmXlummQczZcYOBagIwY4oHWyo2gyTq8n/pe6aVc+KRAQ1mZ
uPm+T7DsDrEm0Je2aqdGUpImhHvb5RCZysdAMnUEULmHBkZnG3M4NIOsAGnS+0a3
pBYOV3jIVE1ucDg5y5NdkeQhp0Sd7z1vn54ro4XIGWUfnOsfskoB9+l1jYYKbBH6
AxtPUBoCNdAgufBX/QkTpzkWBtmdmYqr8RGH/fZWNs0UUJSq+MffVy42qesNkNaK
iSC5
-----END CERTIFICATE-----