Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2483dca-fe84-4fed-8d9e-611ad95e4054.roa
File:                     c2483dca-fe84-4fed-8d9e-611ad95e4054.roa (raw, json)
Hash identifier:          VErL1HPOqO818Jjz1pItg7hhYzaK4GVkk1uvMhF2QtY=
Subject key identifier:   C6:E2:3C:0D:DD:C3:C1:D0:12:F3:FF:8A:97:6E:9A:3B:2E:ED:6A:82
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       493BD0441752F8B90DBDED95F7F7B19EBBF46F03
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2483dca-fe84-4fed-8d9e-611ad95e4054.roa
Signing time:             Wed 30 Jul 2025 00:51:13 +0000
ROA not before:           Wed 30 Jul 2025 00:51:13 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:2000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3b:d0:44:17:52:f8:b9:0d:bd:ed:95:f7:f7:b1:9e:bb:f4:6f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:51:13 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=b20458007615a48cbc71dcf600b332c62b9b181a7f9f836bfa0fc81faeb8a34d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:c7:67:00:90:a2:52:94:d1:83:6a:f7:9c:
                    19:b6:38:40:60:76:0f:c6:c2:34:89:dc:be:0e:e3:
                    fd:a8:94:95:db:be:c7:ae:88:ca:d4:a2:3a:45:99:
                    5a:93:c2:87:54:1e:17:1d:ba:37:c4:a4:9e:99:12:
                    d4:ce:30:19:b3:21:e3:cc:10:3b:a3:27:6f:a6:e1:
                    69:0b:55:fd:71:0b:16:d0:ca:d3:65:d3:e9:83:de:
                    d6:26:86:66:5d:6d:06:35:f2:9b:c2:79:42:95:57:
                    0f:55:d3:47:7d:ef:d6:41:c6:c4:52:58:93:73:59:
                    9d:5c:e4:0b:99:0a:8a:7c:42:e1:81:a1:30:ac:1e:
                    ca:37:9a:44:10:49:07:65:26:6f:06:dc:13:95:90:
                    17:e0:38:dc:d7:1b:1d:fb:0e:50:dc:97:19:b7:b3:
                    d0:5a:ea:e1:34:65:7c:46:28:d5:72:ca:b5:9e:c6:
                    08:9a:66:da:53:d4:db:a2:6f:bf:09:8f:f8:d7:95:
                    6d:2d:df:ab:db:6b:66:ce:1b:e4:d8:d0:bf:0e:53:
                    f3:63:3d:77:38:98:8d:87:d6:6a:2c:70:58:a7:a2:
                    45:da:57:a2:90:fe:6e:3b:bd:91:8a:17:e1:d9:a5:
                    48:00:f7:aa:9f:11:a4:eb:bc:79:1e:07:15:00:8d:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E2:3C:0D:DD:C3:C1:D0:12:F3:FF:8A:97:6E:9A:3B:2E:ED:6A:82
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2483dca-fe84-4fed-8d9e-611ad95e4054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:74:33:01:b0:52:a6:7c:8e:ab:78:e5:ee:0c:67:1d:4c:ce:
         87:89:7c:d6:96:2a:6f:93:7f:06:a7:b7:e6:86:cb:36:8d:c6:
         06:a6:2a:80:6d:a9:e2:ef:16:f1:03:24:b9:53:7b:f6:f6:24:
         75:91:67:cd:5d:c6:2b:db:a2:08:a1:2b:79:26:97:3c:29:e3:
         eb:9a:90:24:7f:6d:18:e9:3b:45:fa:8d:4a:fb:a9:3a:a1:5a:
         6c:ce:6c:06:16:7c:cd:36:10:64:c5:d2:dc:e8:82:ae:13:55:
         b5:f6:0a:91:69:df:be:88:f7:15:59:33:c9:40:38:64:98:dd:
         af:54:a9:1d:27:6f:6f:28:4f:47:15:61:9e:cc:83:4d:72:df:
         d2:95:e5:2e:6f:8d:7e:d5:52:f4:ec:49:79:34:f4:b6:a8:bb:
         26:fa:c4:46:2c:44:a9:55:48:50:e1:1e:b2:83:15:8b:c7:90:
         37:ac:01:c0:74:6a:ca:e0:ae:92:2e:71:cd:56:e4:b7:e1:12:
         58:30:21:ed:3f:ef:ef:7f:fd:75:56:8a:b4:f7:20:49:ac:e7:
         54:f2:32:b3:0a:f3:db:48:69:58:c9:36:15:1a:8c:28:a3:bc:
         45:78:47:e6:32:c8:67:fd:b7:db:e0:cc:64:5a:ab:30:5d:2d:
         da:a6:3e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----