Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debbb5a8-d06e-47cb-b668-0e30bf0a9706.roa
File:                     debbb5a8-d06e-47cb-b668-0e30bf0a9706.roa (raw, json)
Hash identifier:          Z46zbyoSS2gOvhYe4qMKZ8Wi/mG08rqWVJXOQ3/Pnco=
Subject key identifier:   76:8A:0A:6A:66:66:D9:DA:D2:4F:69:C4:5B:44:0C:0D:9F:61:5F:56
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3661CA97BB937648474150A71FF5B48731733510
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debbb5a8-d06e-47cb-b668-0e30bf0a9706.roa
Signing time:             Wed 30 Jul 2025 00:30:28 +0000
ROA not before:           Wed 30 Jul 2025 00:30:28 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:880::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:61:ca:97:bb:93:76:48:47:41:50:a7:1f:f5:b4:87:31:73:35:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:30:28 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=98758dcdaf543a7ec5f4a7493c07b8d7a16c8e1645fb9b9b57da59ae3e455be4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:34:da:9f:2b:41:e6:bb:ff:5a:e0:db:65:
                    19:59:8e:b3:aa:84:d7:12:b8:71:36:20:dc:6a:50:
                    49:b4:6d:94:3a:3a:45:af:ca:e9:e8:16:70:7c:0b:
                    6a:3f:5c:ce:cc:07:38:05:06:f4:0e:b3:ce:d5:db:
                    8f:7c:8a:72:99:c2:0e:d0:3b:8e:48:b1:65:2a:39:
                    f4:67:4e:8f:a8:0d:a7:44:61:82:87:05:fc:ce:40:
                    ad:3b:69:fa:75:1e:c4:67:10:b0:4f:ff:be:5a:f9:
                    90:04:c3:ad:2f:40:f6:5d:30:7a:44:89:a9:c5:36:
                    54:35:5c:34:2e:3d:8b:2b:93:33:3b:99:73:d4:4c:
                    d7:2f:73:5f:a8:de:0a:86:67:2c:ac:d9:c7:29:eb:
                    9b:9b:75:4b:aa:f4:eb:dc:7b:2f:da:24:a0:72:08:
                    f1:93:02:e0:c1:93:3e:6a:96:96:fa:ba:82:d4:b4:
                    82:16:2e:bc:79:a1:da:88:c6:d2:82:b0:29:6c:47:
                    77:3e:2c:7c:2e:a9:75:35:83:05:ae:f4:2d:a1:b0:
                    d0:fe:11:04:92:6c:e3:a1:87:5f:a3:3b:bb:38:a9:
                    24:52:54:bf:5a:fc:c8:39:26:7a:db:b1:57:34:cc:
                    1d:3c:23:e7:eb:28:b0:9b:b6:ba:f7:6b:2e:92:d9:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8A:0A:6A:66:66:D9:DA:D2:4F:69:C4:5B:44:0C:0D:9F:61:5F:56
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debbb5a8-d06e-47cb-b668-0e30bf0a9706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:880::/46

    Signature Algorithm: sha256WithRSAEncryption
         07:3d:59:cb:9b:4c:1f:3f:3f:31:3b:e4:28:7d:63:df:f9:a1:
         73:95:e0:32:00:8a:bb:af:ab:43:41:b3:70:49:43:1b:bb:ec:
         2c:28:4e:14:d5:54:31:cc:c8:0b:d5:9e:65:5e:c5:be:57:54:
         b0:0e:20:f8:46:ef:50:c7:fa:24:f4:06:ca:76:48:af:b0:22:
         e5:66:96:ce:d6:7b:66:f7:96:d1:59:b1:4a:ed:5e:94:f4:69:
         a5:76:68:c1:d3:c4:fa:d3:f3:3a:31:04:74:f2:fe:e3:ef:40:
         d4:bc:a1:dd:6e:f6:6a:0d:c1:e1:3d:82:29:31:80:0a:51:a3:
         d6:96:4a:2f:af:07:03:70:b5:e9:f5:af:cb:a9:ae:b5:73:fc:
         d5:89:14:78:dd:92:9c:43:cf:cd:cb:16:a8:6d:04:99:8e:55:
         39:9d:72:7a:a4:b6:bf:fb:6b:8b:1d:73:1e:a6:80:af:98:b0:
         7d:a9:4a:ac:41:39:a3:57:9e:70:e2:51:8b:a4:b4:6c:88:9f:
         33:37:c7:a9:e7:14:56:71:b0:fe:c8:99:a3:10:df:4e:54:04:
         cd:ad:c8:a7:53:39:a5:94:ac:3f:c4:1e:22:a2:07:b6:e3:b2:
         2f:21:d8:b9:a1:5b:1d:33:f3:e9:1a:5e:92:43:d9:f0:cd:e9:
         76:e7:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----