Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e367cdb8-10a5-4756-a6e9-aa59c5e35e2b.roa
File:                     e367cdb8-10a5-4756-a6e9-aa59c5e35e2b.roa (raw, json)
Hash identifier:          NeUxPVhRSC9TZuFZ/pQ9L43Fok0brJ+q6WIhawg7Wu8=
Subject key identifier:   FC:40:AD:0D:EB:C1:FE:AE:36:A1:81:B7:56:FC:8E:72:E7:E2:71:F2
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3B773FF0585BB109DD9E88D1352802284F6177A4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e367cdb8-10a5-4756-a6e9-aa59c5e35e2b.roa
Signing time:             Wed 30 Jul 2025 00:51:14 +0000
ROA not before:           Wed 30 Jul 2025 00:51:14 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:9080::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:77:3f:f0:58:5b:b1:09:dd:9e:88:d1:35:28:02:28:4f:61:77:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:51:14 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=3fc4b7dabc27f31a80d5edffccfb1dd3f923a0a0c6dcac6fd01f9e25b8f1866f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:22:45:d1:85:a3:bf:83:45:69:1f:7a:b1:
                    c9:33:81:80:f7:24:0c:20:ad:45:aa:d3:15:21:c9:
                    b0:df:77:80:c9:ba:62:ea:7d:a2:10:81:e0:c3:5e:
                    59:04:9c:a8:27:d7:7a:20:88:b3:d5:22:e2:de:cb:
                    6e:b5:66:d4:92:4a:ea:68:b5:ce:9c:16:67:81:f5:
                    47:e3:0e:a1:16:40:d5:f6:49:77:7b:83:86:b2:ef:
                    68:11:28:ef:e8:fc:1f:13:85:9f:c1:db:d9:25:c9:
                    c3:7a:41:80:a1:be:4b:6c:fc:df:b2:ea:23:7b:b9:
                    40:eb:40:fc:18:a0:86:74:e3:6c:17:a7:bf:01:68:
                    e7:84:b9:c8:b0:e6:03:32:74:a2:64:bd:3c:41:63:
                    a7:71:55:83:64:6d:27:69:72:46:23:84:c0:4d:73:
                    7b:67:00:14:fe:8c:33:9f:0b:7e:90:83:1f:64:51:
                    72:4f:1c:e9:69:ef:c8:49:d7:75:27:47:90:2a:0b:
                    cf:f4:25:14:0d:51:15:83:80:ff:9d:65:8b:34:08:
                    4b:4b:0b:c5:75:d6:9a:1f:16:65:cc:61:fb:6f:1f:
                    55:67:a7:73:94:ad:79:54:8c:60:c9:27:e3:68:1a:
                    04:59:26:e4:ef:1c:40:29:ff:67:06:31:93:e3:73:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:40:AD:0D:EB:C1:FE:AE:36:A1:81:B7:56:FC:8E:72:E7:E2:71:F2
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e367cdb8-10a5-4756-a6e9-aa59c5e35e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:9080::/46

    Signature Algorithm: sha256WithRSAEncryption
         a9:01:41:dc:ae:80:6f:80:9e:6c:c2:d8:30:31:75:13:e1:3f:
         4c:7d:cf:23:37:a1:f4:f6:2a:2e:61:8b:da:59:7c:34:f1:53:
         1c:37:84:26:25:ff:dc:19:99:0a:8c:64:0b:ab:b3:3f:9c:54:
         8b:af:80:de:a6:4c:76:28:dc:0e:01:c8:4a:19:91:f9:0f:d5:
         13:bf:41:eb:ec:d5:dd:ed:1e:a3:71:21:5d:d6:88:e7:bf:bc:
         53:00:61:95:06:45:2b:ab:32:68:3d:9a:25:26:8d:7e:68:a3:
         b7:2c:b1:6d:28:17:9a:14:2b:34:34:74:95:a7:f9:8b:a2:e6:
         5e:ca:59:6c:08:ab:18:fe:76:4b:0a:5f:82:8b:35:8f:1c:2e:
         ba:0c:ce:ec:12:cd:22:a2:f3:7b:f0:8f:d2:61:a1:f1:10:68:
         e5:68:b4:6d:c5:a4:c9:4e:7f:1d:4b:b5:d4:97:19:4d:90:ec:
         a5:ae:75:dd:09:ba:e5:3c:17:62:6f:12:94:21:48:d7:46:b8:
         9f:1c:3c:d9:fe:28:dc:6a:6d:8e:b9:8a:de:cc:6a:00:30:7f:
         35:30:d8:2b:a1:4a:38:e3:bc:96:16:b6:fd:94:7d:d1:18:01:
         61:69:83:d3:b9:0b:05:fb:fe:e4:a7:a4:26:7e:0c:2b:7e:c4:
         3d:44:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----