Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7f9bf0b-3dbd-4ee6-84db-4390d3196fd3.roa
File:                     f7f9bf0b-3dbd-4ee6-84db-4390d3196fd3.roa (raw, json)
Hash identifier:          FgHZwjC4NQP0ILcB0yuenkaiFgvXEZx3yc2QBQgLGcY=
Subject key identifier:   7D:FB:59:77:C5:DF:60:7B:D1:A9:55:7B:00:46:01:89:13:DB:1F:1D
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7FF66F612F06E66477B062A7E4AC20F07DA06AA0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7f9bf0b-3dbd-4ee6-84db-4390d3196fd3.roa
Signing time:             Wed 30 Jul 2025 00:50:10 +0000
ROA not before:           Wed 30 Jul 2025 00:50:10 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:9040::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f6:6f:61:2f:06:e6:64:77:b0:62:a7:e4:ac:20:f0:7d:a0:6a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:50:10 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=f09d1942caec22d3e7340a18fec8187e873446e36801d49f55c6301667e4e339, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5c:dc:c1:9d:a3:b9:21:34:ae:00:f8:cc:ac:
                    0b:f9:31:95:3b:09:cf:e1:2c:7a:b8:e6:59:60:28:
                    a4:de:88:1c:a7:65:bb:c4:d0:51:e1:34:ca:5e:11:
                    61:49:1d:36:cf:a9:7e:bb:6a:16:53:d2:bb:0b:ea:
                    98:ac:54:66:ce:cc:aa:6f:6f:5c:b7:3f:54:ba:b8:
                    70:be:98:a7:66:34:ef:34:48:d4:eb:80:c5:de:c2:
                    75:4b:8a:36:5b:b4:e5:fb:6f:e9:24:4f:a2:dc:51:
                    fa:80:5e:db:8c:62:19:28:d5:34:29:07:9c:2c:65:
                    f9:3e:a6:ac:d8:43:ba:f9:bf:d8:75:f2:0e:8f:9e:
                    fb:8a:fd:f7:a1:10:79:1d:6e:5c:c5:0f:7f:40:ac:
                    11:cb:f8:c2:36:21:b2:38:dc:3b:73:37:23:86:fa:
                    15:b6:72:75:88:6f:a2:54:b9:81:c0:76:2a:19:0f:
                    56:21:17:fb:7a:c6:53:1f:64:62:86:b9:9e:12:d7:
                    32:a1:a4:dc:b1:ad:96:73:4d:ab:31:7e:22:d2:51:
                    65:58:6b:1e:20:7c:8f:53:42:91:4b:65:65:7d:6a:
                    37:d0:0e:4c:14:88:73:26:35:3f:5a:a5:59:ab:e3:
                    b0:78:27:ab:41:5a:32:72:97:66:d0:f5:54:b0:54:
                    c7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FB:59:77:C5:DF:60:7B:D1:A9:55:7B:00:46:01:89:13:DB:1F:1D
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7f9bf0b-3dbd-4ee6-84db-4390d3196fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:9040::/46

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:ea:6d:f2:83:79:71:cb:1f:2b:0b:e1:f5:0a:a5:a8:8c:
         1f:0d:19:09:47:ca:39:95:b7:32:2c:66:79:57:84:a5:6a:26:
         13:6c:56:8f:fe:60:95:a7:a1:65:2c:52:d5:8d:63:58:8c:6a:
         da:8c:d4:89:5c:00:e9:22:7f:11:fd:b3:63:6b:ea:ba:26:0a:
         0e:e1:c3:0c:8b:73:13:20:dc:6b:f0:cd:76:76:6d:db:6d:e1:
         7a:0f:63:c6:f9:a3:a7:3c:cd:ed:89:8c:62:64:ce:70:f8:d3:
         67:5d:21:ed:5d:f3:32:3d:da:13:97:26:6d:d3:7d:2a:fa:16:
         67:e9:60:af:6b:58:93:d3:21:be:4d:e0:97:8c:51:fb:1d:38:
         36:2c:08:8a:14:a8:de:16:df:2e:3e:fa:25:cc:52:e8:41:1d:
         33:e6:78:dc:39:14:fe:0a:ab:ce:6b:e0:c0:7f:68:29:49:f9:
         1f:c8:65:a9:70:88:4b:ce:31:ff:94:e5:b0:9e:9d:13:58:5a:
         04:13:ec:85:8d:15:d2:d8:6c:0c:58:f9:d9:c3:0c:95:0d:d6:
         85:b1:6c:12:88:be:a1:f5:b6:a5:26:24:88:9e:a9:cc:e7:c6:
         82:ea:c1:9c:df:ef:62:8c:11:8e:9d:01:e9:62:55:88:99:31:
         b7:30:e4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----