Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb0cac2-3ccf-4adb-ab88-7172ca921095.roa
File:                     0cb0cac2-3ccf-4adb-ab88-7172ca921095.roa (raw, json)
Hash identifier:          QtIKS2gIxl4Xi6sSNO9n36M2KJYpAJ0MpmftmGn5azw=
Subject key identifier:   2C:A7:48:61:32:98:47:6C:9A:97:DF:A2:27:0B:40:D5:33:BF:C4:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B2517D591A8F9F07C65769E118FDB8319B5BF74
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb0cac2-3ccf-4adb-ab88-7172ca921095.roa
Signing time:             Tue 08 Jul 2025 15:51:07 +0000
ROA not before:           Tue 08 Jul 2025 15:51:07 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff7:74c0::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 19:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:25:17:d5:91:a8:f9:f0:7c:65:76:9e:11:8f:db:83:19:b5:bf:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 15:51:07 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=941b5568740261b0bd62a79f525d9d53045752e336e8b0584e18b356de6bf11d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:01:98:29:12:2e:fc:6c:69:a9:24:87:74:
                    a4:d4:bc:03:13:ac:f4:8e:37:e6:63:99:e7:d1:cd:
                    97:ca:4e:5b:d1:91:43:d0:4b:d5:d9:ab:57:77:02:
                    80:44:d4:92:64:2b:61:24:f8:8e:34:7f:ee:0d:36:
                    fd:4f:cc:72:b1:0d:ac:c6:e2:24:d4:e1:51:2f:81:
                    3b:e5:f5:03:a7:25:b1:8c:ba:ca:59:1d:54:ea:16:
                    98:bb:60:7f:42:8f:30:50:24:b3:75:49:67:58:bd:
                    c5:e6:e7:16:1b:f1:66:04:d4:d6:ca:e0:b7:ae:5d:
                    83:ba:7c:02:cb:2f:de:61:77:2a:bb:bb:b9:2a:3e:
                    0f:09:06:1f:21:4d:72:83:d2:ea:5b:76:a8:fa:73:
                    60:50:0e:71:a6:35:5e:04:39:51:df:3f:ac:00:b3:
                    c7:50:9b:7f:5e:9d:18:c0:e9:e3:ce:0a:89:94:ba:
                    64:73:64:b2:91:d3:0a:1e:98:5d:64:fe:c9:42:c6:
                    3f:7a:f2:bf:b3:a7:83:21:f4:1a:35:e4:44:fe:43:
                    f1:58:e0:2b:5d:a0:eb:ca:79:77:4d:6c:1c:6c:8f:
                    48:7f:05:91:39:95:16:fc:2b:43:79:58:b5:4a:14:
                    cb:c9:c4:52:e6:de:5d:27:2b:9e:0a:d6:cb:e6:23:
                    3f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A7:48:61:32:98:47:6C:9A:97:DF:A2:27:0B:40:D5:33:BF:C4:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb0cac2-3ccf-4adb-ab88-7172ca921095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7:74c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         55:ff:9f:fa:e8:d8:19:b5:b1:fc:65:fd:b3:80:34:81:91:e5:
         1b:a1:fa:ed:1e:6a:85:c4:92:bb:b0:20:33:55:a3:86:94:73:
         45:32:cb:88:be:1a:3d:f6:88:16:9d:fb:d9:ef:53:62:53:ed:
         59:af:ae:ec:f4:8d:9a:ae:6c:5d:c0:18:b7:08:a5:ba:9b:b2:
         6c:b6:73:b9:62:ce:e5:83:90:a6:e2:73:58:e8:6c:5d:54:01:
         00:c1:2b:28:0b:9d:dd:1a:19:51:ee:61:1d:d0:22:85:0a:f5:
         00:96:3b:60:fd:c1:5a:48:8f:75:43:16:b5:6b:6c:15:42:04:
         bf:cf:b4:4b:4e:55:d3:f9:3b:b1:b7:e1:52:f1:2b:09:7c:14:
         22:d0:74:a9:22:b5:ce:38:dc:0d:b8:03:51:f5:6f:2c:24:3f:
         bd:15:3f:87:be:43:17:54:84:4a:3f:b3:95:2e:e6:f5:db:ef:
         4f:68:66:c9:e5:2b:2e:1d:bd:79:af:97:f3:68:ea:59:26:a0:
         0e:46:3c:19:54:f9:a0:32:e6:1e:c2:d7:3e:e1:e9:71:8d:2f:
         0f:4b:ba:9a:e7:f2:26:d6:3e:3d:2d:d2:ed:16:88:19:f9:f5:
         96:b8:9f:29:c3:b7:15:99:a6:db:c8:e2:da:d5:48:c4:47:23:
         78:d1:99:be
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUGyUX1ZGo+fB8ZXaeEY/bgxm1v3QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTU1MTA3WhcNMjUwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDFiNTU2ODc0MDI2MWIwYmQ2MmE3OWY1MjVkOWQ1MzA0
NTc1MmUzMzZlOGIwNTg0ZTE4YjM1NmRlNmJmMTFkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnygGYKRIu/GxpqSSHdKTUvAMTrPSON+ZjmefRzZfKTlvR
kUPQS9XZq1d3AoBE1JJkK2Ek+I40f+4NNv1PzHKxDazG4iTU4VEvgTvl9QOnJbGM
uspZHVTqFpi7YH9CjzBQJLN1SWdYvcXm5xYb8WYE1NbK4LeuXYO6fALLL95hdyq7
u7kqPg8JBh8hTXKD0upbdqj6c2BQDnGmNV4EOVHfP6wAs8dQm39enRjA6ePOComU
umRzZLKR0woemF1k/slCxj968r+zp4Mh9Bo15ET+Q/FY4CtdoOvKeXdNbBxsj0h/
BZE5lRb8K0N5WLVKFMvJxFLm3l0nK54K1svmIz/PAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQULKdIYTKYR2yal9+iJwtA1TO/xAMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBjYjBjYWMyLTNjY2YtNGFkYi1hYjg4LTcxNzJjYTkyMTA5NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/3dMAwDQYJKoZIhvcNAQELBQADggEBAFX/n/ro2Bm1sfxl/bOANIGR
5Ruh+u0eaoXEkruwIDNVo4aUc0Uyy4i+Gj32iBad+9nvU2JT7Vmvruz0jZqubF3A
GLcIpbqbsmy2c7lizuWDkKbic1jobF1UAQDBKygLnd0aGVHuYR3QIoUK9QCWO2D9
wVpIj3VDFrVrbBVCBL/PtEtOVdP5O7G34VLxKwl8FCLQdKkitc443A24A1H1bywk
P70VP4e+QxdUhEo/s5Uu5vXb709oZsnlKy4dvXmvl/No6lkmoA5GPBlU+aAy5h7C
1z7h6XGNLw9Luprn8ibWPj0t0u0WiBn59Za4nynDtxWZptvI4trVSMRHI3jRmb4=
-----END CERTIFICATE-----