Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/19af8c10-b5ba-4e12-934c-ddaceb98757c.roa
File:                     19af8c10-b5ba-4e12-934c-ddaceb98757c.roa (raw, json)
Hash identifier:          wgNF+nTHbzZ8RmlNS76ElZP100wWFTUnac4fZsdGKmw=
Subject key identifier:   68:E9:BF:A3:D4:E0:AE:C9:2F:EE:04:A4:E9:99:1B:B3:8B:87:FA:E7
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       719A0D18D18A81019CC55042D593DA85625B061F
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/19af8c10-b5ba-4e12-934c-ddaceb98757c.roa
Signing time:             Fri 31 Jul 2026 05:10:36 +0000
ROA not before:           Fri 31 Jul 2026 05:10:36 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:d00::/40 maxlen: 48
Validation:               Failed, certificate revoked on Fri 31 Jul 2026 06:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9a:0d:18:d1:8a:81:01:9c:c5:50:42:d5:93:da:85:62:5b:06:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 31 05:10:36 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=bd7c725e4c823b5f31903ff1f71547aea90068ebf7d246531b2b6bc5b463ade5, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:b3:58:56:94:e4:80:9a:89:45:6f:a8:98:
                    ba:fe:79:69:8c:55:60:1b:0e:ee:a1:cb:fd:1e:33:
                    48:d7:d9:e9:56:33:11:d2:7c:f1:d6:05:58:9b:42:
                    9d:76:9d:b4:fd:e2:cf:79:1a:54:cd:7c:3b:21:34:
                    48:dc:2d:5f:62:4f:0e:23:a5:0d:bb:22:1d:1b:cb:
                    b7:18:86:79:bd:a4:a4:8b:3d:d4:8c:76:82:a8:4d:
                    8a:2e:5a:40:59:ca:43:96:73:e1:3c:c3:87:2c:e5:
                    23:ec:8d:1d:04:19:a5:bf:bf:18:c4:68:c4:c4:92:
                    fd:83:fe:b1:06:9d:6c:19:d2:bf:f2:eb:ed:67:80:
                    b9:3a:71:2e:eb:1e:52:5e:36:75:49:c1:53:ee:ff:
                    cf:bd:62:95:86:d1:e0:d1:02:d4:a5:f6:49:ea:43:
                    73:af:ad:b6:f2:29:e1:4c:2b:40:16:9f:12:83:0a:
                    59:e4:c7:4a:36:e2:e6:ae:aa:9b:60:b4:b3:01:fb:
                    ee:7a:97:d0:88:ce:4a:cf:b4:0e:85:3d:71:4a:72:
                    25:d0:fe:a3:9f:54:a7:64:47:1b:48:80:7d:a3:a2:
                    0c:ac:ad:63:0f:fd:b0:57:67:44:bb:53:14:6e:97:
                    7c:f5:e4:4e:cc:a5:d1:33:fd:20:4f:64:3a:5f:9b:
                    20:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E9:BF:A3:D4:E0:AE:C9:2F:EE:04:A4:E9:99:1B:B3:8B:87:FA:E7
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/19af8c10-b5ba-4e12-934c-ddaceb98757c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:d0:22:67:7e:29:c7:e6:ae:cf:58:29:87:09:0b:38:1c:74:
         01:de:90:af:b0:41:9f:d9:20:8b:ba:f0:59:b1:07:fa:d2:3a:
         be:7a:86:ed:6b:f0:da:fd:8e:39:e4:ed:04:26:98:cb:a3:80:
         e0:82:9d:d3:07:be:93:83:58:97:62:0d:8e:03:e1:37:4f:76:
         b9:96:ea:07:ed:b5:f2:c6:60:b0:14:70:c4:57:31:ce:6e:12:
         e8:36:9c:a1:73:34:5e:9a:a9:4a:bc:af:5e:68:cc:63:05:2d:
         61:80:9a:d7:83:45:73:b9:89:a4:6f:31:d8:d3:fd:d0:19:0a:
         0a:2d:2b:0c:40:d4:d2:f4:ae:70:aa:75:c5:19:02:9d:66:44:
         6d:43:74:d4:21:4f:5e:0d:33:14:21:d9:8b:e0:89:d7:d5:1d:
         4c:a5:f8:29:7f:f4:46:6e:5e:cf:7a:60:21:95:50:bb:81:1b:
         58:15:48:fe:5f:75:05:89:e9:4d:2e:0f:a8:0d:92:dd:57:06:
         28:10:75:95:f5:31:a3:64:3c:a2:72:00:63:f3:35:ae:fe:f4:
         e0:1a:88:dc:a7:32:3a:88:67:fb:d1:4a:f9:30:e2:fd:11:bb:
         68:67:9a:9b:15:c4:06:af:ca:75:38:79:d7:f5:5c:d1:0a:17:
         d3:2b:d3:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----