Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f1648952-10db-4fb1-b235-fe283d78284b.roa
File:                     f1648952-10db-4fb1-b235-fe283d78284b.roa (raw, json)
Hash identifier:          DSgzMQHFArTtGzPornoY/lIn/8JcfxQ161VREEsniUY=
Subject key identifier:   5F:73:02:CE:9B:5B:6D:3F:CC:39:99:E3:BD:FA:0A:A5:57:4B:36:E6
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       74D8BEAA340640145D9FB028C3B09566DDA2B789
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f1648952-10db-4fb1-b235-fe283d78284b.roa
Signing time:             Fri 17 Jul 2026 05:10:38 +0000
ROA not before:           Fri 17 Jul 2026 05:10:38 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:d00::/40 maxlen: 48
Validation:               Failed, certificate revoked on Fri 17 Jul 2026 06:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d8:be:aa:34:06:40:14:5d:9f:b0:28:c3:b0:95:66:dd:a2:b7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 17 05:10:38 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=54451ae5c948e24aee7d9cee06b03e51de1500661f9f6f7bd5d416642907b41f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:47:39:99:97:58:ee:81:0c:49:26:bc:28:
                    19:03:1c:0b:7a:a8:46:6c:b2:c0:67:7a:07:8f:4a:
                    c0:08:02:0f:eb:9f:2c:08:83:e8:46:96:e3:82:20:
                    56:c8:17:cc:fa:47:c9:d7:56:98:01:79:bf:26:5a:
                    40:95:58:b5:3e:8a:77:da:09:dd:a9:b8:40:a5:58:
                    e5:a4:e5:de:e3:44:04:99:14:a2:87:21:6d:cd:d4:
                    d8:20:e0:d9:93:2b:0c:32:b6:a1:90:a3:d3:ef:b6:
                    66:8c:32:59:93:6e:9f:f6:c4:2e:25:1a:34:c2:48:
                    4a:43:8b:e9:bd:03:3b:19:8a:b3:4a:77:55:39:16:
                    ab:ee:f8:d7:2c:d0:83:da:c7:3c:1b:43:e3:20:15:
                    04:e0:75:91:04:b0:ed:7b:0c:d1:c6:f4:26:53:63:
                    af:23:7b:69:d5:f5:43:ab:f9:41:35:12:fb:e8:ce:
                    fe:ff:8c:48:71:f4:13:6c:ab:d5:ab:68:fe:77:b2:
                    e0:2a:b8:4a:81:37:71:1e:10:77:15:d0:61:fb:20:
                    b3:3f:90:15:3b:9d:c5:1b:0c:3a:bc:f7:74:05:45:
                    ac:06:aa:96:f5:8b:2d:d1:4c:59:58:46:7b:dc:03:
                    67:25:b3:4d:b4:40:85:b7:04:58:e9:14:77:cb:10:
                    e2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:73:02:CE:9B:5B:6D:3F:CC:39:99:E3:BD:FA:0A:A5:57:4B:36:E6
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f1648952-10db-4fb1-b235-fe283d78284b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:71:56:2a:20:76:a4:35:25:54:a9:6c:fc:8f:3d:92:bf:71:
         ec:d1:ec:63:de:1f:fa:22:96:39:7d:1f:79:98:d1:15:4c:61:
         42:8a:e9:1d:02:66:8b:1b:82:c9:de:d9:ee:02:61:8e:c6:fc:
         fc:bc:fd:24:63:01:e0:9c:bd:37:e8:59:c7:0c:d9:bf:cd:d0:
         c0:93:be:48:01:b5:d3:77:05:6c:05:aa:7a:e2:4d:e8:33:f7:
         7f:10:fb:35:af:fd:4e:4d:40:20:0e:b8:aa:a9:e3:6b:ef:3e:
         0c:ce:4f:ec:63:c1:d4:a4:e6:9c:dd:6e:a3:7c:b4:b0:29:86:
         84:6d:ce:65:01:19:52:53:dd:3f:67:5d:bb:29:54:2b:b0:68:
         b1:64:73:8f:bf:9f:d0:d5:1b:7f:63:f2:a2:55:52:ed:50:7f:
         87:57:59:3f:53:2b:07:ce:34:8a:1a:3e:63:54:9a:c2:a2:cb:
         4d:98:ff:6b:c6:cc:12:46:74:88:46:02:58:e5:44:e8:37:f7:
         4e:ef:46:0b:56:75:8e:cd:4e:be:ce:aa:75:f3:00:82:09:b3:
         a7:5f:39:d1:00:f9:ad:29:2f:47:d1:bc:0e:ca:10:60:28:82:
         b1:fa:db:e7:2a:30:bf:13:4e:ab:32:ff:b7:1e:40:10:63:38:
         f9:66:bc:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----