Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a70bac7-1fe2-4277-8de7-58400dca08bb.roa
File:                     8a70bac7-1fe2-4277-8de7-58400dca08bb.roa (raw, json)
Hash identifier:          4J/HCtcTQOa084oMSWi68Is3mVbKqyxH0QuANlHdCLw=
Subject key identifier:   2C:46:91:F1:73:40:B9:13:D9:E8:DC:C9:82:38:FE:0E:94:DE:FB:FC
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5B2F3714200F83EE814F829219D30927412AEB40
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a70bac7-1fe2-4277-8de7-58400dca08bb.roa
Signing time:             Tue 13 May 2025 00:10:51 +0000
ROA not before:           Tue 13 May 2025 00:10:51 +0000
ROA not after:            Tue 17 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:b0c0::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 19:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2f:37:14:20:0f:83:ee:81:4f:82:92:19:d3:09:27:41:2a:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 13 00:10:51 2025 GMT
            Not After : Jun 17 23:59:59 2025 GMT
        Subject: serialNumber=6b785bac8532593d70868d82384b77ccba01af7611317977f536f929763dc06e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:ec:4f:e0:e1:a9:6e:4a:ea:17:28:d7:69:
                    a9:d5:da:3c:40:94:9e:97:24:45:a6:f2:e2:ba:ea:
                    cc:9d:ba:4d:d0:8e:4d:64:c1:e7:67:95:18:be:b8:
                    44:09:dc:85:a7:2e:3e:f7:ee:61:70:c2:a0:cf:7a:
                    d9:1e:d5:52:da:fe:4d:51:8d:75:bb:23:23:9f:f5:
                    cf:d1:4b:34:76:17:d0:50:cb:30:53:b3:9c:60:12:
                    a2:57:23:5f:0f:11:cd:04:f2:91:eb:dc:8c:32:d9:
                    c4:30:e9:f3:b3:8e:18:6b:0a:a9:6a:50:1a:4a:5c:
                    c5:c5:69:2d:3e:ae:40:d1:38:74:e4:89:24:d5:b6:
                    95:b7:4f:9f:ca:1e:65:29:77:50:bd:b4:e7:c1:59:
                    c4:68:89:9b:32:8c:de:5e:a2:ee:61:36:b0:13:1a:
                    70:25:4c:ab:ad:8b:57:4b:1f:97:d9:a5:24:49:f9:
                    d5:d3:d5:6c:da:e9:52:68:b0:b5:d7:2c:cb:78:d9:
                    1f:cf:2d:08:f7:67:78:3e:f1:bf:1d:cd:41:a4:83:
                    09:c0:23:ce:1e:8c:55:3a:6d:28:57:d2:8c:72:d6:
                    56:13:5e:03:bd:71:6d:00:fa:41:36:b8:7c:5a:e8:
                    9c:1c:75:a1:71:dc:20:5a:c3:a0:ba:1e:18:b6:f6:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:46:91:F1:73:40:B9:13:D9:E8:DC:C9:82:38:FE:0E:94:DE:FB:FC
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a70bac7-1fe2-4277-8de7-58400dca08bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:b0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:4f:76:00:f7:f5:41:54:83:34:21:73:bb:f8:e5:69:bb:03:
         b5:55:d0:0c:87:33:6e:0d:8b:04:e0:b8:f1:43:e0:14:9b:2c:
         67:d8:ff:ff:33:0c:d8:6e:cc:83:09:17:f7:47:40:ff:9a:d8:
         57:a2:b8:0a:7f:71:6b:c0:90:63:46:aa:db:87:d6:45:61:7f:
         17:34:cd:5f:d8:59:9f:f6:1e:8c:b1:fc:e8:e4:c1:85:b1:dc:
         47:41:26:25:cd:fb:29:e2:cc:fb:ea:9f:28:fe:b1:c3:af:c2:
         74:f5:bd:09:11:b2:eb:fd:46:8f:cb:e1:f8:98:ed:e7:09:82:
         69:33:7e:68:51:b6:64:a4:f6:41:19:81:1b:7c:05:22:f7:f5:
         f7:94:e7:e1:51:07:b1:d5:28:f8:9f:dd:81:39:78:74:07:ea:
         e5:71:86:83:4f:f5:9d:07:7f:e2:c9:63:29:76:9e:bb:4e:a2:
         9b:dd:cc:2f:98:2b:8d:12:01:c3:7f:66:b5:f2:a7:bf:b5:6f:
         02:40:69:a5:64:0d:63:e3:bf:0d:71:26:c3:43:7d:53:65:a9:
         4e:d4:9e:a3:76:25:44:82:85:74:e6:92:c0:02:ff:07:e9:88:
         8b:ab:5b:c7:36:d3:4b:6b:39:e7:80:54:35:f2:1d:d1:fa:e2:
         16:eb:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----