Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfb44867-dd06-4bd8-928a-103cf02a40ad.roa
File:                     dfb44867-dd06-4bd8-928a-103cf02a40ad.roa (raw, json)
Hash identifier:          IsoN83onaskr7cSfilJm5SKLD4RuRsQ78jcSQysoPLw=
Subject key identifier:   8F:43:E4:62:27:70:04:14:A5:F1:6C:BC:D1:52:FD:83:16:F2:65:36
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7CCEAB62831863C7D8B70A018349F041DD987066
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfb44867-dd06-4bd8-928a-103cf02a40ad.roa
Signing time:             Thu 22 May 2025 00:52:07 +0000
ROA not before:           Thu 22 May 2025 00:52:07 +0000
ROA not after:            Thu 26 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab9:9000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 19:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ce:ab:62:83:18:63:c7:d8:b7:0a:01:83:49:f0:41:dd:98:70:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 22 00:52:07 2025 GMT
            Not After : Jun 26 23:59:59 2025 GMT
        Subject: serialNumber=f09f9c492a1223d05c3deba6513b0ae67cc2565ed44fe6fb575fa5c576dfda47, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:5b:4c:ea:6c:72:87:7c:9f:08:46:8b:f0:
                    65:3d:48:87:c8:ed:77:32:a9:6c:fc:95:51:b1:be:
                    94:62:44:6b:c1:4b:98:fb:f6:78:11:ed:c0:52:9b:
                    3a:46:a3:2d:ca:49:c3:f6:0c:75:7d:a2:e8:f0:30:
                    81:18:03:a5:5c:85:b9:ed:57:e3:75:cf:d6:03:97:
                    29:64:84:27:46:c3:c0:79:e7:27:30:8f:04:bc:a1:
                    25:80:69:1d:23:9b:aa:c2:67:c7:1b:b4:80:1c:13:
                    97:20:57:35:e6:4e:14:77:89:9b:e5:25:13:24:72:
                    3e:af:02:a8:4b:a7:3f:48:66:4e:d6:64:62:5a:cb:
                    f4:e5:24:8e:9f:4b:25:89:2e:bb:f6:81:76:ae:43:
                    6b:46:1a:da:45:d4:19:2f:eb:a0:ee:48:81:6e:f3:
                    bd:c4:27:9b:0d:70:5a:a6:a4:08:15:71:33:c3:9c:
                    29:6e:90:66:9f:91:97:74:74:66:bc:5c:07:11:f7:
                    71:fb:e3:5a:36:64:c0:30:50:ed:11:a4:82:b5:38:
                    32:de:6f:b9:67:55:b2:78:39:a0:da:40:3d:b3:37:
                    9b:77:69:d0:48:e8:40:95:4c:86:76:d3:3d:4c:2e:
                    83:b6:45:e9:32:b3:98:78:09:45:69:eb:75:80:09:
                    de:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:43:E4:62:27:70:04:14:A5:F1:6C:BC:D1:52:FD:83:16:F2:65:36
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfb44867-dd06-4bd8-928a-103cf02a40ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab9:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:a1:ec:8b:e4:01:51:c2:dd:51:64:4c:79:68:19:0e:3e:47:
         74:82:11:51:23:19:4e:43:63:02:76:4c:47:2d:ae:d5:f8:ff:
         ac:e0:0c:70:56:08:b6:26:69:ae:59:e3:f0:cf:ec:f4:00:29:
         d0:d9:d4:43:d8:84:9b:b3:7c:6e:3c:e8:dd:61:ab:fc:25:81:
         21:5e:33:b5:80:f0:21:3b:d5:5c:67:dc:b7:ea:db:f1:65:23:
         64:b8:02:73:fc:12:9a:54:26:fa:9c:d2:7e:07:10:b3:eb:99:
         4a:ba:28:19:59:57:8f:7f:3a:00:36:2a:1c:4b:98:77:8f:49:
         df:e0:5b:87:50:e9:c5:ff:f1:83:81:17:5c:b5:07:1c:f2:5c:
         62:17:79:28:a7:58:bc:f2:78:46:f5:13:68:3b:c8:e5:ec:7a:
         5e:44:05:ee:bf:13:5d:c6:34:27:04:4d:cf:98:93:41:1f:25:
         69:6f:d9:7a:62:07:28:bf:11:96:ff:c6:07:3a:d6:ce:8e:07:
         3b:3f:89:53:d5:c9:dc:a2:9a:8e:30:10:db:76:0b:10:4b:1b:
         27:22:61:b1:1a:94:84:f4:92:76:c2:23:9b:35:3b:4e:63:a4:
         9f:a4:b7:bf:7f:57:3d:27:2d:3d:62:f7:38:e3:f7:d5:35:07:
         80:15:ad:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----