Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/bc104e8c-b4a5-44a9-83e4-ec038d2a90e9.roa
File:                     bc104e8c-b4a5-44a9-83e4-ec038d2a90e9.roa (raw, json)
Hash identifier:          V/7UCaUtIt3Xvl1vchmj2ikZdZJRCEqe6mGCaqUfidE=
Subject key identifier:   F9:2D:1C:70:AD:72:35:FD:0A:56:26:75:9E:08:4D:5D:5B:F6:55:EC
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       02A8B0786A454EF58046C838F50F12114E6A4DD9
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/bc104e8c-b4a5-44a9-83e4-ec038d2a90e9.roa
Signing time:             Tue 28 Jul 2026 18:17:55 +0000
ROA not before:           Tue 28 Jul 2026 18:17:55 +0000
ROA not after:            Mon 26 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:8380:1000::/44 maxlen: 44
Validation:               Failed, certificate revoked on Tue 28 Jul 2026 19:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a8:b0:78:6a:45:4e:f5:80:46:c8:38:f5:0f:12:11:4e:6a:4d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Jul 28 18:17:55 2026 GMT
            Not After : Oct 26 23:59:59 2026 GMT
        Subject: serialNumber=999e89c272ce51283c4e966907d95c34a20edda9ca1299940141779d5600598a, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:2b:18:dc:6d:9b:76:77:a6:66:82:af:d3:
                    7b:bd:2c:8e:e7:8e:14:f7:59:7a:7f:a7:cd:85:d1:
                    14:f9:30:0a:6f:84:b6:ee:30:d9:c5:60:83:2e:d4:
                    a9:f6:6e:13:5e:f8:42:71:10:26:de:7f:11:13:ef:
                    91:04:3a:ea:91:f4:1f:72:95:a7:aa:69:af:a1:06:
                    d0:8e:2f:a8:22:f3:a3:d4:a6:ef:69:46:87:84:27:
                    69:83:1e:66:b2:f8:f3:df:d4:b7:94:d8:8b:ef:ac:
                    1c:69:6d:21:a6:5c:01:2d:e4:99:fb:e8:36:46:e9:
                    df:35:73:23:31:2b:3c:0b:f8:db:b1:6e:8f:5c:77:
                    81:3d:6e:5e:c2:63:f1:46:be:67:99:11:5d:55:04:
                    c7:8f:bb:cf:05:7b:ed:a4:9b:b2:7c:e2:26:d1:f1:
                    b7:dc:2d:15:fd:a3:dd:a0:67:cf:5c:93:c2:c0:9b:
                    a0:82:86:19:c2:f8:10:28:57:16:1d:84:26:90:0e:
                    f2:dc:01:fe:ec:e4:64:06:ee:47:b2:40:ce:42:f8:
                    b1:52:7f:d3:fc:7e:77:a8:fd:52:04:aa:af:33:a5:
                    bf:b1:85:96:91:b5:73:ab:ac:e6:d7:0f:29:67:66:
                    81:29:3e:50:34:ac:70:1a:cb:bb:34:64:08:ea:7d:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2D:1C:70:AD:72:35:FD:0A:56:26:75:9E:08:4D:5D:5B:F6:55:EC
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/bc104e8c-b4a5-44a9-83e4-ec038d2a90e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8380:1000::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:da:1b:53:78:bb:3e:51:f0:4f:67:f5:32:1a:c7:18:6b:
         07:f9:92:8a:a3:e6:7c:07:46:bf:b2:ee:d0:de:20:1b:6e:7e:
         f4:ef:44:65:5f:b5:69:08:7f:d3:0b:45:f9:3e:d4:be:8f:4b:
         d7:27:cb:2f:f0:f5:d5:51:43:61:a8:ca:e0:98:45:46:5b:59:
         91:dc:18:a8:63:a6:8f:f9:a7:3e:00:e6:14:09:28:cb:f2:93:
         0c:a1:1a:e4:59:86:a8:82:6c:8d:fa:b0:cf:4a:a7:27:c7:7d:
         7a:af:77:02:08:1c:84:55:24:11:15:68:d9:be:bc:bc:f3:86:
         6b:98:cf:a3:57:bf:6a:86:5f:80:83:f2:fb:c4:33:16:db:e2:
         db:be:e1:18:ab:70:93:d4:b0:10:f2:71:fd:72:b3:48:92:45:
         bf:e8:d6:b5:7e:4e:16:1b:4d:4b:6a:5d:dd:79:5e:37:2b:6d:
         af:f2:98:71:e8:f3:79:f2:f2:8e:20:16:79:86:83:9d:83:9b:
         f6:b2:41:de:23:ea:00:76:ae:a5:4e:cd:de:e7:49:10:91:e1:
         60:a2:cc:6e:a4:64:66:06:fa:8a:10:fd:cd:59:f9:81:69:7c:
         07:df:62:0a:de:c3:24:10:5a:1f:54:1c:99:6f:37:d7:71:54:
         ec:50:67:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----