Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c52022dc-4d08-44a7-9d85-d554ca4b3307.roa
File:                     c52022dc-4d08-44a7-9d85-d554ca4b3307.roa (raw, json)
Hash identifier:          Den99d8Q5XrnovTJOQoWZGItOxmJXDyBH6F8KKYp0C0=
Subject key identifier:   19:96:B0:A1:F4:75:BD:C3:E8:6A:FA:9B:4B:12:8D:13:05:03:5A:E9
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       56391044526D717E2F66FE58806AD1FFDD0A61BA
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c52022dc-4d08-44a7-9d85-d554ca4b3307.roa
Signing time:             Sun 20 Sep 2026 08:47:16 +0000
ROA not before:           Sun 20 Sep 2026 08:47:16 +0000
ROA not after:            Sat 19 Dec 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:d00::/40 maxlen: 48
Validation:               Failed, certificate revoked on Sun 20 Sep 2026 10:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:39:10:44:52:6d:71:7e:2f:66:fe:58:80:6a:d1:ff:dd:0a:61:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 20 08:47:16 2026 GMT
            Not After : Dec 19 23:59:59 2026 GMT
        Subject: serialNumber=87cfa6676d2b628eb5f98ac2a209049b1ba821f2b6fb945119b32f616be976bb, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:81:15:2a:35:2e:19:6f:60:98:74:05:10:
                    7e:43:df:f1:ae:7b:f3:a0:00:6f:56:ff:db:da:b5:
                    17:20:c6:cf:ff:03:1e:57:be:84:d0:85:12:f4:3e:
                    f8:c5:7c:5d:f6:8a:2c:f0:51:ed:f9:5b:06:b1:32:
                    1a:a5:f6:d2:31:31:7f:dd:ba:43:58:81:e6:8c:6e:
                    14:fd:d4:e4:71:54:38:b4:a9:68:08:ac:4d:a9:8a:
                    93:b2:74:7b:39:18:e4:f7:5e:32:90:b3:a1:12:d9:
                    4d:ee:69:65:2b:c7:51:82:47:1d:59:a0:52:a4:35:
                    ca:fe:41:ce:9e:ac:48:ef:1c:61:d3:7f:8a:94:aa:
                    a7:1c:65:e6:bd:e3:fa:9c:b2:61:77:bd:3f:bf:1a:
                    05:db:82:77:9d:6e:ed:87:e8:19:f6:4d:37:30:ae:
                    9a:a8:2a:82:5e:57:d7:36:e3:9b:9b:fa:fd:12:cd:
                    58:9c:f4:e4:62:ac:75:d5:da:18:de:53:3c:c2:a7:
                    83:da:f4:b5:ff:8d:ec:7e:8f:af:c3:4f:9e:d0:d8:
                    39:e1:ce:42:ba:c2:f4:c9:e7:7c:71:33:28:3f:75:
                    78:90:08:e6:46:38:8e:11:8f:c1:ca:20:2a:18:10:
                    51:ef:2e:a3:80:88:59:c6:0d:f1:f9:7a:28:04:03:
                    94:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:96:B0:A1:F4:75:BD:C3:E8:6A:FA:9B:4B:12:8D:13:05:03:5A:E9
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c52022dc-4d08-44a7-9d85-d554ca4b3307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:1b:c8:77:ed:5d:2c:5b:6f:c4:22:89:94:98:97:1e:84:2f:
         29:37:e8:f4:37:69:34:cc:af:8c:63:a3:ac:20:12:a2:75:1e:
         2c:ae:11:51:8d:89:a3:10:a1:49:78:4f:c8:ca:d0:83:a7:75:
         47:23:51:69:8b:7c:13:8b:50:c6:4b:21:45:49:74:e6:97:39:
         92:4f:81:ce:a3:9f:7f:ec:09:6b:da:8b:2c:ea:30:40:2f:a2:
         4d:b4:50:f8:e4:b2:fc:11:6f:eb:4a:a4:d2:03:6d:4b:06:f1:
         37:63:ff:a6:ab:b7:51:9a:40:8e:63:79:5b:2c:76:cc:bd:8b:
         5a:af:43:70:df:9d:99:59:60:e4:ee:36:72:a2:52:18:bf:35:
         c7:aa:a4:1d:b8:3b:f1:4f:f4:1a:8f:ad:0d:e7:af:50:4e:c1:
         4e:c6:3f:29:9c:1d:49:6e:8a:cc:e6:bd:c6:d8:f8:92:63:c9:
         7a:5e:3e:16:5e:b0:a3:df:6d:6f:8e:c5:c6:5c:e0:a6:51:88:
         e6:47:b7:4b:a3:90:0b:f9:f0:ac:36:07:cf:37:a5:42:8a:03:
         1a:71:6b:6c:62:97:c8:01:24:9c:68:1d:02:44:67:da:3d:2b:
         42:39:36:3f:2d:71:75:e4:da:dc:e2:37:a1:22:3a:4d:b0:88:
         99:ff:f7:a2
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUVjkQRFJtcX4vZv5YgGrR/90KYbowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwOTIwMDg0NzE2WhcNMjYxMjE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A4N2NmYTY2NzZkMmI2MjhlYjVmOThhYzJhMjA5MDQ5YjFi
YTgyMWYyYjZmYjk0NTExOWIzMmY2MTZiZTk3NmJiMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7QIEVKjUuGW9gmHQFEH5D3/Gue/OgAG9W/9vatRcgxs//
Ax5XvoTQhRL0PvjFfF32iizwUe35WwaxMhql9tIxMX/dukNYgeaMbhT91ORxVDi0
qWgIrE2pipOydHs5GOT3XjKQs6ES2U3uaWUrx1GCRx1ZoFKkNcr+Qc6erEjvHGHT
f4qUqqccZea94/qcsmF3vT+/GgXbgnedbu2H6Bn2TTcwrpqoKoJeV9c245ub+v0S
zVic9ORirHXV2hjeUzzCp4Pa9LX/jex+j6/DT57Q2DnhzkK6wvTJ53xxMyg/dXiQ
COZGOI4Rj8HKICoYEFHvLqOAiFnGDfH5eigEA5Q5AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUGZawofR1vcPoavqbSxKNEwUDWukwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2M1MjAyMmRjLTRkMDgtNDRhNy05ZDg1LWQ1NTRjYTRiMzMwNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmBZzADTANBgkqhkiG9w0BAQsFAAOCAQEAURvId+1dLFtvxCKJlJiXHoQv
KTfo9DdpNMyvjGOjrCASonUeLK4RUY2JoxChSXhPyMrQg6d1RyNRaYt8E4tQxksh
RUl05pc5kk+BzqOff+wJa9qLLOowQC+iTbRQ+OSy/BFv60qk0gNtSwbxN2P/pqu3
UZpAjmN5Wyx2zL2LWq9DcN+dmVlg5O42cqJSGL81x6qkHbg78U/0Go+tDeevUE7B
TsY/KZwdSW6KzOa9xtj4kmPJel4+Fl6wo99tb47FxlzgplGI5ke3S6OQC/nwrDYH
zzelQooDGnFrbGKXyAEknGgdAkRn2j0rQjk2Py1xdeTa3OI3oSI6TbCImf/3og==
-----END CERTIFICATE-----