Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/66da1d1a-cda0-4937-8be9-8f3635519543.roa
File:                     66da1d1a-cda0-4937-8be9-8f3635519543.roa (raw, json)
Hash identifier:          FbYEAgyQtUHZKlSrvpYm8MzUwc/bcbdNQPah4ansAUI=
Subject key identifier:   CA:0C:F4:C4:78:74:DA:EC:8F:2C:23:AF:78:57:66:10:57:CA:0F:B1
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7D5021823109F78AE6D8B0AB6A7A56564F4BD382
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/66da1d1a-cda0-4937-8be9-8f3635519543.roa
Signing time:             Sat 23 Aug 2025 18:41:31 +0000
ROA not before:           Sat 23 Aug 2025 18:41:31 +0000
ROA not after:            Sat 27 Sep 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:d00::/40 maxlen: 48
Validation:               Failed, certificate revoked on Sat 23 Aug 2025 19:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:50:21:82:31:09:f7:8a:e6:d8:b0:ab:6a:7a:56:56:4f:4b:d3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug 23 18:41:31 2025 GMT
            Not After : Sep 27 23:59:59 2025 GMT
        Subject: serialNumber=5b02d6d662adee99a10e06b994ac0d31f4c20f84207d001fbae8f32c21c73ad5, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:cc:5d:5a:28:f3:3c:e8:5e:3f:5d:42:02:
                    b1:27:20:f9:29:13:a7:e3:22:e0:6d:63:5b:64:95:
                    fa:e7:e9:a4:31:73:aa:d3:af:f3:b7:0a:4e:13:d6:
                    fd:0f:87:b9:0d:17:23:e9:96:a7:5a:ca:5e:93:88:
                    17:3f:a7:10:73:43:27:70:b2:66:a2:dd:9b:17:ab:
                    c1:21:89:c6:a3:26:c9:81:f2:a7:88:06:11:cc:3d:
                    f6:37:d2:42:e6:81:34:fa:a7:e8:69:86:c5:75:99:
                    a6:58:f0:7c:ef:fa:0e:fc:9e:37:cb:06:e6:58:8d:
                    51:da:8d:6c:22:2f:ff:f5:6a:28:80:33:0b:31:79:
                    ce:5c:a8:a1:8b:1b:10:ed:c2:0e:1e:53:d4:40:31:
                    df:19:8d:d8:a9:52:da:87:21:da:51:30:a9:a8:55:
                    ab:90:80:97:27:87:32:64:a6:eb:59:ac:b7:5e:e3:
                    53:7a:5e:ab:de:e1:09:92:bf:97:5f:80:cf:0c:78:
                    01:8b:e9:88:28:8f:70:06:35:fb:e1:87:18:6b:ad:
                    a5:0f:58:c7:a0:b4:12:79:80:ec:00:bd:d0:b5:b3:
                    7e:c9:39:66:1a:bc:d4:49:a1:08:d1:51:ca:9b:c0:
                    c1:99:d1:29:88:4b:2e:8d:5b:94:83:d4:15:26:d4:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0C:F4:C4:78:74:DA:EC:8F:2C:23:AF:78:57:66:10:57:CA:0F:B1
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/66da1d1a-cda0-4937-8be9-8f3635519543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:15:d6:56:17:db:41:45:a9:d2:c0:ff:82:7c:02:f1:97:66:
         e0:81:6c:5d:a5:64:cd:f4:26:4c:9f:32:4c:13:73:38:1a:13:
         79:26:a2:01:9e:b7:15:5c:5e:be:ed:79:8e:38:92:e6:d2:2a:
         58:2a:7f:1d:53:6c:8a:ff:97:77:45:93:4c:52:67:30:80:75:
         f1:f6:25:c8:46:7d:18:a0:52:fd:6f:8e:25:2e:44:77:d4:c3:
         a4:5d:b4:04:46:ce:22:c7:f7:44:33:a0:db:3e:7c:8b:3c:2b:
         0a:8c:93:a3:0c:45:4e:86:01:8c:bf:35:e2:fc:13:7d:42:b3:
         4d:57:6f:ce:87:40:c6:38:1d:1e:21:e2:2a:26:4b:78:cb:9a:
         22:8e:c7:76:1a:90:79:43:6a:67:4b:18:80:59:d6:5e:f9:30:
         d6:03:1b:fe:1e:4a:45:f0:04:e7:f3:eb:e4:68:19:07:9d:1c:
         25:ee:9a:2e:10:28:c7:88:3a:0d:ec:75:26:bb:a7:67:8a:60:
         51:49:20:a8:1f:b2:cc:e1:5b:79:f4:5f:fb:f1:52:3d:40:df:
         c4:0a:20:c1:64:01:4e:64:71:3f:f3:49:5f:c4:d0:f8:d7:7b:
         a2:2a:bb:a1:2a:57:c7:48:f3:8d:9f:1b:33:39:63:26:c3:da:
         21:0d:b3:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----