Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/be310df3-32cf-48c2-8ba8-3eea9adfd706.roa
File:                     be310df3-32cf-48c2-8ba8-3eea9adfd706.roa (raw, json)
Hash identifier:          V2VDVVmUWRIvg5i7Cxy8iUGtqMJHK7yuQvLHOqFqPeQ=
Subject key identifier:   33:C4:F5:FA:0E:62:4B:BA:41:51:F2:92:61:F1:16:3D:5B:64:51:21
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       6A338F8FD00781E54A8C6FE019502808B4E5780B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/be310df3-32cf-48c2-8ba8-3eea9adfd706.roa
Signing time:             Wed 23 Sep 2026 14:47:27 +0000
ROA not before:           Wed 23 Sep 2026 14:47:27 +0000
ROA not after:            Tue 22 Dec 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:d00::/40 maxlen: 48
Validation:               Failed, certificate revoked on Wed 23 Sep 2026 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:33:8f:8f:d0:07:81:e5:4a:8c:6f:e0:19:50:28:08:b4:e5:78:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 23 14:47:27 2026 GMT
            Not After : Dec 22 23:59:59 2026 GMT
        Subject: serialNumber=fbc015d9e051f2f260d0f0bb8c09aefc4e288e26e469d409cf2b4e93a625e2cf, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:77:32:a3:16:8e:f5:e8:d2:66:ac:20:23:02:
                    a8:ea:d2:30:bd:cc:2d:a8:89:cb:8f:77:76:b4:59:
                    a5:fe:54:07:22:89:f9:eb:10:99:48:f7:de:86:1c:
                    fb:83:75:60:7b:b2:5e:7a:44:15:24:f8:07:59:1b:
                    2d:ad:ac:89:7a:5f:67:c0:e6:82:4c:3c:03:85:93:
                    45:13:c6:64:4f:96:10:0d:68:c0:2f:6b:27:e0:19:
                    11:99:ec:b1:6f:d8:fc:40:f2:3a:4a:1c:4f:2a:47:
                    34:d6:eb:89:28:ae:cf:79:4e:00:3e:43:e4:e9:a7:
                    dd:2b:3b:28:de:cc:c1:74:f6:95:e4:0f:12:8a:f5:
                    6b:5a:ee:2f:57:f3:10:1c:f2:ce:db:fc:ed:c0:c7:
                    e6:66:cb:b6:10:70:6f:84:9d:df:b8:e3:d0:9f:b7:
                    da:31:ce:80:04:c8:cd:ad:71:44:b4:67:ac:0e:4a:
                    e8:0a:55:59:3b:36:7c:ca:6d:7e:26:39:0e:30:da:
                    32:7f:f5:72:7b:d8:e0:6f:04:28:63:81:47:27:c4:
                    a2:e6:95:fd:83:09:38:27:b0:35:5b:8c:5e:ad:d9:
                    6a:a0:3b:43:d9:4a:05:f0:d7:35:ca:e2:9e:04:2e:
                    9d:98:f1:04:94:01:25:52:58:85:bd:07:e5:84:9b:
                    ac:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C4:F5:FA:0E:62:4B:BA:41:51:F2:92:61:F1:16:3D:5B:64:51:21
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/be310df3-32cf-48c2-8ba8-3eea9adfd706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:d7:4c:ac:1c:cf:93:d7:51:f2:a1:ba:d6:38:ca:db:23:0a:
         23:9a:33:8e:ef:bf:44:7f:20:21:32:56:66:dc:05:91:58:df:
         a4:3e:8f:03:1d:95:00:6d:05:59:7a:3c:5d:91:5e:68:3b:6f:
         e3:24:e8:49:b0:2f:7e:2d:6f:a7:a8:94:7c:00:4d:94:f3:fd:
         64:36:f9:57:ba:c2:7c:63:b6:a5:75:46:be:b8:9c:d5:52:29:
         04:29:f3:45:79:ae:fb:79:76:1b:52:91:5e:ee:df:07:26:4c:
         e3:89:44:60:d6:3d:1a:f6:a9:fd:21:e6:8f:69:00:86:1f:47:
         f8:94:05:96:88:8c:98:69:a2:ac:63:b2:b9:b7:a7:bc:fe:b7:
         95:3d:28:1c:26:77:6b:50:b3:9c:68:22:9e:b5:b8:77:90:29:
         0f:20:3c:3a:f3:4b:e3:68:37:93:c5:37:d7:34:29:78:f8:e0:
         b3:7a:bc:e8:03:48:97:34:aa:23:b8:b5:00:fb:83:5c:d8:80:
         39:e8:5e:0a:68:af:ac:ed:3e:4a:cb:67:d5:71:8e:5c:3d:ff:
         ea:0e:05:1f:c4:36:39:21:b7:cd:78:18:84:9a:84:5f:45:61:
         1e:6f:51:68:ad:f7:9a:60:fe:83:12:47:6f:fc:e6:79:07:bc:
         7b:50:e4:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----