Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa
File:                     0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa (raw, json)
Hash identifier:          mTQczD/KwfgEP7e+1v0TYgwpbeSmdyFR7l1974zlhBs=
Subject key identifier:   84:82:F2:D4:A4:09:7A:C7:C5:D9:01:6D:60:C2:78:63:AA:AF:9E:82
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1CDFE444DFF883B7B3E0ACA9ED13AEA0F9BD2CB8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:7000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:df:e4:44:df:f8:83:b7:b3:e0:ac:a9:ed:13:ae:a0:f9:bd:2c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=ee58f588faf4aae773453024e73aa5785de148766de3b16871f364b363d38a86, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:fc:7b:9a:7e:35:a4:15:3e:f9:25:86:bc:
                    93:8a:fd:2b:ba:15:1c:81:57:39:3d:67:0c:aa:93:
                    28:f8:f5:92:40:be:ca:fa:f0:ec:6a:4c:a5:70:c8:
                    b0:71:ea:fe:f0:9a:ee:2f:9c:2b:f6:12:1a:a1:45:
                    7d:f9:3b:ed:9f:3b:85:ac:66:c0:09:85:3a:7d:78:
                    ed:c4:48:35:27:ae:26:c4:1c:55:c2:04:12:61:f1:
                    41:a8:68:21:1b:e3:f3:f8:21:dd:80:cb:4b:fd:2f:
                    86:bb:c1:e4:b5:b4:4e:97:08:ab:31:ce:4a:c3:b1:
                    30:f4:af:7d:57:37:71:07:39:11:5e:1e:ed:07:74:
                    c1:6a:25:c4:5a:2a:ee:21:bd:56:46:02:4a:1a:72:
                    96:12:6d:d3:f6:99:eb:dd:6e:e0:de:e4:b4:1b:a6:
                    40:0d:e7:27:23:31:c6:59:83:31:a1:33:dc:80:38:
                    d2:02:81:de:ed:0d:9c:5b:11:5b:36:cf:f0:7d:16:
                    b4:4b:fa:3b:f1:61:f8:f2:a7:9c:ed:b5:3f:84:03:
                    d5:28:00:e5:9c:71:ca:ff:f3:20:3e:f6:6e:63:fe:
                    60:29:81:aa:54:f1:e4:70:78:9c:d8:ea:0b:69:11:
                    fa:4f:da:55:0c:16:ea:e1:30:8d:3f:2e:fe:1b:d6:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:82:F2:D4:A4:09:7A:C7:C5:D9:01:6D:60:C2:78:63:AA:AF:9E:82
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:2e:61:f3:e4:e8:f2:80:66:7b:ff:01:82:1e:dd:7b:2c:a9:
         a5:4e:8e:50:36:38:c1:ad:38:6d:07:da:c5:d1:73:0b:e0:8d:
         53:1c:45:12:c1:2f:29:47:48:ab:fe:14:89:5d:2d:c7:0a:f3:
         1b:dd:bb:43:3f:fa:91:50:6e:fc:38:6c:bb:82:f7:8f:b0:73:
         04:63:be:1a:e3:27:c1:f1:d3:a9:c9:a3:21:4e:b3:02:c0:c0:
         2a:b4:e4:6d:f4:06:2e:bb:e1:b5:02:74:86:98:51:a1:d4:e4:
         61:29:86:25:99:d4:d7:b9:04:25:ee:52:76:48:1f:76:28:59:
         9d:06:cb:9f:02:99:89:f4:be:bf:81:86:d3:f2:89:10:80:a9:
         bc:a2:78:35:23:e4:b2:5e:1b:7d:af:6d:5b:f5:a3:94:a2:29:
         ed:78:b0:77:db:44:c6:4a:47:87:97:a4:b7:3c:40:e1:77:e8:
         99:1a:12:a0:0a:ce:94:78:b3:07:ee:22:6a:e5:5e:28:d4:fd:
         d5:a8:c1:e0:ad:66:7f:97:70:be:32:64:5b:8f:4a:ee:28:e4:
         9b:51:d1:62:5f:6f:60:37:cd:81:29:40:24:50:a0:cc:ae:0f:
         4a:ba:8b:21:19:7d:a8:e2:c8:e3:68:20:33:14:61:e6:c2:78:
         ee:da:30:3c
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUHN/kRN/4g7ez4Kyp7ROuoPm9LLgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNjAwMDAwMFoX
DTI1MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAZWU1OGY1ODhmYWY0YWFlNzczNDUz
MDI0ZTczYWE1Nzg1ZGUxNDg3NjZkZTNiMTY4NzFmMzY0YjM2M2QzOGE4NjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVz8e5p+NaQVPvklhryTiv0ruhUc
gVc5PWcMqpMo+PWSQL7K+vDsakylcMiwcer+8JruL5wr9hIaoUV9+TvtnzuFrGbA
CYU6fXjtxEg1J64mxBxVwgQSYfFBqGghG+Pz+CHdgMtL/S+Gu8HktbROlwirMc5K
w7Ew9K99VzdxBzkRXh7tB3TBaiXEWiruIb1WRgJKGnKWEm3T9pnr3W7g3uS0G6ZA
DecnIzHGWYMxoTPcgDjSAoHe7Q2cWxFbNs/wfRa0S/o78WH48qec7bU/hAPVKADl
nHHK//MgPvZuY/5gKYGqVPHkcHic2OoLaRH6T9pVDBbq4TCNPy7+G9YjnwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFISC8tSkCXrHxdkBbWDCeGOqr56CMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzBiNTZlMjBmLTBjZDItNGYwYS05NWYzLWY5Y2U2ZDM2NzBlMi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaAHAwDQYJKoZIhvcNAQELBQADggEBAE4uYfPk6PKAZnv/AYIe
3XssqaVOjlA2OMGtOG0H2sXRcwvgjVMcRRLBLylHSKv+FIldLccK8xvdu0M/+pFQ
bvw4bLuC94+wcwRjvhrjJ8Hx06nJoyFOswLAwCq05G30Bi674bUCdIaYUaHU5GEp
hiWZ1Ne5BCXuUnZIH3YoWZ0Gy58CmYn0vr+BhtPyiRCAqbyieDUj5LJeG32vbVv1
o5SiKe14sHfbRMZKR4eXpLc8QOF36JkaEqAKzpR4swfuImrlXijU/dWoweCtZn+X
cL4yZFuPSu4o5JtR0WJfb2A3zYEpQCRQoMyuD0q6iyEZfajiyONoIDMUYebCeO7a
MDw=
-----END CERTIFICATE-----