Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0dbf2a86-54aa-456e-9647-5bcff133ae51.roa
File:                     0dbf2a86-54aa-456e-9647-5bcff133ae51.roa (raw, json)
Hash identifier:          IBDk74eeVkDm0lrqnplMvclXAYsfSixy9+9iU1mNA2Y=
Subject key identifier:   E7:6B:D6:5F:7E:D9:C4:85:6D:FB:9E:4B:71:0C:77:FC:1F:BB:75:66
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       459A59E70E93682EEF476074D96CD17F33A9979A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0dbf2a86-54aa-456e-9647-5bcff133ae51.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:e000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9a:59:e7:0e:93:68:2e:ef:47:60:74:d9:6c:d1:7f:33:a9:97:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=aac9a79733e3a1ff9263fb8f2e3ca8505986eade30d1f74a889e9131e19b9b38, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:89:ab:e7:7f:46:8a:86:85:20:52:ab:79:
                    0c:80:7e:5c:8f:c6:57:46:5d:85:c6:7c:b2:db:f2:
                    35:60:91:9d:33:7e:fe:c2:ea:bb:d6:db:bf:0c:bd:
                    3a:b9:f2:71:28:63:7b:8b:2c:eb:c1:8d:99:5f:97:
                    3e:38:d6:4e:e9:a9:50:15:dd:c7:51:04:b8:d0:c4:
                    c1:db:7e:00:3d:75:f7:f9:ca:67:bb:bb:18:c2:4b:
                    f0:a6:b3:ca:3e:3d:98:a7:6b:f7:dd:18:31:67:2c:
                    9e:2f:e4:15:76:17:6d:b2:e1:a8:9f:68:fa:71:fa:
                    5d:c3:80:b3:ed:c9:fe:6b:5a:f7:11:ab:a6:27:ff:
                    1f:cd:e7:00:75:bc:16:ee:3e:ca:d8:be:45:7a:31:
                    e8:c5:9b:db:64:5f:f0:d5:d8:c4:98:49:5f:0a:77:
                    d7:27:3e:85:c9:e7:ae:86:8a:ad:72:ad:dc:7b:b6:
                    0b:f9:fe:47:b3:e6:f7:40:78:94:fd:6f:44:05:5c:
                    73:81:cd:99:1a:0b:9f:a7:45:97:fd:f9:7f:cb:1c:
                    07:35:8a:92:51:4d:57:99:65:db:59:09:f9:8e:ff:
                    39:0d:1c:a0:12:b9:c3:bc:a3:d1:3a:ca:85:3e:27:
                    3a:9f:3f:de:87:50:ec:61:a1:08:d0:12:98:33:bd:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6B:D6:5F:7E:D9:C4:85:6D:FB:9E:4B:71:0C:77:FC:1F:BB:75:66
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0dbf2a86-54aa-456e-9647-5bcff133ae51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:93:69:3a:9a:2d:04:c8:07:f2:57:58:aa:1a:9e:a6:49:39:
         ba:7e:45:4a:04:f9:28:41:cc:89:15:48:7e:37:ba:1a:15:83:
         ad:c2:39:38:bd:28:49:e3:46:2b:9a:68:a5:f1:32:6d:d3:d9:
         f1:9e:e7:90:fd:37:d1:10:de:89:4a:1b:03:85:c3:68:ba:f1:
         f1:29:b9:fe:17:34:52:83:e4:8b:84:57:cf:8a:ea:9b:2f:07:
         f9:f6:9d:e7:0a:f2:55:32:40:17:4d:ab:ba:b2:fa:a2:ef:4a:
         d6:67:ca:9d:fd:f8:76:a9:07:c9:a9:94:d0:cb:c1:bf:65:18:
         60:c6:4d:49:d1:07:06:97:cd:a5:e9:a5:be:bc:62:ba:20:ae:
         65:78:2b:c2:ae:a9:de:89:b7:2e:3f:60:c8:f7:05:05:d1:90:
         2c:84:1c:dd:a0:3e:6b:14:17:13:b2:84:14:df:59:af:19:40:
         ea:b1:08:e5:4f:5c:bc:a0:25:bd:31:09:11:9d:b5:da:d7:7f:
         f7:e4:73:27:21:3c:10:15:85:0e:4e:b9:9c:2c:72:1f:2e:45:
         a7:c3:f8:44:a6:68:43:fc:24:ed:5f:d5:c9:59:b7:ae:e4:b6:
         68:49:ac:a0:de:cb:fd:e6:7f:a0:17:8f:dc:94:f6:6f:42:be:
         8a:2d:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----