Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/12fe5822-860f-46e5-8a61-85b756d3cf31.roa
File:                     12fe5822-860f-46e5-8a61-85b756d3cf31.roa (raw, json)
Hash identifier:          R3Trxy3B8OZLEgxKAsmx+klxU7P8yfQAo21Fkocpjbc=
Subject key identifier:   55:DF:2C:FB:55:98:3E:FF:2C:17:05:89:9E:4C:ED:D7:0A:1C:85:3F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2C3732C961A271F0B16416B6923DF934A0593C51
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/12fe5822-860f-46e5-8a61-85b756d3cf31.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da36:9000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:37:32:c9:61:a2:71:f0:b1:64:16:b6:92:3d:f9:34:a0:59:3c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=fb03175bc209300d1466c2ea1ce9b4f4a31538a0b453e0cc6ddaf956ab93c416, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7c:d6:ce:f1:09:24:0a:5b:ad:68:60:db:91:
                    dc:b8:8a:2b:5f:9e:72:2a:27:8d:32:4f:ac:16:f8:
                    71:5e:01:b8:57:ac:ea:15:6a:24:f1:e7:e2:f8:47:
                    ce:88:13:b0:72:66:3e:ba:5e:2e:32:07:96:8d:72:
                    81:b8:b7:5f:fd:c0:31:61:82:e4:27:9f:83:b7:35:
                    2a:3b:32:6f:84:dd:25:37:db:8a:dc:fc:8b:24:9d:
                    f1:6c:0c:24:75:32:c9:6c:55:28:6d:48:8f:ea:27:
                    8c:d6:eb:74:c3:72:64:f2:32:47:da:a3:83:85:1a:
                    62:60:3c:d6:52:3b:57:db:5e:d1:f9:a1:14:a3:e0:
                    d4:40:98:ae:78:9e:1b:cf:65:ad:3a:d4:c8:8c:b1:
                    b1:b3:9c:29:70:32:c1:e4:d9:90:ad:0f:60:46:ca:
                    b2:a8:6f:80:e4:79:21:c9:d1:d2:cf:79:d1:a5:01:
                    f3:86:fd:fa:ff:33:39:fe:95:a7:d5:c5:e5:2d:15:
                    92:cc:05:55:b8:0a:ad:58:15:71:e3:aa:b8:5e:48:
                    01:44:9e:e6:7b:b3:f4:b6:d7:e4:23:6a:bd:31:1e:
                    55:57:d6:48:94:a0:19:50:af:c8:ea:e4:97:46:db:
                    9f:20:f6:2b:0d:fe:ed:d6:86:4b:27:d6:79:0b:f2:
                    e4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DF:2C:FB:55:98:3E:FF:2C:17:05:89:9E:4C:ED:D7:0A:1C:85:3F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/12fe5822-860f-46e5-8a61-85b756d3cf31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da36:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:7a:cc:a4:42:e5:88:69:80:cb:65:3b:57:7a:64:b0:5f:00:
         5e:fe:21:e3:37:c2:af:e1:17:0d:5d:8e:6e:b5:75:db:92:5b:
         10:73:50:0d:de:bc:83:c6:f9:d7:11:9a:d6:85:78:d4:fe:4c:
         6a:e8:4c:75:63:8f:d1:3e:3f:a7:f8:b2:0c:70:2c:95:aa:e5:
         d9:77:05:78:96:49:e6:f0:6d:93:4b:60:b8:7f:66:d0:4d:e5:
         f1:88:6e:09:ae:91:7b:53:cb:12:c2:43:df:cf:f7:f8:23:7f:
         94:81:8d:7a:1f:6d:89:86:fd:22:4e:25:86:07:db:71:f7:c2:
         78:7b:bd:d8:61:2f:49:01:44:52:e0:4d:6c:6c:10:69:4c:52:
         c2:5e:8f:48:02:25:1c:78:16:cc:79:7f:04:02:48:f5:27:ba:
         69:90:47:35:7d:1f:4f:25:50:00:97:5c:d6:70:71:9c:31:0e:
         39:cd:aa:40:e4:bd:00:81:f4:31:f2:c8:67:d3:29:10:30:37:
         c5:87:ee:52:15:a6:5f:8f:34:2b:ba:82:2d:3b:8b:32:34:a1:
         da:3d:c9:da:a3:df:12:53:14:55:46:92:88:96:d2:96:f1:3b:
         53:55:96:88:30:3b:13:6f:24:08:0d:9f:ab:83:0f:cd:80:f1:
         a5:b5:cd:7a
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIULDcyyWGicfCxZBa2kj35NKBZPFEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNjAwMDAwMFoX
DTI1MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAZmIwMzE3NWJjMjA5MzAwZDE0NjZj
MmVhMWNlOWI0ZjRhMzE1MzhhMGI0NTNlMGNjNmRkYWY5NTZhYjkzYzQxNjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93zWzvEJJApbrWhg25HcuIorX55y
KieNMk+sFvhxXgG4V6zqFWok8efi+EfOiBOwcmY+ul4uMgeWjXKBuLdf/cAxYYLk
J5+DtzUqOzJvhN0lN9uK3PyLJJ3xbAwkdTLJbFUobUiP6ieM1ut0w3Jk8jJH2qOD
hRpiYDzWUjtX217R+aEUo+DUQJiueJ4bz2WtOtTIjLGxs5wpcDLB5NmQrQ9gRsqy
qG+A5HkhydHSz3nRpQHzhv36/zM5/pWn1cXlLRWSzAVVuAqtWBVx46q4XkgBRJ7m
e7P0ttfkI2q9MR5VV9ZIlKAZUK/I6uSXRtufIPYrDf7t1oZLJ9Z5C/LkWQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFFXfLPtVmD7/LBcFiZ5M7dcKHIU/MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzEyZmU1ODIyLTg2MGYtNDZlNS04YTYxLTg1Yjc1NmQzY2YzMS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaNpAwDQYJKoZIhvcNAQELBQADggEBACp6zKRC5YhpgMtlO1d6
ZLBfAF7+IeM3wq/hFw1djm61dduSWxBzUA3evIPG+dcRmtaFeNT+TGroTHVjj9E+
P6f4sgxwLJWq5dl3BXiWSebwbZNLYLh/ZtBN5fGIbgmukXtTyxLCQ9/P9/gjf5SB
jXofbYmG/SJOJYYH23H3wnh7vdhhL0kBRFLgTWxsEGlMUsJej0gCJRx4Fsx5fwQC
SPUnummQRzV9H08lUACXXNZwcZwxDjnNqkDkvQCB9DHyyGfTKRAwN8WH7lIVpl+P
NCu6gi07izI0odo9ydqj3xJTFFVGkoiW0pbxO1NVlogwOxNvJAgNn6uDD82A8aW1
zXo=
-----END CERTIFICATE-----