Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/22bbd4e8-490d-4260-b096-c7c178642330.roa
File:                     22bbd4e8-490d-4260-b096-c7c178642330.roa (raw, json)
Hash identifier:          ag3uCk2h8finE7SK1kVs5PoG3mnEYC14koSpb/d+JcY=
Subject key identifier:   35:5C:76:BB:43:C1:AF:49:AA:85:67:70:58:A1:E1:3F:B8:4D:A9:66
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       673101633649A169F17D41E595CB5A589641C223
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/22bbd4e8-490d-4260-b096-c7c178642330.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da32:c800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:31:01:63:36:49:a1:69:f1:7d:41:e5:95:cb:5a:58:96:41:c2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=a379a3985ae8d88ea43801ee23fc6f97568fcbcc95ed9dd0c555eb2aa13af2ba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:7b:61:72:96:da:b2:40:fb:31:1b:21:a4:
                    3e:ec:98:c0:4a:d3:c7:f5:2a:46:89:b6:57:95:b0:
                    07:dc:3d:1a:4d:5e:ae:65:0c:0e:4e:c3:44:be:64:
                    00:13:91:11:5d:32:f0:92:7c:09:c5:eb:c4:f3:ca:
                    21:19:53:93:8e:ce:6b:1f:25:c9:f7:d0:8c:cd:22:
                    d0:ec:2b:31:c7:56:e8:73:8c:6f:81:0a:e3:df:0e:
                    a9:27:29:15:a3:b4:89:f4:1d:d9:49:51:70:19:b0:
                    c5:83:d1:b2:e8:44:cb:6d:d0:56:ae:a7:47:ef:4c:
                    d0:23:ed:96:5c:33:23:25:77:8b:db:a6:e1:e9:30:
                    fe:0e:c8:cc:f2:b3:58:5d:a1:91:16:5a:6f:10:11:
                    fb:97:25:e6:3b:45:1a:cb:85:69:4d:89:75:7f:3a:
                    d6:3d:5f:ad:4d:ad:6e:7b:4b:03:c3:81:96:10:b0:
                    c9:47:05:58:a4:6c:1f:2f:7c:5d:47:fb:6c:a6:13:
                    05:07:1f:4c:c1:33:08:97:c1:43:bb:6b:c8:7a:87:
                    8e:40:72:28:25:ab:8b:4d:55:29:73:c8:2f:1a:29:
                    e3:1b:1e:fe:44:01:b4:81:43:af:3e:a7:b5:41:74:
                    37:49:61:7d:8f:17:b6:df:49:66:47:77:ef:dd:d4:
                    0f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5C:76:BB:43:C1:AF:49:AA:85:67:70:58:A1:E1:3F:B8:4D:A9:66
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/22bbd4e8-490d-4260-b096-c7c178642330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da32:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:2d:36:bd:88:2a:59:50:19:d7:cf:47:a0:45:1c:0c:14:7a:
         e1:bb:f5:0b:36:a7:af:c1:a1:0c:b2:05:65:f0:06:96:85:e9:
         23:6c:50:89:db:9f:8a:e1:96:5f:82:79:89:a3:82:b2:68:fa:
         6c:41:99:02:d3:7a:91:9f:31:62:8a:f6:59:e0:a3:73:4a:4f:
         a9:d9:87:98:27:7e:46:0c:e5:37:17:78:11:fc:50:da:7a:98:
         e3:59:75:8a:64:1d:75:8f:a4:04:ac:3c:e0:f3:70:67:a6:28:
         fb:ca:4f:14:db:f6:cd:d8:94:2f:d4:7d:1b:73:67:11:fc:38:
         e4:f7:40:94:15:39:db:4b:b9:61:2d:78:5e:21:27:c6:f8:d1:
         f1:91:e6:08:34:7e:77:a8:ad:c8:db:94:15:e8:f6:f7:97:92:
         bb:98:97:b3:46:3e:b5:f4:b2:9b:25:e4:47:ba:8e:99:54:35:
         10:03:ba:ae:e6:97:45:a0:b6:ad:0d:31:b4:96:de:5b:c7:16:
         0d:61:cd:3b:15:12:ef:e3:ad:be:d3:18:e1:27:43:79:b5:35:
         5a:70:e8:d1:35:31:2b:36:68:78:74:62:6a:b7:31:45:9e:b5:
         13:71:e9:49:e4:1c:ec:33:d2:29:21:bc:43:ae:fd:fc:bf:b4:
         7f:eb:9b:94
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUZzEBYzZJoWnxfUHllctaWJZBwiMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIzMDAwMDAwMFoX
DTI1MDIwMzIzNTk1OVowejFJMEcGA1UEBRNAYTM3OWEzOTg1YWU4ZDg4ZWE0Mzgw
MWVlMjNmYzZmOTc1NjhmY2JjYzk1ZWQ5ZGQwYzU1NWViMmFhMTNhZjJiYTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Z7YXKW2rJA+zEbIaQ+7JjAStPH
9SpGibZXlbAH3D0aTV6uZQwOTsNEvmQAE5ERXTLwknwJxevE88ohGVOTjs5rHyXJ
99CMzSLQ7Csxx1boc4xvgQrj3w6pJykVo7SJ9B3ZSVFwGbDFg9Gy6ETLbdBWrqdH
70zQI+2WXDMjJXeL26bh6TD+DsjM8rNYXaGRFlpvEBH7lyXmO0Uay4VpTYl1fzrW
PV+tTa1ue0sDw4GWELDJRwVYpGwfL3xdR/tsphMFBx9MwTMIl8FDu2vIeoeOQHIo
JauLTVUpc8gvGinjGx7+RAG0gUOvPqe1QXQ3SWF9jxe230lmR3fv3dQPewIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFDVcdrtDwa9JqoVncFih4T+4TalmMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzIyYmJkNGU4LTQ5MGQtNDI2MC1iMDk2LWM3YzE3ODY0MjMzMC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaMsgwDQYJKoZIhvcNAQELBQADggEBAHItNr2IKllQGdfPR6BF
HAwUeuG79Qs2p6/BoQyyBWXwBpaF6SNsUInbn4rhll+CeYmjgrJo+mxBmQLTepGf
MWKK9lngo3NKT6nZh5gnfkYM5TcXeBH8UNp6mONZdYpkHXWPpASsPODzcGemKPvK
TxTb9s3YlC/UfRtzZxH8OOT3QJQVOdtLuWEteF4hJ8b40fGR5gg0fneorcjblBXo
9veXkruYl7NGPrX0spsl5Ee6jplUNRADuq7ml0Wgtq0NMbSW3lvHFg1hzTsVEu/j
rb7TGOEnQ3m1NVpw6NE1MSs2aHh0Ymq3MUWetRNx6UnkHOwz0ikhvEOu/fy/tH/r
m5Q=
-----END CERTIFICATE-----