Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/262f2f06-896e-4be7-ace8-94c09adb3b52.roa
File:                     262f2f06-896e-4be7-ace8-94c09adb3b52.roa (raw, json)
Hash identifier:          nKbGvucc0WONV6uXc/Z2dbNXXYRlEpA4g/vm5I4Yj7U=
Subject key identifier:   89:06:60:7F:2A:15:ED:4E:2C:86:E7:8D:F8:7D:FC:3E:77:10:2E:45
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       305902B0F195FF52BAA8BBD4ABB99EC064B6F525
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/262f2f06-896e-4be7-ace8-94c09adb3b52.roa
Signing time:             Fri 17 Jan 2025 00:00:00 +0000
ROA not before:           Fri 17 Jan 2025 00:00:00 +0000
ROA not after:            Fri 21 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da1a:8000::/36 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:59:02:b0:f1:95:ff:52:ba:a8:bb:d4:ab:b9:9e:c0:64:b6:f5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 17 00:00:00 2025 GMT
            Not After : Feb 21 23:59:59 2025 GMT
        Subject: serialNumber=ea69e9069a0a0848fafa561c62b86b7847e7f5be74b6eb647031449b8b470cd8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:d9:60:01:6f:9d:65:93:04:33:7e:24:79:
                    88:4d:13:c2:36:c3:7a:f9:37:06:c0:0a:5c:6a:11:
                    96:03:c2:78:ca:70:a5:c7:8f:b1:86:eb:a9:23:4d:
                    5c:59:bf:e7:f3:41:0f:c7:65:ef:9d:ab:06:a4:32:
                    8b:1b:21:9a:ca:92:79:1a:68:c0:c4:26:85:ee:14:
                    62:2a:a8:ac:81:18:56:de:eb:d2:c0:47:a9:34:7f:
                    b9:99:8b:a0:62:79:c4:ae:de:e7:5e:f1:83:a5:0f:
                    50:7f:c3:af:34:36:fb:f4:46:b3:e2:25:f9:ae:d0:
                    a7:02:30:b9:df:23:61:72:46:8d:e0:fd:69:3d:1d:
                    1e:aa:65:0a:87:47:eb:31:df:b6:83:4d:7e:c9:eb:
                    81:9a:be:88:d4:35:d0:78:ab:cc:82:be:50:8c:1e:
                    6f:be:bb:23:98:02:fe:9c:34:ce:14:df:b2:a8:4e:
                    df:a3:85:b5:35:ca:55:ac:b2:6e:23:1e:77:d5:84:
                    89:b8:c7:36:2c:3f:ed:96:a7:a3:80:c3:50:42:51:
                    a3:7e:4f:e7:3a:e7:8e:96:fd:fa:9d:4c:06:f3:e7:
                    f7:19:d5:10:9d:51:99:34:62:63:96:bf:69:4b:c7:
                    73:5c:ac:bd:03:b9:06:18:66:c0:80:37:e8:fc:db:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:06:60:7F:2A:15:ED:4E:2C:86:E7:8D:F8:7D:FC:3E:77:10:2E:45
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/262f2f06-896e-4be7-ace8-94c09adb3b52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da1a:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         46:54:24:8e:a9:62:37:7d:94:e6:d1:a4:33:81:75:62:7a:3a:
         39:04:1f:fa:39:98:e2:12:b7:80:e0:3d:dc:a5:6b:74:a7:81:
         18:d4:cd:2d:b3:62:17:17:f7:8e:59:46:ee:0f:b5:a1:ab:4e:
         50:35:67:dc:8a:f8:be:b0:7d:33:ed:92:6f:4f:a4:7b:17:d8:
         e4:12:64:0d:84:0a:9d:45:8f:93:db:44:99:4a:39:94:cc:1c:
         0e:c6:06:30:9e:e7:30:de:84:e2:d3:87:e4:64:a1:3b:ec:c1:
         13:5a:5f:c1:82:0a:78:7c:35:d8:e2:70:bf:7b:21:31:64:ea:
         3e:13:37:6f:b3:cb:64:9a:07:88:57:3b:66:81:c8:c0:97:c6:
         34:a0:b3:1e:c0:fa:cb:11:25:4d:7f:48:99:c7:1e:d3:e4:40:
         df:66:ab:5e:07:dd:1e:ce:65:90:65:71:7d:5e:b7:32:7e:4c:
         f9:36:df:74:d1:39:f6:56:57:2e:cd:af:f5:b8:00:18:83:e0:
         e7:f0:e2:51:d9:dd:a7:e3:27:57:cd:4c:28:33:da:11:0e:9e:
         af:c2:a3:d5:a6:2e:19:fd:ba:4e:28:87:4c:9c:39:47:a7:49:
         72:41:45:46:79:37:89:44:7a:e1:7d:30:fd:ff:1a:93:77:c5:
         c6:cc:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----