Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2914d90c-c2d6-4e4c-b0a6-027070c25386.roa
File:                     2914d90c-c2d6-4e4c-b0a6-027070c25386.roa (raw, json)
Hash identifier:          BHPwzsrAGkjwU0ZHySr4STYc8aOymyJAY2u5VQ/Gt3o=
Subject key identifier:   4D:42:26:4E:33:C0:7A:8F:41:3F:A3:4F:8D:53:F3:42:90:20:CF:89
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4C12540ECA5EB813438C46C5D42626FD5DF9B79E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2914d90c-c2d6-4e4c-b0a6-027070c25386.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da60:1040::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:12:54:0e:ca:5e:b8:13:43:8c:46:c5:d4:26:26:fd:5d:f9:b7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=b9a806a623783fb4191d858233ded6abe1dac4959e8763bd5fcdc6c5daf9a868, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:d4:b0:68:87:40:d8:3a:54:8f:17:e8:77:
                    c6:be:4c:79:04:02:67:0c:94:4e:9b:92:c3:6e:82:
                    87:06:07:7d:ad:19:32:99:8c:cd:eb:14:b0:ca:ca:
                    4f:d7:19:61:b8:60:b9:10:72:e4:b3:47:96:bc:d1:
                    1a:40:43:a1:09:ad:cf:2d:6c:67:e5:59:73:a5:13:
                    19:47:02:66:7c:04:40:b7:b3:a6:17:9e:7c:98:b9:
                    53:fa:71:07:39:8b:5d:ea:5a:8f:9b:97:bf:23:7c:
                    a2:f4:48:95:84:10:97:54:dc:3f:a1:48:ea:b2:5a:
                    36:50:b4:2b:dc:eb:7b:5a:d3:27:28:a3:97:6d:4d:
                    49:e9:5b:9d:ea:f1:f6:a4:95:05:9e:5f:73:a1:6e:
                    1a:4f:df:d6:52:5b:05:8c:c4:f6:61:35:1d:53:b8:
                    3d:30:58:26:ba:b9:46:f8:a0:fb:8d:7a:94:c0:a4:
                    a4:b4:20:84:ab:d0:ba:25:ed:48:40:d9:8f:12:a3:
                    a4:22:15:e1:a5:92:d6:c3:f0:ab:2b:72:d3:27:70:
                    ed:8c:7a:03:87:66:98:6b:c3:be:d3:17:9a:b8:88:
                    d1:90:1c:8a:3e:7b:75:7e:1a:fc:87:3f:95:f5:98:
                    ab:4e:7b:b1:bc:f2:39:8a:b2:63:15:14:13:26:3e:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:42:26:4E:33:C0:7A:8F:41:3F:A3:4F:8D:53:F3:42:90:20:CF:89
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2914d90c-c2d6-4e4c-b0a6-027070c25386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da60:1040::/46

    Signature Algorithm: sha256WithRSAEncryption
         96:42:cd:03:25:1a:b9:6b:1f:7f:43:f9:76:8e:a6:52:ca:17:
         03:c8:ca:24:03:d2:d9:54:99:de:19:50:2d:b0:5d:e0:6a:af:
         3e:96:07:ad:4e:66:12:fa:c8:de:4c:bb:69:cc:9d:37:b4:ec:
         b6:21:3b:6c:d8:0f:7d:cb:49:5a:50:e5:51:0b:0f:80:ef:c9:
         f6:c2:32:4d:14:f6:db:6b:60:a0:89:32:42:8b:0c:5f:d8:a2:
         8d:67:3f:af:0a:97:08:44:0c:0a:60:00:b0:4b:9b:d8:aa:0d:
         48:cf:29:0f:71:31:90:c2:59:b3:87:d4:7e:3c:a0:b6:47:6d:
         e7:9c:69:df:9b:94:c1:ca:0f:6d:f6:ac:11:f7:8c:89:6e:02:
         cf:e9:08:5d:74:ae:d2:1f:45:9d:47:72:e0:6b:90:a3:c1:6d:
         ad:4a:a5:37:cd:89:56:3d:87:f4:14:b2:6b:27:1c:72:ff:5b:
         3a:4a:e2:91:01:b9:88:54:ed:5e:71:29:f9:10:10:7d:42:96:
         33:7a:94:c6:03:8a:21:14:d8:47:6b:6f:59:5c:49:70:6b:33:
         fc:be:20:d9:84:15:8d:d3:41:46:3e:c7:fa:56:8f:fa:79:80:
         96:23:fd:56:a5:67:03:f8:e8:c0:ac:3f:a6:94:cb:5e:53:04:
         98:a2:62:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----