Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30e46394-f459-4b4f-8184-f02aaf49bad5.roa
File:                     30e46394-f459-4b4f-8184-f02aaf49bad5.roa (raw, json)
Hash identifier:          HzbXHtYYXFLuf8R2hCJF729byGQo20ABVi9pmhql+AQ=
Subject key identifier:   E8:CA:3B:EB:8E:D9:13:AE:10:15:34:E7:09:10:D8:39:ED:69:6D:27
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0DC3A7ED05755A4877FACE03A39C71DE2EA8C5EE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30e46394-f459-4b4f-8184-f02aaf49bad5.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da60:6040::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c3:a7:ed:05:75:5a:48:77:fa:ce:03:a3:9c:71:de:2e:a8:c5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=1a047d7b33e0108042ee6f3582d9e633f183f6d65bfebc490537e02ff06db9d7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:14:34:f0:0e:76:01:a2:cc:5a:3e:03:e9:de:
                    b6:29:b8:85:05:ae:7c:1f:9b:62:6d:88:0d:6d:47:
                    a7:98:dc:51:83:6f:cb:43:c3:b2:51:14:92:0a:b5:
                    77:4d:f3:90:ba:9b:d4:eb:79:63:d7:27:40:89:b4:
                    ff:2b:bb:16:4a:0e:1d:df:d2:93:4e:b6:5d:eb:16:
                    0b:4c:1b:2d:96:5d:04:4f:9d:74:7d:a9:cd:09:f0:
                    16:c3:ec:c1:ac:41:67:27:8d:80:be:29:f5:f9:ba:
                    af:10:e0:db:e6:38:13:22:ac:79:2a:fb:7d:d0:eb:
                    8f:62:40:ef:f6:a4:0a:0c:6d:52:f7:0b:32:29:62:
                    23:f5:91:e0:87:a7:e6:56:1b:36:3c:23:35:75:f5:
                    ed:f5:f3:d3:2d:89:1a:32:09:1d:12:3d:42:5e:45:
                    fd:1b:09:f5:31:88:73:da:4f:f9:b7:7f:52:e1:ed:
                    26:b6:64:b8:11:06:13:e3:81:b3:0e:65:ed:c1:14:
                    50:15:b8:2a:b0:35:e8:08:5a:3b:22:3c:c7:e0:57:
                    db:8f:4c:90:66:8f:bb:fd:5d:0a:df:8c:f7:b6:7b:
                    43:62:f6:a8:08:3a:0b:05:09:cd:f0:5f:23:ab:19:
                    00:08:08:ea:82:29:30:09:d9:e1:1a:3c:df:54:b7:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CA:3B:EB:8E:D9:13:AE:10:15:34:E7:09:10:D8:39:ED:69:6D:27
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30e46394-f459-4b4f-8184-f02aaf49bad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da60:6040::/46

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:74:ad:9d:fb:9f:c6:e2:6c:e3:5e:4b:ad:f5:46:99:6a:
         12:68:9a:7a:6a:d4:38:1f:62:3e:02:a7:11:06:19:34:9b:93:
         f8:36:cf:c9:e7:57:80:5e:69:15:a8:04:a7:61:30:79:c5:a1:
         df:13:82:1b:a2:f8:1c:9b:02:b9:f9:47:22:33:77:9a:b6:45:
         80:87:f5:5b:7c:8e:7b:2b:21:97:d2:d5:a6:15:ea:4a:e1:6b:
         fe:61:2f:5c:b4:58:08:0e:68:68:1b:a2:93:f7:64:33:9f:8b:
         19:0c:22:aa:80:17:60:43:b8:a0:b9:10:c3:0b:e1:04:81:3c:
         99:64:a9:a6:f3:78:52:64:81:de:f0:94:7e:5c:bf:ac:06:1d:
         83:a1:bb:da:1b:d2:37:4b:e9:08:b3:ec:55:aa:80:37:b4:0d:
         e9:bf:16:16:f0:ec:ac:97:7c:6f:bf:65:8e:a8:fe:64:c3:8c:
         47:d9:70:24:eb:4a:b6:70:57:af:dc:f8:7a:94:fe:6e:5c:cf:
         bb:1f:14:11:6e:f1:79:df:4c:02:ec:df:4e:13:ca:ee:42:08:
         cb:3a:5d:66:73:76:98:06:5d:a3:c4:26:14:e1:04:a8:a7:fe:
         23:a6:96:68:04:14:86:38:21:dd:dc:1d:5c:cb:1b:5f:20:57:
         88:93:be:50
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUDcOn7QV1Wkh3+s4Do5xx3i6oxe4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAMWEwNDdkN2IzM2UwMTA4MDQyZWU2
ZjM1ODJkOWU2MzNmMTgzZjZkNjViZmViYzQ5MDUzN2UwMmZmMDZkYjlkNzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhQ08A52AaLMWj4D6d62KbiFBa58
H5tibYgNbUenmNxRg2/LQ8OyURSSCrV3TfOQupvU63lj1ydAibT/K7sWSg4d39KT
TrZd6xYLTBstll0ET510fanNCfAWw+zBrEFnJ42Avin1+bqvEODb5jgTIqx5Kvt9
0OuPYkDv9qQKDG1S9wsyKWIj9ZHgh6fmVhs2PCM1dfXt9fPTLYkaMgkdEj1CXkX9
Gwn1MYhz2k/5t39S4e0mtmS4EQYT44GzDmXtwRRQFbgqsDXoCFo7IjzH4Ffbj0yQ
Zo+7/V0K34z3tntDYvaoCDoLBQnN8F8jqxkACAjqgikwCdnhGjzfVLcjMwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFOjKO+uO2ROuEBU05wkQ2DntaW0nMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzMwZTQ2Mzk0LWY0NTktNGI0Zi04MTg0LWYwMmFhZjQ5YmFkNS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAbaYGBAMA0GCSqGSIb3DQEBCwUAA4IBAQA7FnStnfufxuJs415L
rfVGmWoSaJp6atQ4H2I+AqcRBhk0m5P4Ns/J51eAXmkVqASnYTB5xaHfE4Ibovgc
mwK5+UciM3eatkWAh/VbfI57KyGX0tWmFepK4Wv+YS9ctFgIDmhoG6KT92Qzn4sZ
DCKqgBdgQ7iguRDDC+EEgTyZZKmm83hSZIHe8JR+XL+sBh2DobvaG9I3S+kIs+xV
qoA3tA3pvxYW8Oysl3xvv2WOqP5kw4xH2XAk60q2cFev3Ph6lP5uXM+7HxQRbvF5
30wC7N9OE8ruQgjLOl1mc3aYBl2jxCYU4QSop/4jppZoBBSGOCHd3B1cyxtfIFeI
k75Q
-----END CERTIFICATE-----