Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33cd86c2-840e-4af2-8465-28f983d0d4cc.roa
File:                     33cd86c2-840e-4af2-8465-28f983d0d4cc.roa (raw, json)
Hash identifier:          OLipWIgs4+HB4FrB2j7cAiQ0YNi7b0E3/vm36tiLGBM=
Subject key identifier:   1D:3A:0A:E5:2A:5E:14:E7:2C:6B:C5:F5:63:9D:31:0C:28:F7:C4:D5
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       11F049FD1C1F2FEFFAA0337330657683C715045E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33cd86c2-840e-4af2-8465-28f983d0d4cc.roa
Signing time:             Wed 18 Dec 2024 00:00:00 +0000
ROA not before:           Wed 18 Dec 2024 00:00:00 +0000
ROA not after:            Wed 22 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da60:4000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f0:49:fd:1c:1f:2f:ef:fa:a0:33:73:30:65:76:83:c7:15:04:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 18 00:00:00 2024 GMT
            Not After : Jan 22 23:59:59 2025 GMT
        Subject: serialNumber=9a5e6a83aa3badaa222f5f3596e406b95982e914c2b37fb576926facb707721e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:1d:56:d2:56:9e:37:90:9a:e2:ff:2f:54:
                    be:eb:2f:98:c7:54:ee:00:c2:58:d4:d5:ba:6a:2c:
                    5b:8a:da:50:19:9f:0d:c2:7d:1b:d1:ff:59:ff:ad:
                    a4:f2:53:5b:81:0e:71:bf:44:24:cd:7d:cf:9c:a1:
                    93:37:d3:03:ca:a2:32:f1:14:90:54:80:db:b8:28:
                    1d:9c:26:58:48:d4:c5:c5:a4:36:d4:97:12:b5:d6:
                    f8:f7:08:fe:b0:30:c6:84:c6:cf:fd:9c:1d:0b:c1:
                    4e:f6:b7:13:37:ab:61:93:4b:17:b4:3c:16:d8:2a:
                    9f:c3:b9:38:13:53:74:be:25:f6:5b:f8:b7:f8:a9:
                    07:e3:74:96:93:c3:95:b7:cb:7b:30:89:65:99:1a:
                    74:16:8b:53:80:b6:e6:39:2e:4d:cb:ac:15:bd:a6:
                    13:e0:85:f8:32:9f:35:f4:15:09:b6:27:91:ea:c6:
                    b6:aa:e2:ce:49:0d:04:d5:24:5a:a0:55:1c:4e:e0:
                    40:83:91:5d:4b:c7:d5:e4:09:59:44:a6:d6:78:84:
                    63:4d:cc:50:79:e7:95:f2:e2:75:5a:d5:1c:bd:2d:
                    20:b6:d9:c9:f9:84:38:59:b4:18:f7:17:c9:c1:13:
                    35:ea:bb:c1:2a:40:2b:61:42:dd:4c:4f:13:63:5e:
                    8c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3A:0A:E5:2A:5E:14:E7:2C:6B:C5:F5:63:9D:31:0C:28:F7:C4:D5
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33cd86c2-840e-4af2-8465-28f983d0d4cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da60:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:03:2c:aa:fc:bf:e8:14:93:61:46:c2:53:c4:e4:22:24:a6:
         0a:48:fc:a7:4f:bd:74:d0:88:10:63:d7:ad:2f:52:aa:19:ce:
         b4:0e:43:e4:b6:48:e8:df:1f:2a:41:94:50:7f:73:7f:53:ab:
         80:bd:dd:a8:91:c7:fe:80:07:51:ce:66:4d:ec:c5:9d:80:b6:
         bc:dc:9c:a5:6e:fb:4b:09:ef:db:0c:cf:4f:de:63:ca:c5:d5:
         11:7e:41:73:f8:a6:11:f7:51:28:a1:67:69:7b:75:14:68:71:
         e2:73:1b:eb:e2:74:85:12:5b:b3:a2:a2:83:f7:f6:21:d9:bf:
         9e:f9:56:96:9c:de:eb:f5:68:30:20:65:51:f5:84:01:6b:70:
         07:59:a5:8c:34:05:2c:41:17:a7:27:ab:35:3a:8f:d3:ec:be:
         b9:82:ff:c2:a0:94:65:29:89:91:4c:13:2a:45:5a:d6:d0:1d:
         2f:6a:93:b2:10:1c:38:95:3c:48:ad:c3:77:42:ac:25:64:52:
         a8:16:19:5b:73:36:0d:f2:76:b0:a4:6b:61:f2:03:21:6c:90:
         ca:9f:46:6e:69:bb:97:30:6b:0e:8d:f0:89:ec:41:b3:e0:6f:
         ad:cc:18:2a:f6:94:9e:86:22:63:a9:01:d6:f5:15:23:26:96:
         f5:76:7c:8a
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUEfBJ/RwfL+/6oDNzMGV2g8cVBF4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxODAwMDAwMFoX
DTI1MDEyMjIzNTk1OVowejFJMEcGA1UEBRNAOWE1ZTZhODNhYTNiYWRhYTIyMmY1
ZjM1OTZlNDA2Yjk1OTgyZTkxNGMyYjM3ZmI1NzY5MjZmYWNiNzA3NzIxZTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs24dVtJWnjeQmuL/L1S+6y+Yx1Tu
AMJY1NW6aixbitpQGZ8Nwn0b0f9Z/62k8lNbgQ5xv0QkzX3PnKGTN9MDyqIy8RSQ
VIDbuCgdnCZYSNTFxaQ21JcStdb49wj+sDDGhMbP/ZwdC8FO9rcTN6thk0sXtDwW
2Cqfw7k4E1N0viX2W/i3+KkH43SWk8OVt8t7MIllmRp0FotTgLbmOS5Ny6wVvaYT
4IX4Mp819BUJtieR6sa2quLOSQ0E1SRaoFUcTuBAg5FdS8fV5AlZRKbWeIRjTcxQ
eeeV8uJ1WtUcvS0gttnJ+YQ4WbQY9xfJwRM16rvBKkArYULdTE8TY16MDQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFB06CuUqXhTnLGvF9WOdMQwo98TVMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzMzY2Q4NmMyLTg0MGUtNGFmMi04NDY1LTI4Zjk4M2QwZDRjYy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaYEAwDQYJKoZIhvcNAQELBQADggEBAE8DLKr8v+gUk2FGwlPE
5CIkpgpI/KdPvXTQiBBj160vUqoZzrQOQ+S2SOjfHypBlFB/c39Tq4C93aiRx/6A
B1HOZk3sxZ2AtrzcnKVu+0sJ79sMz0/eY8rF1RF+QXP4phH3USihZ2l7dRRoceJz
G+vidIUSW7OiooP39iHZv575Vpac3uv1aDAgZVH1hAFrcAdZpYw0BSxBF6cnqzU6
j9PsvrmC/8KglGUpiZFMEypFWtbQHS9qk7IQHDiVPEitw3dCrCVkUqgWGVtzNg3y
drCka2HyAyFskMqfRm5pu5cwaw6N8InsQbPgb63MGCr2lJ6GImOpAdb1FSMmlvV2
fIo=
-----END CERTIFICATE-----