Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45b8187c-dace-4e33-8da2-63d784f9353b.roa
File:                     45b8187c-dace-4e33-8da2-63d784f9353b.roa (raw, json)
Hash identifier:          WhBlj4TgB1dyNY6udEIZ2dxuTfeThLaqLDYkOyFh9mw=
Subject key identifier:   5F:FB:B8:E8:93:58:AD:C9:00:4E:F1:0C:76:B0:8C:0D:5A:89:C2:06
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1C88177911A962E91D24003CD9453ACBFF9F3F93
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45b8187c-dace-4e33-8da2-63d784f9353b.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da32:7000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:88:17:79:11:a9:62:e9:1d:24:00:3c:d9:45:3a:cb:ff:9f:3f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=1bcb184947a7225c1bfe87cbe3f8bff1e3d868d98026b62ba1523cd6a7ca50bf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:d1:e2:23:00:a8:40:ae:84:32:d5:5e:a5:
                    8d:ba:41:e7:b7:0d:c2:d9:16:1e:e7:54:53:2d:5c:
                    08:97:9e:ed:79:e2:76:23:f9:ed:3c:30:18:64:e2:
                    8e:52:29:91:84:ba:41:c9:1c:3e:86:15:88:e6:86:
                    59:8a:89:67:13:ba:74:b4:06:a8:fd:59:1d:bb:f7:
                    f8:0d:94:11:42:ff:7f:46:ef:49:25:48:16:f7:ae:
                    61:96:1c:c1:53:0e:ec:22:57:c8:f0:10:80:4e:63:
                    31:b9:fe:06:8e:5b:71:4c:7d:bd:95:7f:8d:7a:c1:
                    76:17:12:70:d4:f9:89:9b:dd:21:76:c5:87:54:4a:
                    ca:16:b5:28:f5:8a:0e:32:45:f7:50:cb:15:cb:3e:
                    fc:b1:d4:c5:88:ec:0e:a0:be:5e:5b:47:d8:5f:97:
                    14:92:b3:3e:86:e7:b2:7f:ea:94:a5:04:c0:ca:33:
                    6e:12:2e:d0:73:54:52:54:5e:d6:d0:1b:cd:a6:81:
                    ab:86:43:ed:58:af:53:27:37:a0:0f:e6:1e:74:3b:
                    b5:a7:4f:13:d4:64:70:9b:96:9c:d4:7c:f5:9c:2c:
                    59:5b:e9:00:e2:53:97:04:53:d0:1c:5b:2c:ae:bd:
                    b0:ca:83:29:fd:86:3f:9a:4d:fa:71:32:18:96:38:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FB:B8:E8:93:58:AD:C9:00:4E:F1:0C:76:B0:8C:0D:5A:89:C2:06
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45b8187c-dace-4e33-8da2-63d784f9353b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da32:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:90:9c:39:1b:49:ff:d8:df:49:13:d5:b0:da:4b:20:28:41:
         5f:ee:b0:e5:bd:38:e6:d1:15:fa:96:65:d7:3e:b9:7d:c1:14:
         18:29:63:e2:64:82:97:ee:30:5b:d1:d5:a5:4c:9d:93:9d:64:
         fe:53:37:97:27:c3:44:59:04:f7:e2:9c:3a:e3:db:1f:10:d4:
         98:f8:60:5f:d9:84:de:ce:a4:e0:f8:cc:b3:e0:7d:b7:6d:40:
         43:d5:b7:aa:b0:c1:6f:04:38:13:6c:46:94:af:cb:e3:6e:0a:
         7c:50:7b:a8:f3:a6:8e:93:fd:e9:bd:dc:24:8d:12:37:6f:98:
         04:82:c6:c0:35:67:32:41:07:5b:3e:bc:02:f6:1f:12:9f:cd:
         16:1d:77:95:06:ce:5f:53:c9:42:1b:86:b0:38:2c:dd:af:25:
         1d:80:04:1d:7e:5c:63:f2:80:5f:7a:5b:36:d3:86:06:94:e2:
         0c:f3:bc:1f:73:40:0c:58:6e:cb:f8:b0:d5:d2:69:5f:0d:06:
         2a:c0:f4:d7:1a:51:bb:cb:2b:c2:b1:0a:34:62:3b:5e:e2:f6:
         8e:00:ed:89:38:1d:c4:26:a3:d2:ef:dd:c8:fc:86:0e:18:bf:
         76:97:8d:32:56:7d:ff:e1:bb:b6:57:c8:45:9a:8d:a3:7f:a4:
         2b:da:5a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----