Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46489ab1-d9bd-435f-b157-0d63e7b73d49.roa
File:                     46489ab1-d9bd-435f-b157-0d63e7b73d49.roa (raw, json)
Hash identifier:          l7qHaw35XHX5g/oM86OMyPEBSfH8kLITqxsZy4z9Fsg=
Subject key identifier:   D1:51:37:8E:1D:3A:D4:17:5F:F8:B2:4D:4A:E0:DD:D1:35:B8:EB:9C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6DBEC6BA1D6D9925FE581FF18A0F45AD32E31EA3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46489ab1-d9bd-435f-b157-0d63e7b73d49.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da68:8800::/40 maxlen: 40
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:be:c6:ba:1d:6d:99:25:fe:58:1f:f1:8a:0f:45:ad:32:e3:1e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=4317a75b1fe90ff1a7d70ea7566a72103e5724d23d79ea8ec0e72aeaa72eccf4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:55:57:4e:cf:f8:7d:22:ed:b1:ac:c3:ce:
                    e1:e4:7c:3e:79:03:f5:ea:6a:ac:7b:7a:f0:ab:64:
                    27:f6:71:0e:54:1b:58:0f:61:42:6b:a3:de:bb:e7:
                    da:ab:21:27:3c:4e:9b:55:db:5c:e5:a8:95:52:3d:
                    1e:2b:d7:a9:ab:a5:49:3a:1d:62:11:e8:19:0b:72:
                    53:7e:f4:2c:55:10:1d:ef:f8:c2:59:13:8d:e4:a2:
                    d8:ad:a1:c1:09:f0:1f:65:8c:09:7c:f4:d4:59:92:
                    e7:17:6f:82:67:26:7f:9b:62:25:ce:0f:52:38:30:
                    95:8c:16:38:50:32:cc:b0:f9:fd:44:ad:42:b7:25:
                    63:62:ee:c1:2f:c1:7e:fb:62:de:1d:c6:88:2e:74:
                    e5:cc:78:11:a9:ac:f4:de:22:a7:06:68:f3:36:5c:
                    30:31:45:48:a4:5a:3b:ce:11:c9:85:2b:9a:07:98:
                    52:82:bf:02:32:d7:33:1e:43:ad:8f:f0:b8:c6:50:
                    5f:3d:06:13:93:b9:54:45:74:41:ab:92:51:09:15:
                    97:e6:e6:a0:5f:dc:b4:ee:54:68:ef:c2:30:a7:40:
                    e3:c3:d6:49:4b:e5:49:ed:74:af:c2:e4:26:d2:b7:
                    4f:77:43:84:35:90:bd:50:8d:29:67:a3:e3:ab:f6:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:51:37:8E:1D:3A:D4:17:5F:F8:B2:4D:4A:E0:DD:D1:35:B8:EB:9C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46489ab1-d9bd-435f-b157-0d63e7b73d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da68:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:62:72:ee:41:20:40:1e:ac:d9:f4:93:10:f4:23:de:38:c9:
         70:72:9f:a5:03:3a:0d:90:ca:80:d2:36:78:4b:3b:af:b1:6e:
         21:43:9c:49:7d:8a:19:e6:dc:a2:57:3a:8d:6b:ff:5f:1a:8c:
         d1:d7:65:fc:43:27:5c:d0:1a:cc:2a:ac:86:15:81:e4:21:39:
         ed:93:60:9d:74:ac:30:1e:7e:b7:f9:5c:2c:ef:68:72:53:4a:
         6c:54:cb:fe:ec:df:90:6b:42:bd:f0:ec:8e:ed:da:74:50:52:
         4e:bd:3c:64:2e:b1:67:77:18:ee:1b:2a:11:93:df:59:9f:66:
         8a:cd:5e:b6:bd:a4:d0:2f:8a:a3:cd:bf:12:93:ce:67:b5:27:
         9e:43:d1:c6:a6:3d:e0:5e:95:0c:44:ed:06:e0:f3:d5:46:77:
         97:70:6f:b1:4c:7c:bf:72:c4:8f:64:bd:91:4f:84:06:34:1a:
         a3:40:ae:be:a0:3e:fb:60:42:c3:fa:fc:53:4d:94:f6:e2:53:
         e4:66:e3:5e:f2:88:9f:b5:ea:1c:ad:48:a8:8e:6a:47:77:b4:
         36:32:74:21:50:b2:5b:bf:3a:c4:d0:d8:64:98:1b:fb:ec:d9:
         86:e9:d3:4d:3b:7d:3e:d0:74:75:6f:37:8f:4e:43:3a:76:cd:
         2a:15:37:bf
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUbb7Guh1tmSX+WB/xig9FrTLjHqMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNANDMxN2E3NWIxZmU5MGZmMWE3ZDcw
ZWE3NTY2YTcyMTAzZTU3MjRkMjNkNzllYThlYzBlNzJhZWFhNzJlY2NmNDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WRVV07P+H0i7bGsw87h5Hw+eQP1
6mqse3rwq2Qn9nEOVBtYD2FCa6Peu+faqyEnPE6bVdtc5aiVUj0eK9epq6VJOh1i
EegZC3JTfvQsVRAd7/jCWRON5KLYraHBCfAfZYwJfPTUWZLnF2+CZyZ/m2Ilzg9S
ODCVjBY4UDLMsPn9RK1CtyVjYu7BL8F++2LeHcaILnTlzHgRqaz03iKnBmjzNlww
MUVIpFo7zhHJhSuaB5hSgr8CMtczHkOtj/C4xlBfPQYTk7lURXRBq5JRCRWX5uag
X9y07lRo78Iwp0Djw9ZJS+VJ7XSvwuQm0rdPd0OENZC9UI0pZ6Pjq/apEwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFNFRN44dOtQXX/iyTUrg3dE1uOucMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzQ2NDg5YWIxLWQ5YmQtNDM1Zi1iMTU3LTBkNjNlN2I3M2Q0OS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaaIgwDQYJKoZIhvcNAQELBQADggEBABJicu5BIEAerNn0kxD0
I944yXByn6UDOg2QyoDSNnhLO6+xbiFDnEl9ihnm3KJXOo1r/18ajNHXZfxDJ1zQ
GswqrIYVgeQhOe2TYJ10rDAefrf5XCzvaHJTSmxUy/7s35BrQr3w7I7t2nRQUk69
PGQusWd3GO4bKhGT31mfZorNXra9pNAviqPNvxKTzme1J55D0camPeBelQxE7Qbg
89VGd5dwb7FMfL9yxI9kvZFPhAY0GqNArr6gPvtgQsP6/FNNlPbiU+Rm417yiJ+1
6hytSKiOakd3tDYydCFQslu/OsTQ2GSYG/vs2Ybp0007fT7QdHVvN49OQzp2zSoV
N78=
-----END CERTIFICATE-----