Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa
File:                     4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa (raw, json)
Hash identifier:          xzlqu9Yam6YLHPWHuw4a6jdaF9dTf8GYkIhz+RWITv8=
Subject key identifier:   9A:99:95:65:71:DF:7F:A1:81:EC:38:F1:68:90:98:4F:04:7B:50:FA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6B1464548B9DC0D09E97B6B734A1C648481F65F6
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa
Signing time:             Wed 18 Dec 2024 00:00:00 +0000
ROA not before:           Wed 18 Dec 2024 00:00:00 +0000
ROA not after:            Wed 22 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:e000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:14:64:54:8b:9d:c0:d0:9e:97:b6:b7:34:a1:c6:48:48:1f:65:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 18 00:00:00 2024 GMT
            Not After : Jan 22 23:59:59 2025 GMT
        Subject: serialNumber=301701b7dd551ee21f9429609ed5d892df56d44f46dc5ee5ae6189c9764027ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:0e:1a:7c:32:03:1c:72:64:2e:a4:99:de:
                    21:f2:da:30:f2:06:69:1d:e8:ff:2e:a3:85:c9:e0:
                    ad:c4:d4:25:0d:80:d7:70:eb:0d:5e:b4:4a:eb:8e:
                    21:51:62:4d:15:07:32:04:7a:c5:c7:78:09:51:01:
                    9d:5f:e9:b8:46:96:e2:a9:eb:50:40:a9:10:41:4f:
                    83:98:97:39:cd:f3:f2:65:89:6d:82:f9:58:a2:10:
                    2d:12:82:58:c2:08:2e:18:08:77:f6:76:e3:e7:61:
                    59:3f:a4:5c:5e:df:ba:b3:b7:7b:aa:76:55:38:00:
                    4c:59:4b:51:a8:ed:f4:40:f0:33:cf:10:de:ef:ea:
                    61:9f:07:37:0d:4e:c7:0c:1e:fa:6c:68:e6:31:fe:
                    4c:0b:a2:e7:48:f0:2d:89:c0:4a:81:7a:02:3e:eb:
                    f4:bf:a0:40:86:a9:38:8c:70:f8:26:e2:00:93:a8:
                    18:62:c8:5e:33:19:b6:75:c2:18:d6:51:9a:14:e2:
                    7b:cd:9b:26:ee:d0:89:31:16:92:9c:32:9a:ab:e9:
                    ad:6f:59:bb:58:95:a5:22:92:23:a0:7d:1e:4a:0d:
                    16:e7:37:25:1c:b3:22:3f:2d:cd:c3:86:10:5f:88:
                    25:6b:24:cc:71:7b:85:5b:7c:aa:8d:31:ae:7c:ff:
                    1f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:99:95:65:71:DF:7F:A1:81:EC:38:F1:68:90:98:4F:04:7B:50:FA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:61:32:b6:4f:38:63:1d:3e:80:92:d7:85:02:e6:35:cf:59:
         f2:50:3d:e4:55:12:49:7e:7a:fa:92:aa:f1:75:ca:ce:e0:55:
         1c:fe:85:35:2e:b2:03:dd:ca:5c:6d:ad:20:65:3b:6f:08:14:
         9e:6c:ea:81:a4:ba:37:d3:a3:9e:c9:f9:99:0f:79:65:01:23:
         94:96:bb:a7:92:a4:34:c8:c4:37:3f:d1:87:8e:62:c4:63:24:
         f3:67:79:bc:18:41:bf:0a:c1:4e:b5:67:45:89:94:eb:3e:46:
         17:6c:9c:e8:80:eb:39:19:f0:4c:c9:fe:5a:52:a2:74:d0:e7:
         28:17:d0:45:29:73:9a:22:2c:20:a1:12:7f:8b:50:c0:ef:62:
         67:a4:0b:1c:76:3d:a6:d1:a5:fe:a2:b7:6f:d6:a6:bb:19:f1:
         95:aa:38:bb:7b:33:3a:67:77:5e:50:53:06:2a:86:8a:0d:11:
         2f:5a:06:c1:90:f2:cc:d2:bb:73:89:c5:70:2d:04:0b:fa:0f:
         04:58:aa:93:7a:e8:92:fe:f4:7a:2e:6e:a4:53:79:ca:f1:bc:
         0c:a6:32:fc:46:62:b2:c7:1b:8e:9d:c7:ec:df:49:2d:86:25:
         5c:95:12:09:f6:3c:8d:69:65:bb:13:d7:d3:c7:d5:15:65:b6:
         9f:ac:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----