Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/552e314f-1d67-4401-8fdd-d4063b9ea3bf.roa
File:                     552e314f-1d67-4401-8fdd-d4063b9ea3bf.roa (raw, json)
Hash identifier:          PK6ebge6H6kBJduDlaE73MVFUOKPgJtD5YvypEbKZDw=
Subject key identifier:   29:9D:F9:F7:55:3F:76:36:6F:12:FA:39:D9:1D:4F:F3:46:C7:C4:FA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       768F6AE3D1F666F39D5A54FD383977BFE78C6E6F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/552e314f-1d67-4401-8fdd-d4063b9ea3bf.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da32:4800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8f:6a:e3:d1:f6:66:f3:9d:5a:54:fd:38:39:77:bf:e7:8c:6e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=df662bbef91a223355ba69826187eb387cdc953c4d363e01f1fc2c2f2f4f261f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c6:38:2e:9d:8f:16:7a:61:53:02:c7:a6:2c:
                    dc:52:cb:04:6c:cd:8a:fe:48:14:4c:f3:83:2c:e4:
                    98:53:7d:8c:bd:b8:77:5f:73:a4:72:21:6b:c0:79:
                    10:e1:99:46:9e:85:d0:00:c1:2c:1d:ab:87:31:b0:
                    46:d9:49:1e:79:8d:8a:1e:bd:ba:e9:7d:87:81:0a:
                    ef:52:4c:8f:c1:5a:98:4e:79:d4:f2:12:a3:af:57:
                    de:3a:65:ef:0f:cc:6c:93:dc:89:a1:32:3a:eb:9d:
                    f9:3f:b9:a9:00:23:f0:1c:20:c9:68:7b:b4:67:da:
                    85:10:2f:a4:ba:5c:9a:18:26:28:18:df:76:d7:09:
                    41:18:5c:7b:b3:b4:fb:21:6d:49:ca:39:83:fe:5f:
                    d3:1a:e9:fe:c5:7f:cb:92:ba:ae:6b:45:36:7b:43:
                    df:4c:37:68:34:4e:e4:79:de:81:8f:af:18:c2:3a:
                    8b:7f:2f:a2:87:fd:1d:7a:0d:fe:f4:6c:c5:dd:cd:
                    01:78:ea:cb:65:1c:6e:06:2e:b6:17:ad:78:5a:54:
                    b5:a6:60:0d:dd:50:36:2b:10:15:3e:4b:d2:98:79:
                    03:a8:18:17:c5:fc:eb:4e:f5:1b:f6:d1:89:52:20:
                    c1:f9:21:92:f1:80:30:81:9a:cc:49:cc:17:de:a9:
                    69:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9D:F9:F7:55:3F:76:36:6F:12:FA:39:D9:1D:4F:F3:46:C7:C4:FA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/552e314f-1d67-4401-8fdd-d4063b9ea3bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da32:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:44:04:91:46:10:29:60:2b:4d:6f:21:e4:db:e5:f9:23:
         a0:34:51:65:9d:84:41:58:45:a1:47:e7:64:05:e4:5a:cd:c0:
         4b:33:e0:33:35:4c:74:ef:6a:cf:fb:6e:4d:c8:fd:a3:40:d6:
         a4:0a:38:7a:42:7b:eb:30:9c:b4:1f:61:85:a8:5f:49:35:be:
         51:b8:99:9e:5f:60:f1:54:1c:02:d5:4b:55:a6:38:c6:f6:89:
         24:df:63:64:c8:fb:2b:86:a6:8c:60:f0:96:9b:d3:4f:f1:74:
         00:91:63:e3:09:44:3d:78:17:7a:de:ca:74:0e:0d:fa:10:8f:
         e1:ac:f4:51:b1:19:dc:d3:eb:bf:46:e3:49:0c:5c:fe:a3:b0:
         36:ff:0f:b6:23:2e:fc:aa:6f:a8:1d:f5:dd:4a:4b:68:68:ec:
         1f:a2:f0:2a:7e:0f:d2:70:88:53:ba:23:56:a6:01:c2:f5:64:
         dc:78:78:65:1e:96:8d:a5:91:e1:83:d4:e8:73:70:7a:93:f9:
         87:2e:6f:c1:6a:5d:22:4e:6c:88:89:28:ef:a6:f4:d7:1c:48:
         35:81:d0:df:ef:7b:63:48:df:36:b1:27:01:f2:7b:69:43:d9:
         4f:b8:41:83:57:98:6e:21:07:da:d6:16:56:23:93:fe:34:33:
         1f:8d:7a:64
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUdo9q49H2ZvOdWlT9ODl3v+eMbm8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIzMDAwMDAwMFoX
DTI1MDIwMzIzNTk1OVowejFJMEcGA1UEBRNAZGY2NjJiYmVmOTFhMjIzMzU1YmE2
OTgyNjE4N2ViMzg3Y2RjOTUzYzRkMzYzZTAxZjFmYzJjMmYyZjRmMjYxZjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Y4Lp2PFnphUwLHpizcUssEbM2K
/kgUTPODLOSYU32Mvbh3X3OkciFrwHkQ4ZlGnoXQAMEsHauHMbBG2UkeeY2KHr26
6X2HgQrvUkyPwVqYTnnU8hKjr1feOmXvD8xsk9yJoTI66535P7mpACPwHCDJaHu0
Z9qFEC+kulyaGCYoGN921wlBGFx7s7T7IW1JyjmD/l/TGun+xX/Lkrqua0U2e0Pf
TDdoNE7ked6Bj68YwjqLfy+ih/0deg3+9GzF3c0BeOrLZRxuBi62F614WlS1pmAN
3VA2KxAVPkvSmHkDqBgXxfzrTvUb9tGJUiDB+SGS8YAwgZrMScwX3qlplQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFCmd+fdVP3Y2bxL6OdkdT/NGx8T6MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzU1MmUzMTRmLTFkNjctNDQwMS04ZmRkLWQ0MDYzYjllYTNiZi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaMkgwDQYJKoZIhvcNAQELBQADggEBAB25RASRRhApYCtNbyHk
2+X5I6A0UWWdhEFYRaFH52QF5FrNwEsz4DM1THTvas/7bk3I/aNA1qQKOHpCe+sw
nLQfYYWoX0k1vlG4mZ5fYPFUHALVS1WmOMb2iSTfY2TI+yuGpoxg8Jab00/xdACR
Y+MJRD14F3reynQODfoQj+Gs9FGxGdzT679G40kMXP6jsDb/D7YjLvyqb6gd9d1K
S2ho7B+i8Cp+D9JwiFO6I1amAcL1ZNx4eGUelo2lkeGD1OhzcHqT+Ycub8FqXSJO
bIiJKO+m9NccSDWB0N/ve2NI3zaxJwHye2lD2U+4QYNXmG4hB9rWFlYjk/40Mx+N
emQ=
-----END CERTIFICATE-----