Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60e53e5a-ad89-4a5d-961c-e386188decb0.roa
File:                     60e53e5a-ad89-4a5d-961c-e386188decb0.roa (raw, json)
Hash identifier:          dqbBHOmAQTPFwjqav3XKLeXh7hBSgc8kKB77g5XoHOw=
Subject key identifier:   A0:A8:9F:6E:ED:AB:4C:C8:FE:CC:29:CC:8C:EE:A1:46:E7:6E:28:66
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4C0D6DA299AC20F7F4FA889A2ACA952E5192D7A4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60e53e5a-ad89-4a5d-961c-e386188decb0.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf9:6000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0d:6d:a2:99:ac:20:f7:f4:fa:88:9a:2a:ca:95:2e:51:92:d7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=98c94fa19826893491f2c2cedf9182a6e603083248d00519ede7939888ec25ba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:d2:04:21:f6:60:f2:91:a2:48:9a:ca:f3:
                    71:4b:1c:6b:89:9d:30:14:bc:5c:c6:0e:87:c4:f2:
                    98:db:83:ef:cc:f3:02:5c:91:34:a3:e3:10:67:34:
                    c1:97:d2:3f:2f:03:72:04:1e:94:78:37:88:a9:e7:
                    5d:6d:74:8b:93:86:aa:74:b1:45:ab:65:ec:17:97:
                    8d:63:cf:57:0c:34:d8:e1:82:01:80:c0:2f:ab:d1:
                    21:4c:b2:e4:d4:a8:6e:0d:44:3a:ad:c0:e4:bd:76:
                    a4:76:96:b6:0c:48:fb:a3:09:b2:df:ce:6d:8f:b6:
                    f3:15:a1:0a:f7:f3:b9:2b:74:b6:ac:60:03:0f:75:
                    7a:51:e4:18:5a:26:5b:c9:80:58:12:aa:8e:d4:d2:
                    b7:23:bf:2f:7d:50:92:ee:da:23:fe:b9:a0:06:ae:
                    93:e7:15:33:81:9a:c0:2a:ae:e2:6c:d8:9a:4e:d2:
                    8a:d0:c2:3a:44:ff:e5:b8:ba:fe:d7:9a:67:27:cc:
                    be:5a:3a:e3:b9:7e:53:46:d0:52:13:97:7b:65:39:
                    ee:28:61:b1:4c:cf:cc:ac:10:c3:4b:ab:8a:4a:c3:
                    ba:35:2a:1e:01:ec:25:00:83:65:56:91:fb:04:5a:
                    b8:73:39:d0:55:81:44:6b:9c:21:3d:48:50:1f:81:
                    8a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A8:9F:6E:ED:AB:4C:C8:FE:CC:29:CC:8C:EE:A1:46:E7:6E:28:66
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60e53e5a-ad89-4a5d-961c-e386188decb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf9:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:0a:b3:01:f5:95:1d:35:e2:c9:d9:ec:3d:9f:ec:46:a5:88:
         e6:bd:85:31:8e:ea:c7:90:80:db:60:b4:fa:19:a9:b4:62:c0:
         c8:6b:df:da:4c:12:9e:b6:07:50:6b:be:88:21:c1:9f:75:9f:
         fc:dc:de:09:44:78:1b:6c:c2:83:f5:4e:29:d3:73:88:58:31:
         f2:38:42:07:31:1f:95:90:43:37:f5:8b:9e:be:00:6f:5d:69:
         43:e7:94:35:cb:fe:c2:cb:b9:3e:5c:bb:ea:a2:3c:c9:ed:8b:
         cc:1a:d6:ec:d4:5c:97:16:31:c0:d9:c4:c1:07:7e:0a:3c:08:
         31:ab:d6:33:a4:0f:c4:00:69:a0:cf:92:56:73:e6:fe:d7:7d:
         fc:f0:13:90:6f:55:5e:d3:ac:e0:8e:09:92:37:80:c9:f9:49:
         51:98:56:1a:1a:d1:a3:53:3f:c9:9b:f8:30:c7:57:d3:47:ac:
         18:79:40:9d:eb:9a:fc:80:f2:8d:1c:83:1c:e0:d9:f1:20:4a:
         79:ad:4a:cb:68:ff:6b:b7:19:b2:03:1d:b7:56:f6:9f:5c:1e:
         04:b9:4b:ef:6a:2c:d2:64:04:1d:f6:b3:39:72:1c:ea:59:d6:
         f8:d6:65:40:2d:21:a8:f7:9e:03:5e:a6:9f:63:85:62:97:66:
         ae:35:10:7f
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUTA1topmsIPf0+oiaKsqVLlGS16QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDExMDAwMDAwMFoX
DTI1MDIxNDIzNTk1OVowejFJMEcGA1UEBRNAOThjOTRmYTE5ODI2ODkzNDkxZjJj
MmNlZGY5MTgyYTZlNjAzMDgzMjQ4ZDAwNTE5ZWRlNzkzOTg4OGVjMjViYTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4LSBCH2YPKRokiayvNxSxxriZ0w
FLxcxg6HxPKY24PvzPMCXJE0o+MQZzTBl9I/LwNyBB6UeDeIqeddbXSLk4aqdLFF
q2XsF5eNY89XDDTY4YIBgMAvq9EhTLLk1KhuDUQ6rcDkvXakdpa2DEj7owmy385t
j7bzFaEK9/O5K3S2rGADD3V6UeQYWiZbyYBYEqqO1NK3I78vfVCS7toj/rmgBq6T
5xUzgZrAKq7ibNiaTtKK0MI6RP/luLr+15pnJ8y+WjrjuX5TRtBSE5d7ZTnuKGGx
TM/MrBDDS6uKSsO6NSoeAewlAINlVpH7BFq4cznQVYFEa5whPUhQH4GK8wIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFKCon27tq0zI/swpzIzuoUbnbihmMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzYwZTUzZTVhLWFkODktNGE1ZC05NjFjLWUzODYxODhkZWNiMC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba+WAwDQYJKoZIhvcNAQELBQADggEBAKQKswH1lR014snZ7D2f
7EaliOa9hTGO6seQgNtgtPoZqbRiwMhr39pMEp62B1BrvoghwZ91n/zc3glEeBts
woP1TinTc4hYMfI4QgcxH5WQQzf1i56+AG9daUPnlDXL/sLLuT5cu+qiPMnti8wa
1uzUXJcWMcDZxMEHfgo8CDGr1jOkD8QAaaDPklZz5v7XffzwE5BvVV7TrOCOCZI3
gMn5SVGYVhoa0aNTP8mb+DDHV9NHrBh5QJ3rmvyA8o0cgxzg2fEgSnmtSsto/2u3
GbIDHbdW9p9cHgS5S+9qLNJkBB32szlyHOpZ1vjWZUAtIaj3ngNepp9jhWKXZq41
EH8=
-----END CERTIFICATE-----