Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60e765e1-18c8-41f2-b6a9-742ceceb2e27.roa
File:                     60e765e1-18c8-41f2-b6a9-742ceceb2e27.roa (raw, json)
Hash identifier:          A7LDyXw4POOJgm49r+8cyPFjkPnyWYiQDNOw5KzHd2I=
Subject key identifier:   97:E5:CF:B2:8F:72:7F:E5:90:80:88:8D:79:39:E8:2A:AD:E6:17:33
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7A7F6F1AAD884B24A05936D0201DE9F68AD4D2B0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60e765e1-18c8-41f2-b6a9-742ceceb2e27.roa
Signing time:             Tue 31 Dec 2024 00:00:00 +0000
ROA not before:           Tue 31 Dec 2024 00:00:00 +0000
ROA not after:            Tue 04 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:8800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7f:6f:1a:ad:88:4b:24:a0:59:36:d0:20:1d:e9:f6:8a:d4:d2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 31 00:00:00 2024 GMT
            Not After : Feb  4 23:59:59 2025 GMT
        Subject: serialNumber=9e16c2f0641162f339811858c724ea41f5bf01ee67cd471df5efe4280a6b9162, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:88:97:38:73:7c:5f:32:aa:88:a9:15:b2:
                    ec:e9:6b:86:69:45:bc:65:ce:13:76:c3:c0:8c:00:
                    6b:9f:98:c0:33:a7:a0:e4:c5:54:91:1a:03:85:0a:
                    17:2e:e6:ed:ce:7a:8b:34:13:fd:d5:91:1c:f2:22:
                    54:52:07:2e:27:a2:53:a5:7d:8c:03:98:b5:b9:f2:
                    bd:a3:b9:3b:97:d0:45:74:95:ae:b2:45:02:b3:5f:
                    e0:88:27:18:0f:38:1e:a3:23:5f:5e:63:e2:9d:86:
                    35:cf:a8:19:6e:ca:b6:b6:41:e5:b5:ce:36:55:3a:
                    0d:ee:a2:99:4b:29:c5:36:82:16:c2:dc:6b:81:34:
                    05:f3:a4:66:4f:ed:d0:6b:76:c3:c8:0b:b7:82:24:
                    e8:ff:c2:bf:a3:93:26:10:e0:ba:4e:d5:f2:64:e6:
                    1f:fe:41:9d:cd:e6:d9:92:74:de:56:58:7a:4e:d7:
                    95:ee:07:e7:ae:3b:66:d9:4f:f9:b2:dd:9c:2d:e2:
                    89:e5:8c:17:16:12:c4:e8:cf:bc:eb:19:f8:92:d8:
                    79:4a:7d:00:fd:dd:9a:fd:a4:15:ea:97:3c:22:fc:
                    22:02:7d:95:38:19:24:d6:df:74:06:97:4e:2b:c4:
                    61:99:e2:02:f0:80:d7:b7:66:73:4f:93:af:d6:2a:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E5:CF:B2:8F:72:7F:E5:90:80:88:8D:79:39:E8:2A:AD:E6:17:33
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60e765e1-18c8-41f2-b6a9-742ceceb2e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:03:a8:79:69:2c:2c:2e:0e:75:ff:2c:ce:76:9f:ac:10:e9:
         ab:e3:fe:68:0d:3c:65:e1:79:69:ea:dc:e5:64:3f:77:1b:ae:
         bc:9e:22:0b:07:6c:01:a8:84:78:b2:72:0e:62:d7:b3:a9:54:
         8e:34:45:3d:7a:a8:35:26:c6:6b:37:15:cc:6f:27:5a:0c:0b:
         1c:99:01:58:8f:28:97:4d:8c:50:5a:4c:91:5a:f8:16:b3:05:
         32:e3:71:8c:43:f7:bf:c4:ee:dd:db:a3:8c:27:fa:63:48:7d:
         f8:77:69:5b:8b:ea:f3:88:ea:7b:ce:6b:db:05:94:f1:57:45:
         21:90:14:f9:3e:8f:5b:cc:40:23:ab:ed:37:a8:7b:20:df:3c:
         7e:c7:f3:fb:55:0f:c9:cc:bb:63:3b:c8:a5:8b:d6:3a:07:a2:
         1c:07:b2:fd:75:01:f6:8a:4b:4f:75:10:ca:c9:86:bb:b0:1d:
         1b:56:8f:03:93:b4:bb:7b:39:82:4b:76:07:56:a6:68:6c:d3:
         22:f6:fe:d5:11:41:24:46:0e:a5:5b:b2:ff:7a:b1:47:97:a4:
         eb:51:53:7a:6e:83:b3:e5:0f:40:b3:9e:f6:aa:89:c1:cd:2b:
         4d:f5:97:ec:22:be:33:7d:9c:73:c3:cf:c2:31:cf:53:92:48:
         bf:52:9f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----