Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/678d7214-91fa-4c4a-bb8b-3b0992503f48.roa
File:                     678d7214-91fa-4c4a-bb8b-3b0992503f48.roa (raw, json)
Hash identifier:          a6MqcgZ5A9rtTRsgVZT73/VnvcSKfvKBIxJSLg1UZKk=
Subject key identifier:   14:00:1A:CF:C9:ED:18:4F:BF:B0:BD:B1:85:8F:C9:2D:E6:94:3D:B7
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       508E02391CCA793BB9C3A27E2BC5F33C522986F7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/678d7214-91fa-4c4a-bb8b-3b0992503f48.roa
Signing time:             Tue 17 Dec 2024 00:00:00 +0000
ROA not before:           Tue 17 Dec 2024 00:00:00 +0000
ROA not after:            Tue 21 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:7000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8e:02:39:1c:ca:79:3b:b9:c3:a2:7e:2b:c5:f3:3c:52:29:86:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 17 00:00:00 2024 GMT
            Not After : Jan 21 23:59:59 2025 GMT
        Subject: serialNumber=38373a5732c0667b7d25dfb36e133e802a87edb03177252f99e4d35da803fd24, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:a1:22:d7:3a:d7:fc:fb:e2:62:13:9e:69:
                    10:39:d2:e4:c5:dd:fa:87:6d:c8:fd:37:83:ed:5d:
                    f1:88:b7:5d:9f:16:df:48:a8:b2:80:1a:b6:a9:39:
                    19:11:c3:be:72:a9:74:36:6d:68:26:05:f9:dc:13:
                    93:e1:da:10:33:df:74:5c:2b:9d:b4:6f:02:dd:13:
                    7b:35:bc:4c:9b:58:d1:34:23:c0:85:40:da:a0:e4:
                    c3:50:1e:fc:09:0d:90:bc:06:2c:16:a2:89:54:0d:
                    1b:10:a5:74:c9:d9:25:50:cf:5e:74:6e:67:c0:f3:
                    0d:6e:b9:87:09:e4:32:6a:fb:01:33:3d:53:17:96:
                    78:ad:c8:d2:7f:96:29:73:7d:82:2f:a7:f1:67:b5:
                    b0:64:fe:a3:e1:71:8c:85:43:64:f5:e6:bd:a5:1c:
                    74:8a:92:90:a8:df:b7:98:d8:33:55:02:75:0e:59:
                    66:e6:b1:8b:cb:b6:55:33:2a:12:05:0d:c7:4f:e1:
                    7f:67:e9:5b:af:18:2c:7c:2d:e9:40:0b:d1:fb:36:
                    ec:85:97:47:61:0c:3b:f7:36:69:d7:86:97:c9:d6:
                    e0:90:af:d2:5f:cb:d6:88:c6:72:de:02:30:1c:32:
                    af:a9:31:e6:11:e6:ba:ec:f2:4f:1e:61:7e:3c:65:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:00:1A:CF:C9:ED:18:4F:BF:B0:BD:B1:85:8F:C9:2D:E6:94:3D:B7
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/678d7214-91fa-4c4a-bb8b-3b0992503f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:41:57:3b:79:44:12:29:21:7f:8f:ef:8a:3a:71:57:25:3b:
         94:4a:50:e5:28:40:a7:14:e8:5c:d8:7d:f5:58:b6:8d:39:9f:
         7a:27:04:61:0b:fa:2b:f8:0e:af:d2:fd:de:86:eb:c5:62:e8:
         99:25:f9:69:20:1d:e4:29:9f:d0:f4:78:a4:07:24:00:ae:6a:
         38:11:af:87:cb:9f:0f:6d:e5:c7:42:29:7f:20:65:9b:ce:7c:
         ce:06:63:10:29:81:df:f4:23:46:63:93:9a:93:6d:98:e1:41:
         4c:3f:56:fe:9a:96:5b:5a:f9:1a:1d:89:c6:b8:4d:20:42:de:
         69:a6:8d:56:ba:28:48:b9:a8:1f:58:37:bb:de:8e:6a:25:b1:
         7c:fc:89:f8:b0:98:f6:19:d5:36:14:35:e0:d9:56:26:ca:70:
         fd:90:ba:d8:83:51:4c:3d:11:54:1b:39:da:bb:97:44:e6:4b:
         73:a0:00:e9:e3:06:f1:5d:5b:27:70:59:7a:78:28:61:cf:7b:
         ce:9f:c5:40:d9:3b:b9:fa:af:7c:2e:68:b8:7e:c5:15:76:30:
         36:80:a3:b1:4a:c0:f7:84:86:ee:38:f5:e8:6a:e1:6e:67:72:
         5d:ae:4e:9f:3d:33:c3:27:30:09:94:cd:8f:29:2c:f2:6e:85:
         cc:78:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----