Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6dfd525c-732c-46fe-be7e-04eec94adec0.roa
File:                     6dfd525c-732c-46fe-be7e-04eec94adec0.roa (raw, json)
Hash identifier:          qPIsMoAkvLs8y+Dq0IXOjtvn2uqSH27D7Y7dtTbRRjs=
Subject key identifier:   EA:D6:E0:C8:CC:ED:0A:38:F4:6B:4C:3F:68:4C:5F:7B:6F:80:9D:6F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       099A8C588FF099FD330330EC157BCA394985DAB1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6dfd525c-732c-46fe-be7e-04eec94adec0.roa
Signing time:             Wed 25 Dec 2024 00:00:00 +0000
ROA not before:           Wed 25 Dec 2024 00:00:00 +0000
ROA not after:            Wed 29 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da60:8800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9a:8c:58:8f:f0:99:fd:33:03:30:ec:15:7b:ca:39:49:85:da:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 25 00:00:00 2024 GMT
            Not After : Jan 29 23:59:59 2025 GMT
        Subject: serialNumber=1519a2dac2a4466fbeb7349dcb3684bea992e4482acc3c08fc96d05fda83a5be, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:99:1f:75:e6:34:27:49:05:b6:39:04:6a:e2:
                    5b:c7:cc:52:02:0f:e7:71:8c:79:54:f6:b5:ae:a1:
                    3d:6d:1c:31:e3:b0:eb:82:6c:10:7c:53:53:97:43:
                    15:33:df:6d:4a:2d:09:5b:76:b1:8e:b7:52:f3:68:
                    94:5a:74:00:6f:e6:5b:91:19:28:21:e4:b0:77:94:
                    7e:14:d9:fa:9a:88:67:f4:e6:9e:3e:62:bb:f0:17:
                    26:e8:55:f5:01:d9:d3:4d:ba:ec:17:5a:3f:a4:30:
                    49:cf:6c:3e:95:d3:d1:ef:b7:f4:5e:78:74:1f:da:
                    33:a4:f1:a9:68:67:47:9b:10:43:aa:9b:a5:6c:84:
                    4d:f4:e1:60:b1:99:4a:82:ac:c0:37:70:13:01:3e:
                    33:25:5e:a2:8d:88:6c:de:74:c1:2c:17:73:4f:bd:
                    ab:93:ac:eb:fd:a3:5a:be:85:b0:eb:f6:62:43:2d:
                    3e:81:a0:20:0a:28:7e:0b:a9:36:c6:b7:cc:61:cd:
                    c8:d8:12:a2:9a:81:61:72:0e:41:bf:75:ac:68:0b:
                    fd:bc:9a:49:b3:cf:ec:fb:14:cd:79:da:d3:33:08:
                    88:6f:e4:31:f5:0a:7e:ef:37:e4:80:d5:41:65:7e:
                    87:99:d3:39:d4:36:76:99:7a:33:b5:23:52:b6:b1:
                    b0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D6:E0:C8:CC:ED:0A:38:F4:6B:4C:3F:68:4C:5F:7B:6F:80:9D:6F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6dfd525c-732c-46fe-be7e-04eec94adec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da60:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:ef:2c:be:40:0c:bd:e3:64:92:fd:2e:bf:77:ac:43:79:b8:
         c1:3d:2b:2d:fd:51:cd:63:f0:f8:3e:fc:ec:eb:df:7a:a8:65:
         38:c2:01:6e:18:0a:93:8c:82:9f:4b:a0:10:c9:91:22:8f:45:
         45:88:95:ca:af:a9:7e:27:a0:43:78:5c:fd:ba:0a:db:f0:56:
         1f:aa:6a:27:b5:e3:88:7d:bd:eb:76:f8:77:27:37:c2:83:a3:
         1d:99:56:4d:af:75:53:7f:0c:f7:7e:58:ee:d1:bf:3c:25:88:
         7f:da:9e:1e:57:53:c4:bf:53:3f:0b:dc:15:93:be:43:82:c7:
         4c:19:62:02:03:ab:f1:50:40:27:fb:96:60:6a:86:c5:0d:2b:
         84:9c:23:09:8e:a0:e0:df:0a:a8:c0:c4:1c:94:d5:67:7b:f7:
         8a:bf:4a:d3:2d:7f:0e:79:eb:23:5c:5f:d5:01:07:6a:d8:5a:
         d8:8b:dc:a3:52:91:00:3d:aa:cf:16:e5:ee:6a:d3:91:5a:76:
         d8:9a:9e:9c:99:28:ce:9e:11:3b:b3:05:3b:e6:c6:92:bf:58:
         ed:a7:80:87:e1:43:6c:88:5e:08:d4:1b:72:fb:a5:71:c8:89:
         b6:33:71:26:f5:4e:44:c8:d3:8e:26:27:7a:ff:9c:f4:f7:81:
         14:63:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----