Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e32ff04-66a3-4af7-b9f2-04742320345e.roa
File:                     6e32ff04-66a3-4af7-b9f2-04742320345e.roa (raw, json)
Hash identifier:          SXU/Ye03cubzYiui30w3WaJ2z/xESUEjGNC7fzE0vtE=
Subject key identifier:   C3:52:2F:DD:41:6D:6C:DA:6B:DA:FA:52:40:58:7E:A0:8A:7E:E0:DF
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2B9A79C0BB8D92833FA2FBD32D1EF9AEA4CEFBEE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e32ff04-66a3-4af7-b9f2-04742320345e.roa
Signing time:             Wed 01 Jan 2025 00:00:00 +0000
ROA not before:           Wed 01 Jan 2025 00:00:00 +0000
ROA not after:            Wed 05 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:c800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9a:79:c0:bb:8d:92:83:3f:a2:fb:d3:2d:1e:f9:ae:a4:ce:fb:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  1 00:00:00 2025 GMT
            Not After : Feb  5 23:59:59 2025 GMT
        Subject: serialNumber=ae3cc0c8381056ad4bf6f2f31bf9c60f05b4695b608350953c93ba217e0cc499, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:ec:d4:f9:4b:40:c2:a9:a3:50:b0:32:98:
                    53:fe:94:bc:57:3f:59:4b:a9:53:45:48:73:12:69:
                    02:6c:30:14:d1:93:e1:7c:e7:b3:f0:56:f8:70:d4:
                    11:6d:d0:db:35:23:13:f8:9e:7d:4e:83:cc:4f:8d:
                    fd:1c:14:6d:7a:57:a6:7b:69:12:ec:8a:19:07:6d:
                    8b:a2:82:36:90:92:f1:b7:d0:2d:ff:22:5c:5d:f7:
                    9a:ed:90:87:4a:4a:e6:57:5e:9a:c5:eb:13:33:7e:
                    64:a9:03:12:ba:80:a7:37:21:95:32:0a:30:21:b2:
                    a2:40:07:29:5d:b1:ae:58:48:58:96:26:f1:bb:c3:
                    bf:19:95:b5:c7:0e:a2:3d:00:c1:e5:64:b9:02:d9:
                    ca:9a:7e:51:a0:7d:44:bd:a7:b0:96:bd:b1:48:fe:
                    81:73:4a:c8:61:bc:a1:a5:02:6e:13:7f:ee:07:4f:
                    52:64:61:3f:16:e1:f1:df:25:fd:eb:f8:ac:9d:1f:
                    b0:2d:4a:17:6f:75:81:78:94:e2:d1:53:fe:3b:ff:
                    31:7b:0b:56:f2:ff:9f:cc:c8:d5:69:fc:71:d6:63:
                    34:7a:57:9b:30:12:e2:ea:94:51:0e:5c:12:5a:98:
                    d5:96:2a:38:32:ef:bd:40:14:df:76:7d:1c:db:a2:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:52:2F:DD:41:6D:6C:DA:6B:DA:FA:52:40:58:7E:A0:8A:7E:E0:DF
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e32ff04-66a3-4af7-b9f2-04742320345e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:61:75:f2:05:46:cd:19:ce:86:2b:47:ae:bc:be:8e:30:41:
         f0:99:05:82:d7:25:07:76:a0:24:71:b9:83:37:d2:72:ed:08:
         be:0c:ca:d4:b1:96:45:84:30:1b:40:0d:2d:66:a0:c1:f9:6e:
         1a:ee:f3:77:87:d6:ec:1f:a9:9b:e5:a5:20:8d:d5:77:0e:1f:
         4e:2d:76:43:52:5d:1c:e5:5a:77:70:be:0a:43:f8:c9:8e:cb:
         83:f6:51:b1:f2:7f:a9:a3:68:de:a3:c6:c7:78:64:38:61:65:
         2b:25:22:bc:ed:91:d4:ed:a7:ee:11:b7:75:9a:35:64:8d:bb:
         3c:20:54:11:dc:03:d6:b5:2f:fd:1f:eb:fc:b7:a3:61:91:93:
         a8:d2:8a:61:01:9d:60:01:3f:24:76:e9:a8:37:c6:a2:af:f4:
         c9:73:0a:bd:5c:d2:78:70:bc:d0:76:37:82:79:e7:cd:7a:35:
         8d:e0:aa:f8:c6:e6:63:ef:72:c2:e1:7a:7b:a1:ca:26:44:72:
         c0:4c:ba:28:3a:4b:9f:0a:2e:81:7d:5f:c6:b8:9f:5c:a8:47:
         24:1e:6a:50:1b:d7:50:89:e2:b1:62:81:76:d6:f2:6f:a8:cd:
         ce:53:b6:96:16:07:6c:c7:8c:53:5d:14:85:03:a3:6a:3b:fe:
         c2:ac:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----