Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/863b1d35-6e44-49bf-821c-64a6e5812d58.roa
File:                     863b1d35-6e44-49bf-821c-64a6e5812d58.roa (raw, json)
Hash identifier:          s0AqxpK/me1BoxcaU/h1t8vNZMeWpVstmgVXUVVP/YI=
Subject key identifier:   50:61:D4:51:EE:44:20:FC:23:3F:99:60:AB:90:A8:FB:B8:EE:1F:2B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4E28BEFDEDAB95042B370D77AE3ABF0C90A03B6E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/863b1d35-6e44-49bf-821c-64a6e5812d58.roa
Signing time:             Wed 18 Dec 2024 00:00:00 +0000
ROA not before:           Wed 18 Dec 2024 00:00:00 +0000
ROA not after:            Wed 22 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:b000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:28:be:fd:ed:ab:95:04:2b:37:0d:77:ae:3a:bf:0c:90:a0:3b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 18 00:00:00 2024 GMT
            Not After : Jan 22 23:59:59 2025 GMT
        Subject: serialNumber=facdcff8e508d9641e82576820ebe5494475279c3b9f29771923f46f93ad38c1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:24:8a:f5:ed:b5:e8:5b:60:1f:df:ea:80:14:
                    7d:36:17:27:8f:65:0e:36:2f:5f:6e:f7:78:c9:b8:
                    26:c1:c1:06:6e:c5:3a:26:41:aa:eb:c8:13:0a:5f:
                    87:6e:7d:db:4e:44:3b:ad:0a:91:89:7b:db:95:88:
                    08:03:22:75:88:53:2a:f8:bd:85:3d:5f:85:70:51:
                    f6:d4:be:71:fa:5e:47:64:f7:41:16:9d:93:ef:63:
                    92:c0:91:ea:d0:01:56:af:fd:48:da:33:fd:e4:2a:
                    8a:ef:e5:1b:12:46:52:04:66:89:f6:38:13:bb:00:
                    ca:e4:8e:1f:fb:13:39:dc:23:84:e9:6a:db:2f:4f:
                    82:31:9d:68:5d:96:64:9d:43:ce:96:d8:05:dd:da:
                    ef:78:7d:b1:27:60:40:ba:a2:d1:0c:5b:dc:df:9a:
                    e9:2c:b0:93:22:b4:aa:2b:14:7d:43:7f:52:1e:6f:
                    e6:a3:9b:ca:84:f2:70:56:f2:91:d7:ad:56:51:c9:
                    fe:b0:89:e0:5a:14:57:09:9f:9f:e8:44:fd:f0:b3:
                    8c:19:fd:5a:5d:16:14:4f:f6:93:02:5a:fc:f9:f7:
                    cc:d0:ce:c0:5d:8b:6f:3c:f8:4a:5e:9b:a2:5a:74:
                    85:05:8e:63:55:c4:a1:f0:e0:96:3f:bd:a8:ab:16:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:61:D4:51:EE:44:20:FC:23:3F:99:60:AB:90:A8:FB:B8:EE:1F:2B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/863b1d35-6e44-49bf-821c-64a6e5812d58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:e8:08:0a:10:7c:50:4f:b2:17:fe:a3:0e:b8:90:6f:d9:96:
         90:a1:1e:60:fd:18:a8:54:69:be:b8:07:bd:40:cf:1f:a1:f2:
         5d:0e:ed:31:4a:bb:13:82:82:33:ed:31:33:2d:db:11:f5:1d:
         c5:37:63:e0:4a:8b:84:06:cd:d5:8f:0c:b6:71:f3:19:f2:7a:
         6a:ee:09:31:19:ac:ce:e1:e1:82:b6:f9:d8:74:23:8a:11:b6:
         fd:df:2f:cb:13:78:d1:cf:2b:f1:2b:2d:a4:92:d2:b0:61:de:
         f1:df:1b:6a:90:dc:ad:1b:9e:c2:ed:3d:33:5e:fb:60:45:44:
         39:75:fa:22:c1:d8:2a:63:2c:76:eb:3c:13:0c:d9:41:3c:8b:
         28:50:22:0b:ec:bb:d9:d4:73:ad:57:1d:4f:94:57:09:37:9c:
         c5:b1:98:45:5b:69:e1:b4:12:c9:4d:bc:f7:b2:1a:79:69:1d:
         85:78:01:48:95:b9:75:64:0c:c6:4b:db:66:f4:09:0e:2f:07:
         ee:70:b3:95:e5:76:04:ed:ad:82:c4:a5:a5:d2:e9:8e:a7:d4:
         7e:32:23:f1:48:b2:9c:e3:ea:ea:0c:98:26:50:07:82:f9:73:
         c0:2a:91:58:64:7c:92:0f:5b:ca:37:ac:d7:50:fc:12:f2:bb:
         55:c6:b2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----