Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a000fcc-954c-4b71-b41c-df26f9a41ad1.roa
File:                     8a000fcc-954c-4b71-b41c-df26f9a41ad1.roa (raw, json)
Hash identifier:          xCTsFdUx4d6QIF5Yizt9OPCeRACRe9qFOJs9zJ/S4Vo=
Subject key identifier:   DC:D0:5C:43:D5:CC:57:28:DB:B0:42:C6:AC:BA:4E:A7:26:EC:3F:F9
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4EC2DC666DDA9A76A55AF0FA2F60A1583D6FE8B4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a000fcc-954c-4b71-b41c-df26f9a41ad1.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da60:7040::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c2:dc:66:6d:da:9a:76:a5:5a:f0:fa:2f:60:a1:58:3d:6f:e8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=aaba6acdc019624d3058b74bd2449d37bf6fc29ff4bc331d7a12478ec3d5734b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:e0:f9:df:d2:00:ce:be:16:04:cf:fb:9c:
                    cb:de:97:cb:3c:c9:c4:e9:4b:e5:4a:70:96:f4:c0:
                    46:d0:7d:ee:b3:c1:71:07:5f:9e:93:48:1e:21:27:
                    d2:a2:02:a1:ad:f8:41:17:1a:f9:a2:e5:c1:f4:e5:
                    f6:57:e7:d1:f8:5f:1d:75:15:39:81:cd:0f:88:4f:
                    9d:a5:7c:40:96:b6:e6:c6:02:ff:ea:88:c6:0b:c2:
                    f4:f7:7e:19:ca:d7:0b:c4:4a:1b:55:8e:6c:3a:79:
                    17:89:e8:41:d9:81:8e:18:43:12:0a:28:9a:36:d8:
                    b1:eb:de:78:26:34:8a:5b:6e:b5:22:fa:fa:e7:79:
                    30:0d:6f:a4:c6:93:25:cb:ef:8b:b5:68:22:3b:c5:
                    0c:82:6e:1f:38:35:07:34:81:b3:a1:59:c9:ad:98:
                    a3:5a:99:5d:4f:09:c2:4c:f5:ad:2b:91:50:7c:f4:
                    fb:79:ff:46:eb:7e:76:73:bb:3f:c3:9b:3c:d5:76:
                    cf:9c:e8:b3:5f:09:72:04:f0:3c:6c:d4:ff:1a:36:
                    1a:e9:4e:07:22:55:ad:f0:2e:28:f4:46:eb:03:2c:
                    7c:68:e3:ef:19:53:dc:aa:c9:51:4f:44:a2:19:d0:
                    e9:47:8d:21:dd:1b:2a:a3:5f:da:be:d0:f3:0d:c3:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D0:5C:43:D5:CC:57:28:DB:B0:42:C6:AC:BA:4E:A7:26:EC:3F:F9
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a000fcc-954c-4b71-b41c-df26f9a41ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da60:7040::/46

    Signature Algorithm: sha256WithRSAEncryption
         8d:7c:83:30:9c:b3:b4:60:03:61:ed:26:c2:7c:b9:0e:48:65:
         46:87:e9:6d:1f:a8:8f:49:9d:f4:62:f4:8f:6b:3b:78:0d:c0:
         55:69:b3:93:94:dc:3d:03:20:98:22:a0:3a:3e:39:9c:42:29:
         38:ae:5c:68:6c:28:b7:a0:24:20:7c:a1:c7:f7:93:48:89:0e:
         62:33:2f:cf:a0:b0:3d:8f:08:af:42:a5:81:20:2e:a6:ec:79:
         b8:b0:7e:d9:eb:c4:c6:8c:47:99:65:d8:fe:7d:55:b4:64:4f:
         5f:fc:48:1b:6e:97:26:8f:7c:f0:9d:5f:3a:9c:b8:d5:5b:b4:
         65:68:4a:14:4b:09:e0:cb:d5:d0:43:a0:ec:17:c0:41:83:77:
         72:a5:c7:b4:3d:65:09:b2:08:51:b9:48:5b:5c:99:dc:65:52:
         bb:b9:52:bc:b2:67:26:05:42:cc:e1:27:53:ee:31:ec:3e:6a:
         10:8f:9c:e2:67:47:51:e0:11:37:62:07:04:29:86:70:61:17:
         59:55:40:20:ce:37:ed:88:0d:c0:c6:78:41:bb:31:46:45:d4:
         f9:de:2a:88:30:ce:ca:34:40:f9:ce:9d:b5:8d:97:db:13:b5:
         ac:d5:59:43:d1:1d:68:e5:4b:89:25:85:fe:4a:08:fc:f7:d5:
         bf:a8:fd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----