Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c2e35eb-c3cd-4373-b235-78cc3b6ff1c1.roa
File:                     8c2e35eb-c3cd-4373-b235-78cc3b6ff1c1.roa (raw, json)
Hash identifier:          vbd4xxWzGXMygf5nSKwMmxmFHK4QCb3+lgRFmb00hQI=
Subject key identifier:   A0:9B:4E:86:91:03:10:6C:C2:75:B8:C6:0B:96:7C:2A:34:EB:2A:3A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2D6F9BF29BE8C696899902CA1D04E191583CB65A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c2e35eb-c3cd-4373-b235-78cc3b6ff1c1.roa
Signing time:             Wed 25 Dec 2024 00:00:00 +0000
ROA not before:           Wed 25 Dec 2024 00:00:00 +0000
ROA not after:            Wed 29 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf1:8800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6f:9b:f2:9b:e8:c6:96:89:99:02:ca:1d:04:e1:91:58:3c:b6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 25 00:00:00 2024 GMT
            Not After : Jan 29 23:59:59 2025 GMT
        Subject: serialNumber=3358a1a8ed69f369cab164b257aa888a2c841098a935e254050d781787c5ff3b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:01:5c:c6:5b:52:66:4a:bd:2f:02:a6:17:
                    31:a7:dc:9e:c7:1a:2f:d2:2d:c6:85:df:61:da:fc:
                    81:d7:de:0e:bf:b1:90:f1:5c:13:fb:3a:8e:c6:9a:
                    41:d8:a2:64:81:7a:63:21:4d:72:3e:b1:11:e1:2f:
                    f9:2c:76:16:6b:08:a6:a4:7e:5b:b6:5b:f0:47:50:
                    e6:34:be:0d:4c:87:10:4f:60:84:ca:3e:4b:ea:b9:
                    52:6d:5b:0c:55:d5:41:04:5f:f3:26:cf:c4:5b:c6:
                    e6:5f:ef:55:e8:9c:2e:cd:52:1c:f9:0b:e3:40:f0:
                    82:6b:9e:ec:a0:f3:50:12:de:f5:df:1b:41:dd:09:
                    5f:8a:13:7a:4a:4d:f3:83:a0:af:78:c9:19:bf:7a:
                    85:02:e8:b8:ea:be:14:ec:49:a9:b2:00:d6:6e:96:
                    66:1a:11:45:df:2a:de:fc:fe:e5:60:f0:0d:58:6d:
                    24:e9:93:33:72:9c:e4:85:cb:13:62:c2:e6:04:d3:
                    9c:fd:3a:1b:1a:67:5d:21:11:67:7a:7a:29:ae:7a:
                    a3:f2:c5:7e:5e:63:de:9e:f9:d4:91:0f:ad:c8:eb:
                    1e:62:72:a6:cf:bd:18:2b:2f:f2:8b:ee:9e:74:b1:
                    21:52:80:fc:09:0f:cb:61:5e:25:5b:e3:59:ae:87:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9B:4E:86:91:03:10:6C:C2:75:B8:C6:0B:96:7C:2A:34:EB:2A:3A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c2e35eb-c3cd-4373-b235-78cc3b6ff1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf1:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:be:17:d5:bb:c6:22:50:62:63:36:d5:df:ea:04:ae:42:92:
         43:94:e5:23:a7:e8:94:7a:d8:51:22:d1:88:59:a4:d6:7d:09:
         d9:0b:89:54:a5:ca:6a:81:67:9e:87:6b:19:54:d8:54:d1:d2:
         2f:44:cb:86:58:ea:42:fa:c1:f0:04:ed:60:37:82:1e:71:90:
         e8:86:5f:9c:d0:8e:d4:e6:10:a7:85:91:4d:74:ce:57:9a:19:
         72:fe:db:1c:2a:a9:54:a0:e9:dd:0b:00:a0:9c:68:18:5a:37:
         c9:d4:f4:65:11:da:a8:7d:eb:90:f6:4e:01:7b:a6:eb:96:e1:
         51:75:86:ae:7d:61:9a:68:af:e6:3f:51:2a:2f:35:00:0c:d4:
         b7:31:02:8c:29:ad:6a:88:98:be:7c:f0:34:6d:4b:e2:66:33:
         71:3f:dc:8c:ee:69:9f:07:78:74:af:0c:7a:ab:9e:8a:4d:e1:
         51:31:26:bb:33:a8:95:d2:e5:8e:b6:2b:63:be:d6:e7:20:01:
         dc:fe:11:40:a7:e3:d9:47:7c:2c:5d:57:7b:c2:6a:74:38:fe:
         70:ac:88:f4:37:f6:c7:f0:6f:ff:6b:b1:ce:2e:36:fd:8b:38:
         cc:65:63:90:d8:7c:0c:7b:84:32:87:65:61:7f:bf:f8:fb:03:
         f5:08:c2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----