Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/903c59bc-cabc-47eb-8860-bcf9a87d7a72.roa
File:                     903c59bc-cabc-47eb-8860-bcf9a87d7a72.roa (raw, json)
Hash identifier:          fKcagf8nYGfjCqnJw2SoDRc0A6x67on7lZUZary1M4Q=
Subject key identifier:   D9:49:4E:35:0B:A1:01:A1:4B:EB:3F:33:2D:E0:25:90:77:09:C4:B3
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2C868BC45944C20AEC9819DF4779C41951D778BE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/903c59bc-cabc-47eb-8860-bcf9a87d7a72.roa
Signing time:             Sat 14 Dec 2024 00:00:00 +0000
ROA not before:           Sat 14 Dec 2024 00:00:00 +0000
ROA not after:            Sat 18 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafc:ffa0::/46 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:86:8b:c4:59:44:c2:0a:ec:98:19:df:47:79:c4:19:51:d7:78:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 14 00:00:00 2024 GMT
            Not After : Jan 18 23:59:59 2025 GMT
        Subject: serialNumber=3c2328ed679a8b3de486da7f777992afd23b1915234d22850d1df1065fab95da, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:5e:c3:fa:2a:19:88:7a:40:03:7d:36:9e:
                    c0:27:28:14:78:0d:9a:f5:87:fc:fe:b8:73:97:64:
                    3a:f6:15:06:e4:b7:a5:ac:4d:3b:49:b6:44:43:d8:
                    6e:2b:ac:ec:e1:ef:62:e6:32:90:23:4a:ef:73:48:
                    06:b4:d7:7c:43:14:36:fd:3d:df:bb:9a:db:13:13:
                    09:6c:fa:b3:a7:1f:1e:46:35:c6:95:b3:4a:4b:0d:
                    60:a8:6b:9d:23:41:65:bb:14:6c:63:01:0a:78:ab:
                    6c:26:55:38:87:86:ab:b1:93:ff:13:cd:c6:74:32:
                    a0:66:f2:c6:f8:21:64:12:75:1b:17:64:05:a0:cf:
                    f6:d3:3d:ad:dd:0c:17:85:6b:a6:15:58:03:59:86:
                    92:49:bc:4e:68:16:91:7f:28:29:2d:59:01:9d:d6:
                    36:f2:74:b2:ac:15:8f:9c:13:50:f5:bb:5a:64:e0:
                    05:fb:b3:e8:ef:73:f9:c0:16:e6:95:b5:2f:54:43:
                    c1:51:9e:3f:8d:9f:3d:0a:fc:92:e5:61:c8:94:43:
                    6c:4c:48:30:fc:e0:4c:f7:cc:fc:c0:90:05:03:06:
                    23:26:7f:91:72:69:08:98:67:6c:d7:e8:60:65:83:
                    0d:15:87:2a:0b:1e:2f:1b:30:65:21:8d:9a:e1:ae:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:49:4E:35:0B:A1:01:A1:4B:EB:3F:33:2D:E0:25:90:77:09:C4:B3
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/903c59bc-cabc-47eb-8860-bcf9a87d7a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafc:ffa0::/46

    Signature Algorithm: sha256WithRSAEncryption
         0e:e4:2b:ef:59:7a:62:99:02:28:6c:2e:aa:91:43:c4:d5:47:
         9f:06:d0:ec:85:11:ea:fe:a8:93:87:d3:49:00:28:3c:6a:e4:
         e1:fd:35:2f:0c:28:e9:23:64:f8:4f:f9:6f:fc:c7:49:37:9b:
         86:1e:e2:49:e2:a6:aa:b6:46:80:b9:a0:87:af:01:83:c7:31:
         b5:41:ae:95:28:bc:f1:a4:12:3b:e5:7b:c8:25:8d:79:34:4d:
         2b:c8:c7:d1:46:ac:08:ed:54:2f:e3:d1:ba:f7:62:25:5b:54:
         38:ed:20:8c:c1:27:f1:99:ec:8a:60:11:98:19:24:92:3f:72:
         4d:f0:6e:0d:e4:68:2d:4e:a9:d2:a9:fc:43:d6:5b:90:b9:be:
         55:8d:c2:a5:59:70:3e:2e:51:ae:a6:3e:72:8a:73:e6:88:bd:
         64:4e:3a:79:29:6a:70:08:8c:cd:4b:9e:2d:13:74:75:51:6f:
         3e:00:e5:94:6b:e6:bf:38:34:4a:5a:7e:7b:5f:84:16:bb:f3:
         c7:36:74:3e:f2:d1:d8:47:5c:32:ba:ab:43:44:21:1a:54:57:
         4c:bc:f5:0a:a2:c2:bf:39:ac:35:16:8a:7f:0a:f6:b4:f0:09:
         db:b9:09:55:ee:be:85:b9:cd:be:67:d0:61:3a:22:f3:ec:23:
         23:12:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----