Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/99a7bf67-88f7-4525-956c-f159e5b9e76e.roa
File:                     99a7bf67-88f7-4525-956c-f159e5b9e76e.roa (raw, json)
Hash identifier:          SyscEuDVAOPkX8U8YMAhGaKvZOFFm5EdjBPZml9HpMY=
Subject key identifier:   B8:38:98:76:C4:93:E9:DF:FA:7C:A0:97:95:BA:9E:B4:4C:2B:E1:17
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       17423D87611F2A74C999302AF4499E31B5B1E57F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/99a7bf67-88f7-4525-956c-f159e5b9e76e.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        43.219.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:42:3d:87:61:1f:2a:74:c9:99:30:2a:f4:49:9e:31:b5:b1:e5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=80db7c21128e828ebf751ee956b26d5833460997d3133ea800e811960ed7ff6a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:ef:cf:65:16:58:c5:cb:43:80:24:67:f9:
                    ab:a3:ab:bf:c8:9c:85:c2:10:76:b4:a3:75:61:d5:
                    0c:c1:4c:b9:53:fd:56:38:1a:30:0c:4f:75:b3:88:
                    be:b3:b2:f5:d5:9d:94:33:64:d6:2e:cc:d0:4d:e9:
                    3b:f9:63:5f:78:e2:f3:f2:da:bd:77:aa:66:25:e8:
                    3c:70:52:27:17:0e:28:15:7e:cb:8d:4b:e1:ff:6e:
                    86:45:18:b5:a9:0e:4c:ec:ab:35:06:ca:26:4c:02:
                    b7:20:df:9e:b0:da:43:ac:17:11:da:9e:89:11:81:
                    5a:ed:2a:84:fa:6e:bf:cf:2b:2e:fc:17:38:f7:75:
                    56:73:80:0d:68:62:02:72:58:a1:f8:89:89:cf:4c:
                    84:bb:14:d3:2a:26:95:79:4e:08:c1:bf:9a:69:dd:
                    0d:f9:ec:16:08:18:62:a4:b7:56:9a:1a:11:6e:ea:
                    2b:a0:b9:db:96:36:15:be:90:f0:ab:59:50:dc:c3:
                    5d:aa:c0:76:5f:f6:4f:f7:98:a7:46:59:d2:12:48:
                    26:14:d9:11:44:86:bf:44:fc:38:7e:89:5a:18:0e:
                    a1:34:66:ff:2d:6c:04:47:87:18:a0:7d:e5:1e:ba:
                    c9:d8:ba:f9:34:96:36:27:38:50:87:3d:3a:9d:d4:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:38:98:76:C4:93:E9:DF:FA:7C:A0:97:95:BA:9E:B4:4C:2B:E1:17
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/99a7bf67-88f7-4525-956c-f159e5b9e76e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:de:8e:c9:40:77:98:53:8d:f5:90:da:e3:ae:50:59:1d:04:
         28:39:d8:a5:48:a4:24:9e:03:90:63:5c:15:f1:56:ee:fa:03:
         0b:23:5b:1b:45:01:44:58:d4:74:c1:9e:84:7e:ea:ae:eb:59:
         fb:00:54:49:09:46:2b:47:de:3d:ce:c9:af:2f:40:45:82:e2:
         c8:83:eb:b0:1c:02:f3:6b:77:05:14:fc:0a:13:0e:19:3b:9f:
         b1:99:3d:a7:58:86:b8:a9:05:6f:65:9c:32:5c:35:11:09:a6:
         39:d5:0c:dc:bc:eb:52:d5:d4:52:e9:73:fc:a5:06:cb:7c:56:
         e6:f4:25:45:38:02:1f:90:9a:87:82:8b:f6:15:39:79:03:2d:
         8f:14:9e:ac:72:04:ba:88:b9:a2:aa:f0:7f:42:0e:4a:d3:06:
         7e:aa:fb:fd:1b:92:af:31:14:82:68:ff:11:b3:66:e1:ab:01:
         ea:1d:74:09:97:8a:ef:ec:c7:52:73:11:e9:75:46:1a:1c:23:
         0e:ed:e2:a0:19:a6:49:f0:95:d1:c4:d2:c9:82:0d:25:16:f2:
         c1:43:90:f6:8c:3f:71:d1:87:76:b0:4a:76:5d:1b:49:03:a9:
         6c:f4:a7:fd:82:f2:29:56:6f:9e:02:c4:52:7a:b0:52:2e:84:
         e9:55:f7:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----