Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ea5bba9-3ea5-45a2-9f7b-a01a1e891a0c.roa
File:                     9ea5bba9-3ea5-45a2-9f7b-a01a1e891a0c.roa (raw, json)
Hash identifier:          mDhMrUeOdDOzb+0BhGaH8jDN3Kcy5LL+YKQfFLj3lz0=
Subject key identifier:   13:DC:20:B3:2C:02:71:55:33:98:C7:C6:BD:0A:98:1D:35:E9:1E:04
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6F62FB6D1F4D5408EDB0F3E95D9E9521BEE805D0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ea5bba9-3ea5-45a2-9f7b-a01a1e891a0c.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da68:8840::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:62:fb:6d:1f:4d:54:08:ed:b0:f3:e9:5d:9e:95:21:be:e8:05:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e6465258e0c764b8753031f041fdb13026d5a26d18c0054488d42b73af426b95, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:3b:98:ae:2b:ce:43:79:fe:d3:5d:10:d2:
                    eb:eb:8d:8e:c6:43:7d:cf:09:a4:9c:5a:92:09:69:
                    a8:4e:3c:4d:06:71:ab:af:49:cc:c1:0b:1c:ad:1e:
                    b9:62:3a:61:29:48:80:4d:39:c8:1d:33:6d:e0:0f:
                    0c:8f:ac:64:fa:5a:a4:eb:12:9d:07:e0:e8:11:18:
                    9e:8c:71:2b:ba:cb:7d:1d:ea:0f:62:e0:b7:e0:40:
                    7c:08:8b:7c:53:1e:f4:00:8a:98:d0:7b:d0:6c:75:
                    50:ed:4f:9d:b4:fe:bb:c5:c5:d7:69:51:be:58:a9:
                    f7:11:1f:be:3f:25:99:9f:48:57:cd:26:c8:ed:c0:
                    ea:41:bd:f7:3d:4f:5c:07:80:46:cb:51:ed:a5:9d:
                    96:97:84:71:95:2c:b1:23:3f:ab:6c:73:1a:6a:3c:
                    5f:4c:05:08:78:6e:9c:e6:19:38:24:33:4d:3e:50:
                    c6:f5:54:9a:7e:1d:f6:e0:61:3b:73:b2:30:8d:60:
                    4f:df:3b:c9:13:a3:f2:c9:e5:63:6f:4f:ff:d5:84:
                    d0:d1:ed:60:61:18:fd:3a:39:b0:76:01:cb:9e:51:
                    f7:42:fc:e3:2c:ec:25:57:27:fc:3d:5e:a3:a6:0d:
                    df:73:06:64:84:a7:cd:39:9b:e9:7e:b4:58:25:89:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DC:20:B3:2C:02:71:55:33:98:C7:C6:BD:0A:98:1D:35:E9:1E:04
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ea5bba9-3ea5-45a2-9f7b-a01a1e891a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da68:8840::/46

    Signature Algorithm: sha256WithRSAEncryption
         15:fb:b0:f9:aa:d3:b9:06:4a:67:93:80:90:b6:aa:f1:05:84:
         22:b7:31:79:63:90:0a:fd:e1:8c:77:f9:34:f7:80:77:97:fb:
         69:80:bf:2a:ab:20:cb:af:85:9b:36:18:d5:04:09:71:f9:63:
         c7:b8:61:7e:ab:5b:12:05:ab:ac:d2:bd:16:dc:55:58:4f:ae:
         1d:2d:53:72:d1:57:c3:4e:c4:58:34:5f:d5:da:b3:30:7e:47:
         74:62:ed:ad:57:2c:3e:e4:6d:32:ca:64:b8:6c:02:b8:b2:6f:
         fa:b5:29:85:83:cd:b1:9b:cb:b8:93:b4:37:1d:59:3f:65:3b:
         5f:b9:ae:04:52:00:4d:d8:c8:07:0a:d0:d1:7c:47:d5:26:2d:
         23:60:81:9a:9d:15:20:bd:45:f1:11:21:41:c7:3d:81:3c:44:
         8e:93:14:04:8e:b7:5f:a7:2b:aa:ec:b4:80:b8:d8:1d:a1:b7:
         3a:f4:29:53:98:b4:25:a0:18:64:1a:ea:76:32:7e:91:e6:52:
         c2:e2:09:8c:01:c2:a7:6a:1a:c4:63:25:86:d6:84:cf:fc:13:
         61:34:36:ca:50:27:5f:3b:47:19:68:a7:26:8a:37:ed:63:53:
         9e:1d:20:08:3d:3f:1c:33:47:b4:89:d9:ce:4c:8b:8c:8f:c5:
         73:29:13:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----