Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b81ad493-1f3b-421d-8c43-f9ccfdf997a3.roa
File:                     b81ad493-1f3b-421d-8c43-f9ccfdf997a3.roa (raw, json)
Hash identifier:          zJoSevpOhl0nXPtYiRYynjQGRR4mfRknJYGJHM8z09c=
Subject key identifier:   2F:77:45:63:07:D4:BC:BE:15:BE:A8:50:40:3E:AB:E7:3D:25:85:EA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       70630342EA90A6B8C39090124A6AB42DFC0BB274
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b81ad493-1f3b-421d-8c43-f9ccfdf997a3.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da70:e000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:63:03:42:ea:90:a6:b8:c3:90:90:12:4a:6a:b4:2d:fc:0b:b2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=99c4ee010d36f0af95b2724b81306aed0e6bb4b97d50322590d7729ea2216f68, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:f9:ce:30:ca:9f:2f:db:c1:39:93:cf:f9:
                    bb:27:51:92:76:d8:47:08:7d:c1:cb:8c:00:75:ab:
                    93:fe:26:63:a5:3b:84:01:9f:a8:e5:13:5d:8e:ad:
                    24:6f:3e:f8:fa:bd:f8:71:05:6e:8f:d7:6f:36:08:
                    49:dd:4a:71:2d:b9:8d:45:f1:17:96:d9:4a:4d:66:
                    fe:30:0e:9b:f9:ec:fb:4a:59:c9:e2:48:04:21:44:
                    80:b9:a6:4f:e0:9f:cf:92:b5:df:eb:bc:a4:9f:29:
                    6d:71:e7:09:bc:1a:2f:61:3d:0d:10:a8:c2:36:25:
                    4a:f5:dc:3c:4a:36:56:cc:d1:14:21:cd:c4:5d:a5:
                    e8:cd:30:57:e5:97:e2:b1:b6:9c:77:7c:fa:68:26:
                    99:7c:c8:3f:dc:a5:ce:e0:37:6a:87:7d:d4:c8:61:
                    68:59:98:d4:d0:6c:9d:18:17:f4:11:c5:98:b7:24:
                    bb:1b:f7:d2:4a:5d:73:36:4f:ae:bd:de:8b:f8:47:
                    e5:93:c6:a9:ca:5c:38:2e:33:6f:ce:86:56:c6:e3:
                    84:4a:46:2a:37:ea:c9:32:3b:fc:0d:b6:50:45:54:
                    1f:03:7f:e0:07:eb:3d:9c:96:21:1f:4b:2b:cf:26:
                    df:27:f3:31:9d:60:83:df:23:67:df:44:59:0d:5a:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:77:45:63:07:D4:BC:BE:15:BE:A8:50:40:3E:AB:E7:3D:25:85:EA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b81ad493-1f3b-421d-8c43-f9ccfdf997a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da70:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:38:e9:16:5e:e5:d2:36:41:2a:b9:32:0a:f3:1e:5b:5e:a1:
         9a:a2:ee:3a:5b:24:a6:de:ff:2e:56:4c:8f:48:72:f4:59:80:
         c4:17:eb:81:40:78:03:e6:b3:f2:75:01:31:76:b7:81:54:d8:
         7d:cd:4c:46:b6:3b:90:4b:8a:d4:ce:db:09:ac:27:93:97:e8:
         79:09:7c:b5:45:df:bd:8e:72:ec:db:72:af:f2:dd:9f:85:5a:
         3e:1d:99:47:21:28:01:20:e6:a1:e4:e3:a7:96:b1:2c:68:83:
         f9:04:4a:36:b2:c9:c1:03:82:4a:3f:3a:cb:3b:89:96:31:c8:
         78:cf:3a:ca:54:79:cb:16:b8:03:b1:53:c5:f8:ef:e0:2e:17:
         02:73:d0:f8:72:98:7c:03:ad:d6:e8:9c:4f:ae:f6:14:27:0a:
         a9:51:3b:e2:1c:63:5c:e5:e2:f0:db:3f:fc:7d:2e:23:eb:5b:
         13:e2:22:23:29:15:d6:46:5d:d3:c6:f8:bc:a0:3a:75:58:5b:
         6b:2c:0a:10:ab:ed:e6:24:56:15:22:39:ce:d7:fb:81:32:3e:
         e1:49:a6:7a:5b:6c:d0:3e:40:15:43:e0:98:af:05:80:b0:ea:
         22:5c:6b:b6:3d:fd:a5:bf:17:f8:45:44:ed:7f:0f:1f:18:cd:
         57:44:5c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----