Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa
File:                     bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa (raw, json)
Hash identifier:          8Dg3lE0ZfVVb+ac0sLRj4/OKvTq4b3wBkiH07oCrKPo=
Subject key identifier:   4B:88:BD:D8:AE:F1:36:8F:16:B8:B5:76:F4:1B:DA:4F:F5:95:9D:E7
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       15D8A013B20A7AEE7112231631219D894DCDBEC7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa
Signing time:             Wed 18 Dec 2024 00:00:00 +0000
ROA not before:           Wed 18 Dec 2024 00:00:00 +0000
ROA not after:            Wed 22 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf0:f000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d8:a0:13:b2:0a:7a:ee:71:12:23:16:31:21:9d:89:4d:cd:be:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 18 00:00:00 2024 GMT
            Not After : Jan 22 23:59:59 2025 GMT
        Subject: serialNumber=ccf29af87136e218c9ca405ade5d2118ab0e1db90d39bf1a73e31d82674170cc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:1d:be:bc:f9:39:b5:36:29:13:1a:54:f0:
                    2f:33:0b:f4:dd:53:82:be:aa:c8:00:49:92:57:ce:
                    55:1e:49:34:9a:8c:b1:09:55:31:4b:bf:ac:7b:41:
                    da:cc:23:2c:06:a0:c1:a1:28:07:76:d7:91:d3:34:
                    fa:31:62:b2:d1:0c:d3:6b:86:e3:e3:d4:4f:28:68:
                    b7:63:23:09:db:94:ae:84:04:d3:be:fc:13:64:d1:
                    95:62:5e:48:84:e9:23:4a:66:dc:5f:2c:87:2c:27:
                    6d:5f:54:06:b7:c3:63:b3:80:8e:ae:0c:8d:46:0c:
                    71:ca:03:22:8f:77:8d:eb:39:a5:33:6c:a2:a4:5e:
                    d1:f2:02:46:c1:a9:aa:31:a7:fd:9a:88:1a:a9:a1:
                    58:0e:10:71:e3:b0:87:ac:59:a2:e2:84:ea:56:be:
                    8a:1f:06:a7:84:75:0d:ff:32:87:a9:86:67:a3:2b:
                    1a:7d:28:94:69:73:45:e3:1b:e7:ac:fd:8f:3c:4c:
                    43:53:f0:aa:08:61:45:ab:f3:0b:bd:47:b6:28:2b:
                    a1:7b:c0:92:bb:f3:f3:7a:fe:28:b7:6e:8e:dd:4b:
                    aa:92:97:23:da:50:c5:80:fd:b0:16:f8:cb:b3:67:
                    4a:09:cc:57:00:43:63:be:a9:b5:6f:49:e9:fa:e4:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:88:BD:D8:AE:F1:36:8F:16:B8:B5:76:F4:1B:DA:4F:F5:95:9D:E7
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf0:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:24:fe:c7:27:37:79:53:66:43:5b:b5:c0:dd:fb:f2:02:c3:
         9a:0e:42:12:7b:6e:f5:83:03:9c:d7:45:5c:86:ad:d9:ae:c2:
         ed:5b:ec:a9:dc:ce:4a:6d:f0:df:42:a0:e5:ae:79:1b:92:44:
         80:32:fd:06:d7:b0:16:0e:23:96:0d:76:f4:d5:55:5e:72:8b:
         99:ca:37:73:23:cf:57:77:29:48:d1:32:4c:34:b8:40:6b:16:
         6d:2d:43:7f:c4:b7:b9:49:39:1f:d1:d0:ba:18:ed:38:50:79:
         3c:d8:76:a8:48:2e:c9:f5:e8:c8:f2:d0:69:12:1c:39:58:88:
         d4:6e:d6:72:d1:38:44:70:2b:bf:97:e9:b3:f1:6a:fb:5a:69:
         92:f8:2f:c3:59:10:cd:00:8a:08:f7:c3:25:3f:c7:38:06:54:
         aa:82:47:af:c5:7e:e5:b5:a2:2a:2e:ce:09:24:7d:61:d2:6c:
         95:c0:e3:09:b2:57:6b:53:25:b9:0c:87:04:d0:71:65:7a:1b:
         58:55:fd:94:b2:21:a4:25:77:a3:e2:c9:6a:0a:e3:d6:be:91:
         20:86:1b:27:a2:bb:5c:56:a2:41:1e:38:31:e1:74:8f:06:79:
         85:38:13:3c:9b:0e:e0:f4:e2:d1:d0:cd:23:06:57:ac:36:7f:
         9a:98:73:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----