Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c83c32ac-afed-4df9-a68f-16d5cbe4e134.roa
File:                     c83c32ac-afed-4df9-a68f-16d5cbe4e134.roa (raw, json)
Hash identifier:          8xMu4Y2UHNyB/lhdBinUEY9TNADhzTHIOc1qxh6pvpY=
Subject key identifier:   C0:18:62:F1:90:63:0F:A3:14:43:F5:83:75:C7:38:63:79:B5:55:28
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3C459CD5F5CD1D8B74AD4D9246685C8BBE3D51C7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c83c32ac-afed-4df9-a68f-16d5cbe4e134.roa
Signing time:             Sat 14 Dec 2024 00:00:00 +0000
ROA not before:           Sat 14 Dec 2024 00:00:00 +0000
ROA not after:            Sat 18 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:45:9c:d5:f5:cd:1d:8b:74:ad:4d:92:46:68:5c:8b:be:3d:51:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 14 00:00:00 2024 GMT
            Not After : Jan 18 23:59:59 2025 GMT
        Subject: serialNumber=09770b98f4524761936f486c5b175de60626a2a846d38dc55c32546b3c41ceff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:90:91:b4:fc:82:ce:2b:47:23:8c:88:15:
                    8a:f1:32:fe:26:df:19:97:aa:e9:31:4f:18:a2:60:
                    22:1d:40:fe:b7:4d:46:62:1a:8d:8d:e5:b3:f0:c3:
                    40:47:80:2c:c7:e4:8d:9b:1d:a1:13:a2:c1:0f:26:
                    a3:c7:e3:d1:cb:1e:c2:e4:9d:66:8b:5b:c9:31:db:
                    2a:5d:35:41:52:d0:2d:e3:af:bb:8c:22:0b:a7:73:
                    1b:92:bd:33:ec:4b:b5:d6:22:2b:95:36:03:f9:61:
                    dc:08:0e:c4:49:a8:11:6a:08:36:ce:5a:2e:30:96:
                    58:13:78:bd:e1:cf:7b:b8:fd:ba:c7:92:2f:da:27:
                    d0:2b:ce:01:b2:ff:5e:02:ff:11:97:39:a9:94:b4:
                    70:18:bc:ac:ea:6a:94:f0:9c:09:98:2c:d9:ba:36:
                    76:70:5d:1d:8a:68:fc:9b:64:4e:7b:ef:09:51:79:
                    93:66:0a:9f:eb:c7:10:ee:18:3c:de:76:ae:3b:16:
                    90:16:d7:3f:2b:84:70:d3:1c:e2:90:dd:8b:82:a4:
                    71:32:3a:10:1a:ff:d0:29:40:a2:92:37:ab:e3:b7:
                    00:14:2b:2b:40:38:1e:e7:2a:aa:b1:a0:cc:4d:f7:
                    96:5e:08:d2:97:28:ae:ca:fc:bd:46:4e:32:f6:58:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:18:62:F1:90:63:0F:A3:14:43:F5:83:75:C7:38:63:79:B5:55:28
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c83c32ac-afed-4df9-a68f-16d5cbe4e134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:30:4d:f6:8a:11:e2:11:e4:d8:32:68:12:b4:78:12:89:2e:
         4c:96:b9:0b:70:c5:e8:4e:19:3c:5b:d7:3b:27:18:63:b9:68:
         a1:94:44:de:59:f4:b3:e2:71:02:6b:72:a8:6a:4e:7d:a8:71:
         af:27:13:00:26:dd:85:d6:d7:6e:67:53:62:47:55:ba:9a:82:
         8f:2c:96:47:1f:01:71:62:c2:fd:41:76:f4:24:b6:09:58:ad:
         0c:49:57:46:ca:8e:63:68:61:62:36:72:24:ee:02:6e:f4:c9:
         2d:c9:dc:49:ef:f4:68:a4:04:e1:b9:f7:63:15:6b:a0:97:f1:
         26:49:3f:30:ac:db:7a:8b:98:2b:66:1f:c3:64:6a:7c:da:97:
         b3:20:0d:3d:d8:35:ce:78:2d:19:9c:79:9d:e4:0c:be:40:8f:
         d6:fe:af:ff:a8:55:06:f3:4d:1b:c1:92:a4:19:c1:8c:96:5f:
         b5:ca:d0:54:38:ff:a9:b3:4d:3d:74:93:05:c6:f7:a3:0c:81:
         3c:80:1f:98:8b:dd:4d:66:7d:56:a8:a5:0c:b5:77:f3:6d:aa:
         40:f5:57:5f:64:7e:c4:49:4b:dc:84:71:20:e5:e8:22:1c:0f:
         88:4a:86:a2:9a:73:32:ef:3f:34:6a:56:3b:7d:1f:95:de:3e:
         7c:43:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----