Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cb054982-8e3c-42f7-baf6-2e3d775592a7.roa
File:                     cb054982-8e3c-42f7-baf6-2e3d775592a7.roa (raw, json)
Hash identifier:          kVOv0CZIuSQGd9pw/XLFLlZqNpUwrx8MichVEodBUB0=
Subject key identifier:   0B:F6:5F:B2:E4:3E:52:FE:35:98:12:E7:B3:E8:10:22:42:C4:35:4E
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       774FCBF265C6E3E0E4F48C11B2F27435FCA1EBE8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cb054982-8e3c-42f7-baf6-2e3d775592a7.roa
Signing time:             Wed 18 Dec 2024 00:00:00 +0000
ROA not before:           Wed 18 Dec 2024 00:00:00 +0000
ROA not after:            Wed 22 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da1b::/36 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4f:cb:f2:65:c6:e3:e0:e4:f4:8c:11:b2:f2:74:35:fc:a1:eb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 18 00:00:00 2024 GMT
            Not After : Jan 22 23:59:59 2025 GMT
        Subject: serialNumber=d00e51cdce1253cb151663a80847c43140cf81fef8d21fda91f5d29a43be6ee2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:dc:39:26:cd:b5:7d:bf:44:d6:59:58:2a:
                    a8:c7:8b:4b:00:22:e9:76:34:5d:2c:0f:01:f0:1d:
                    e2:34:22:2c:4b:19:e4:f9:9f:d1:90:0d:3f:65:b6:
                    5b:6a:26:92:3c:95:46:49:de:94:5f:6f:bd:ae:0f:
                    53:1d:2e:4b:ea:fc:89:bb:4a:45:c0:ea:19:3c:4a:
                    33:82:5b:59:2a:da:32:88:25:2e:79:c1:7f:f0:fa:
                    0e:20:e8:30:85:35:73:7b:c5:c6:52:27:67:03:cb:
                    52:d6:a3:3c:4e:37:9a:66:f1:51:ea:0c:e1:90:eb:
                    a4:90:02:0b:82:33:d1:5b:03:55:4b:c3:c6:b8:3a:
                    53:5b:04:ef:1f:0f:9d:6f:51:da:87:b5:a1:01:58:
                    74:ee:b0:5a:c6:fb:03:e1:ae:7c:1b:fd:7f:e7:1f:
                    dc:bd:38:15:d5:5c:11:69:3d:ea:30:aa:11:c6:98:
                    30:00:30:b4:19:ce:f2:3f:08:6e:19:62:e2:86:80:
                    d3:e0:29:97:5d:00:33:00:20:6b:9a:0b:db:c7:5c:
                    3a:8f:4f:ff:1d:f1:61:cb:90:c0:cd:5c:25:67:60:
                    57:9f:8b:70:61:3c:c3:30:28:f3:64:40:3b:98:fe:
                    af:78:22:21:13:46:6e:9c:02:ab:96:9f:2a:a9:f5:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F6:5F:B2:E4:3E:52:FE:35:98:12:E7:B3:E8:10:22:42:C4:35:4E
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cb054982-8e3c-42f7-baf6-2e3d775592a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da1b::/36

    Signature Algorithm: sha256WithRSAEncryption
         7c:b4:49:fe:34:00:f7:92:3c:87:ce:76:51:22:16:2b:3a:82:
         24:e7:4f:80:5f:d1:e0:a8:9d:ac:d0:8c:aa:13:43:15:23:c5:
         b0:23:39:c4:3b:d7:a2:f8:6c:8d:63:cc:b1:ab:a0:ae:27:f9:
         e7:77:3f:32:e7:91:b1:43:6a:52:90:9c:c9:18:7b:2c:56:f1:
         e1:23:70:c9:f7:1d:59:b7:76:b2:46:a1:ef:f8:55:ac:35:23:
         b2:9f:c4:f3:bc:cd:f7:f1:3b:11:b8:0b:d6:29:c3:bb:84:d9:
         85:86:e7:26:53:5d:45:c6:a9:8d:4c:bb:4f:32:51:b4:a3:5b:
         67:b5:4f:12:d0:7f:b0:92:a5:ef:d5:53:09:59:b7:45:6d:30:
         21:47:55:5d:f3:ca:3a:5b:bc:59:36:56:e2:70:5d:63:bb:0b:
         15:f3:63:b0:d8:30:a3:f0:ee:c5:2d:76:cb:8a:cf:ee:3b:71:
         a0:1c:f0:88:9d:97:db:0f:38:3d:64:3b:47:41:57:02:d8:2c:
         68:36:00:ef:fd:1d:c8:7a:eb:8b:9d:29:66:bd:4c:3b:6d:d8:
         3e:1b:ea:5f:9c:3e:92:f3:e1:bc:7e:4f:9d:13:3b:9f:f9:31:
         a9:08:d3:a9:7c:c2:1e:6d:ec:33:14:7b:c3:b3:82:9b:cb:53:
         fd:26:b7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----