Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d08b8cf2-d259-41d7-9742-c44b7e3b3dac.roa
File:                     d08b8cf2-d259-41d7-9742-c44b7e3b3dac.roa (raw, json)
Hash identifier:          xAFeL1Euv6Wezk5td/xymn4AKTeRHDiuHWonpZGau28=
Subject key identifier:   5F:88:0C:27:7B:AA:E4:93:31:60:C4:67:5C:59:6D:2A:50:EF:2E:C2
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6EE808DA831C7E21CA3ABD0640471C8C75703189
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d08b8cf2-d259-41d7-9742-c44b7e3b3dac.roa
Signing time:             Sat 14 Dec 2024 00:00:00 +0000
ROA not before:           Sat 14 Dec 2024 00:00:00 +0000
ROA not after:            Sat 18 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da70:a000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e8:08:da:83:1c:7e:21:ca:3a:bd:06:40:47:1c:8c:75:70:31:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 14 00:00:00 2024 GMT
            Not After : Jan 18 23:59:59 2025 GMT
        Subject: serialNumber=b9f30b9a70099f1992d993eab7f79c693cdd7fc1ba96f8d1414d2c1567e01273, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:f6:15:f9:13:d8:21:2a:eb:ee:94:ec:2e:
                    7f:95:a3:ab:b4:3c:fd:53:b9:13:3e:8f:e5:10:a0:
                    90:3b:85:ef:a8:6c:7e:3c:9c:ba:59:a4:ef:bb:49:
                    4c:25:a4:7b:8b:ca:80:69:2e:74:32:18:39:85:49:
                    bc:6f:3d:47:63:5e:08:e8:4e:b8:89:3c:75:12:ff:
                    9a:a0:d0:7d:02:59:d5:b8:67:1a:f6:ef:8f:20:30:
                    f5:be:75:d0:e5:ba:00:67:ac:27:f5:72:97:f0:c2:
                    62:9d:63:da:c6:11:49:84:c1:03:96:e1:ee:c8:1e:
                    1c:4c:af:98:3a:31:7f:9b:22:28:c5:13:c5:7a:d3:
                    35:3e:c3:68:0d:af:f4:5c:6f:ee:76:26:6b:4f:f5:
                    03:8a:82:ff:30:c4:8f:62:8b:52:ac:fd:64:83:36:
                    27:6d:13:07:98:18:1d:7c:2b:3e:a7:6c:bc:84:bf:
                    d0:20:7e:c2:67:79:ab:2e:b3:ac:74:26:7e:d0:09:
                    09:a5:b2:71:7a:30:db:4f:a3:7a:fe:ee:40:c8:06:
                    60:a2:8b:2c:9a:f0:13:7d:22:c1:fc:a5:8b:27:a2:
                    5b:3d:c3:20:bb:ca:d3:cf:fd:b4:01:57:6b:a9:61:
                    9d:37:18:bb:1e:26:ad:ea:74:88:08:76:78:3b:a3:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:88:0C:27:7B:AA:E4:93:31:60:C4:67:5C:59:6D:2A:50:EF:2E:C2
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d08b8cf2-d259-41d7-9742-c44b7e3b3dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da70:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:eb:86:02:a1:5b:fb:02:17:17:de:da:af:cb:18:c6:6a:ac:
         c0:32:25:ec:42:77:3f:9f:f1:1a:f6:dd:d9:01:13:ff:3c:ae:
         fa:8c:5f:61:f4:84:dd:df:50:fa:da:64:52:c4:23:e8:ae:97:
         cb:21:51:c3:c4:b3:43:ba:a5:4a:18:1f:6e:2c:e3:e0:ef:99:
         78:08:0b:1a:01:16:4b:d4:57:e8:7a:11:d0:2d:33:05:f1:2a:
         f7:1e:3f:5e:3b:77:a7:f1:fc:5a:8c:d1:10:14:5f:50:2c:c8:
         cf:37:fc:55:e2:bb:63:1f:b5:ce:74:6f:e7:63:9e:56:20:03:
         a3:19:d3:b9:68:8d:1b:7e:31:75:1e:35:4a:9f:a8:d9:80:b8:
         e0:8b:f2:06:81:4e:91:0e:0e:f2:2e:c0:eb:31:f3:71:45:cf:
         f6:c0:d8:aa:93:d1:34:7e:98:7f:8e:48:a6:53:7d:8e:3c:8f:
         9d:95:51:35:e6:32:90:02:65:da:da:c5:60:5c:46:1c:0c:26:
         38:6c:66:21:2c:43:99:a2:3d:38:42:02:2e:95:77:be:cb:8b:
         3c:7c:18:08:fe:79:14:03:a1:58:b5:21:67:bb:d2:9e:1a:7d:
         1a:48:9a:2d:84:fd:2e:54:fb:b9:77:ee:cd:ea:2c:ab:52:62:
         58:ba:28:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----