Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1333e17-04fe-4e6d-bd71-2a9ac1fe867f.roa
File:                     d1333e17-04fe-4e6d-bd71-2a9ac1fe867f.roa (raw, json)
Hash identifier:          IvRPF+EVHaNFZFOUzUuxjfdwnrIgKp+YDX3qqL/Lxes=
Subject key identifier:   DF:CC:15:C4:D5:CA:22:26:7B:C6:AE:CD:1E:3C:2A:F5:CE:6A:A2:7E
Certificate issuer:       /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial:       2918C505DE9093A5261A84A7F5CB101C02D6432F
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1333e17-04fe-4e6d-bd71-2a9ac1fe867f.roa
Signing time:             Fri 13 Dec 2024 00:00:00 +0000
ROA not before:           Fri 13 Dec 2024 00:00:00 +0000
ROA not after:            Fri 17 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        159.248.128.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:18:c5:05:de:90:93:a5:26:1a:84:a7:f5:cb:10:1c:02:d6:43:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
        Validity
            Not Before: Dec 13 00:00:00 2024 GMT
            Not After : Jan 17 23:59:59 2025 GMT
        Subject: serialNumber=886d1cecd479e1ea161d4f1fd9d29402e7557307c0e16387d6e4fa2fd084ce26, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:f3:26:ec:49:74:5f:95:93:20:65:71:65:
                    21:45:2c:2c:45:bd:68:84:d8:8f:c1:10:00:e2:31:
                    fb:c3:d0:eb:e7:b3:77:80:9f:a0:56:93:f4:ba:ff:
                    b1:a9:25:ab:b7:f5:ef:1b:1b:ee:0c:49:ab:ac:1c:
                    f2:3b:fc:83:c8:94:46:4d:40:83:d7:1e:84:6b:c9:
                    3d:c0:7b:68:aa:3a:08:04:09:d0:ea:1e:b1:62:6f:
                    69:37:8b:70:92:4c:ab:cf:65:76:bb:5d:70:00:48:
                    28:7e:33:8b:54:f2:25:ac:96:1e:44:ee:ec:04:0b:
                    57:dc:34:57:26:fe:7c:53:88:bf:bd:67:47:ef:58:
                    e9:98:7d:af:89:56:ab:e9:5a:c7:e6:34:46:f4:21:
                    c8:b4:41:e2:3f:c4:77:71:de:19:d8:93:e8:0c:28:
                    61:e3:d3:d2:d8:76:5a:60:9f:96:66:29:f4:3d:32:
                    39:ed:2e:90:84:71:21:48:f8:49:b0:b1:4b:44:27:
                    c5:29:25:9d:46:3a:eb:56:6a:40:2e:ce:e4:94:86:
                    2c:58:d0:93:86:e4:13:80:e3:c1:b8:66:32:94:85:
                    9b:29:e6:1a:22:f4:1e:96:f8:ee:62:91:ee:22:d6:
                    5b:4d:96:cc:0b:48:ab:20:a7:dd:9d:99:e4:1d:cd:
                    51:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CC:15:C4:D5:CA:22:26:7B:C6:AE:CD:1E:3C:2A:F5:CE:6A:A2:7E
            X509v3 Authority Key Identifier:
                keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1333e17-04fe-4e6d-bd71-2a9ac1fe867f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.248.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:ce:93:73:ea:9f:3f:a0:b0:7f:18:6a:5c:5c:cc:e6:62:27:
         7c:dc:62:2b:2a:0d:29:f4:08:6a:d3:fa:96:e4:b4:9e:3b:42:
         0b:ed:6d:5a:91:e3:2d:86:6c:f9:bc:2a:86:4d:78:40:ff:86:
         99:94:d6:c2:ed:16:37:1e:57:59:f3:30:b0:ae:83:05:fe:a8:
         fc:0d:a2:73:df:33:bf:71:b5:82:c0:2a:67:4b:48:80:37:29:
         cf:82:5e:cc:9c:ef:35:28:07:78:ad:b8:47:6d:5b:23:33:26:
         ea:8f:4c:77:ea:07:21:eb:08:e2:b0:d1:66:b9:8d:21:7f:33:
         1e:48:3e:b5:4c:77:9e:12:c8:d9:25:d2:9b:cf:b9:e3:54:81:
         09:a4:c7:ca:b7:8a:13:34:5f:44:74:21:63:fe:d4:4e:b1:3b:
         73:2f:a8:73:c6:23:71:9b:45:79:f9:7b:c3:b3:8a:ca:cb:44:
         cb:e0:39:50:28:65:3f:8c:33:c1:5d:e2:3c:ac:ee:98:67:77:
         a2:0d:d8:34:be:28:f8:b5:6f:21:b3:6d:12:a3:4a:b2:4e:9e:
         d3:f8:d8:e1:8b:8a:d8:e6:5d:6d:ef:fc:0b:e0:11:ea:bc:5a:
         71:55:cb:1c:16:49:21:5d:d8:e2:ef:97:21:e7:d4:41:e5:75:
         6f:ef:07:a4
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIUKRjFBd6Qk6UmGoSn9csQHALWQy8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG
QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI0MTIxMzAwMDAwMFoX
DTI1MDExNzIzNTk1OVowejFJMEcGA1UEBRNAODg2ZDFjZWNkNDc5ZTFlYTE2MWQ0
ZjFmZDlkMjk0MDJlNzU1NzMwN2MwZTE2Mzg3ZDZlNGZhMmZkMDg0Y2UyNjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygbzJuxJdF+VkyBlcWUhRSwsRb1o
hNiPwRAA4jH7w9Dr57N3gJ+gVpP0uv+xqSWrt/XvGxvuDEmrrBzyO/yDyJRGTUCD
1x6Ea8k9wHtoqjoIBAnQ6h6xYm9pN4twkkyrz2V2u11wAEgofjOLVPIlrJYeRO7s
BAtX3DRXJv58U4i/vWdH71jpmH2viVar6VrH5jRG9CHItEHiP8R3cd4Z2JPoDChh
49PS2HZaYJ+WZin0PTI57S6QhHEhSPhJsLFLRCfFKSWdRjrrVmpALs7klIYsWNCT
huQTgOPBuGYylIWbKeYaIvQelvjuYpHuItZbTZbMC0irIKfdnZnkHc1RTwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFN/MFcTVyiIme8auzR48KvXOaqJ+MB8GA1UdIwQY
MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt
alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2QxMzMzZTE3LTA0ZmUtNGU2ZC1iZDcxLTJhOWFjMWZlODY3Zi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCn/iAMA0GCSqGSIb3DQEBCwUAA4IBAQBXzpNz6p8/oLB/GGpcXMzm
Yid83GIrKg0p9Ahq0/qW5LSeO0IL7W1akeMthmz5vCqGTXhA/4aZlNbC7RY3HldZ
8zCwroMF/qj8DaJz3zO/cbWCwCpnS0iANynPgl7MnO81KAd4rbhHbVsjMybqj0x3
6gch6wjisNFmuY0hfzMeSD61THeeEsjZJdKbz7njVIEJpMfKt4oTNF9EdCFj/tRO
sTtzL6hzxiNxm0V5+XvDs4rKy0TL4DlQKGU/jDPBXeI8rO6YZ3eiDdg0vij4tW8h
s20So0qyTp7T+Njhi4rY5l1t7/wL4BHqvFpxVcscFkkhXdji75ch59RB5XVv7wek
-----END CERTIFICATE-----