Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e12ebfb3-de22-49f4-b321-09628178aadd.roa
File:                     e12ebfb3-de22-49f4-b321-09628178aadd.roa (raw, json)
Hash identifier:          Tavl50z0Ag6FtSOd5qr4dmkeuI1tAMNZRkNWeCkaaKI=
Subject key identifier:   06:F2:1E:E9:16:4E:5A:27:80:32:38:F1:42:84:73:3C:65:DE:A1:89
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       51161062399A00C9CD207A2F16C7B99AAB52535D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e12ebfb3-de22-49f4-b321-09628178aadd.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:2800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:16:10:62:39:9a:00:c9:cd:20:7a:2f:16:c7:b9:9a:ab:52:53:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=a253d5fbdc069249dfb79acc996fcf51584c7956c619f8fd0fc013060f3bff83, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:c7:d0:93:76:92:5f:57:cb:f5:46:13:e8:
                    b0:6e:8b:ea:db:03:2e:9e:9e:02:07:83:6f:d3:88:
                    12:66:07:cc:d1:05:12:e8:b2:53:f5:04:52:74:0b:
                    06:9b:e3:ec:64:ab:c2:9b:e4:bd:7a:d0:ad:bd:c8:
                    b3:42:0b:58:9e:a2:f4:55:74:16:49:1d:5b:95:9e:
                    44:fd:0c:98:6d:72:27:a7:3f:a3:5c:3f:97:39:15:
                    d9:9a:c5:67:f5:78:c9:1e:83:4d:d9:1e:b5:2d:3a:
                    56:5b:d3:20:8b:3f:78:37:d5:ee:d1:19:dc:d1:af:
                    db:be:99:ff:e2:fe:ae:49:ef:c4:0c:a0:e3:ab:62:
                    07:e1:c8:44:0f:01:55:84:0d:32:53:b5:fb:b9:08:
                    68:8c:7e:38:90:61:84:ce:62:51:81:77:91:8b:39:
                    f3:eb:79:ab:83:48:00:2a:3a:6e:06:ad:b4:52:03:
                    ac:fa:e2:78:77:f6:31:49:4a:a2:2d:5a:84:05:49:
                    d0:86:e6:7e:94:8c:26:77:be:11:78:38:95:a3:ef:
                    73:2a:42:4b:29:cf:1d:31:bd:09:cf:7c:9b:2e:8c:
                    35:79:53:10:e1:f6:c5:7d:b6:b5:ae:96:97:a0:87:
                    d8:68:40:ea:1f:44:e7:4c:8b:b2:58:63:a5:d9:67:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F2:1E:E9:16:4E:5A:27:80:32:38:F1:42:84:73:3C:65:DE:A1:89
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e12ebfb3-de22-49f4-b321-09628178aadd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:5c:c6:2d:0f:d0:15:10:d1:2d:62:55:a7:5a:38:3a:06:2f:
         5a:71:b9:10:fe:55:86:8d:d3:d5:ab:b9:05:8b:96:f2:1d:e9:
         06:c9:87:01:52:8e:51:c5:f4:2c:3c:13:85:1d:90:e8:03:a8:
         53:4e:43:55:5a:d4:5e:3d:f8:89:7b:1f:d3:a7:f2:e1:86:e1:
         81:83:60:c8:22:d3:84:c1:ae:0a:84:9a:2d:91:ad:8c:ab:a5:
         82:22:7f:a6:c4:58:bc:46:d4:3e:92:fe:2f:88:99:33:29:d0:
         a0:a2:19:72:39:ac:eb:c0:7c:1f:70:6e:a1:e1:8f:be:06:11:
         d5:ae:f2:a3:4e:b9:ef:a8:63:5c:9c:83:ad:b2:2d:b4:59:11:
         1a:74:09:a6:74:23:bf:0c:70:99:d0:ee:e9:a1:7f:af:60:46:
         12:ab:6b:f8:f1:28:3e:f6:1c:98:f5:9a:0b:8d:98:f2:02:d6:
         5c:6b:c7:91:6a:ee:83:e8:7d:26:ad:46:d9:5e:16:ba:34:e9:
         48:b5:d1:a5:67:8f:bb:c5:1d:ea:33:60:35:98:07:92:4c:59:
         ff:55:d7:a5:79:55:1b:b4:43:05:5d:89:05:6b:d7:52:8b:3d:
         78:84:ce:fc:e4:71:d6:de:be:a0:2c:79:4f:91:51:ee:9a:25:
         7c:e5:cc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----