Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e396a028-56df-44a9-96dc-503e8cf5f35f.roa
File:                     e396a028-56df-44a9-96dc-503e8cf5f35f.roa (raw, json)
Hash identifier:          lkBFF/Re3z2sEYTsrDCUGmVeHfjnT9PJqzo/cr/w2hY=
Subject key identifier:   C7:ED:7D:41:9B:92:51:4E:2E:16:07:A9:04:BE:24:B2:E3:18:A4:EF
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7D8EEB17AFC5DE95A4C107EAE7622752DE04C360
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e396a028-56df-44a9-96dc-503e8cf5f35f.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da60:6080::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8e:eb:17:af:c5:de:95:a4:c1:07:ea:e7:62:27:52:de:04:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=b07ee3cdca4e23152a89e22c8490badb03e41b08b33a26f70721fed9539b992d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:32:86:ff:59:76:7b:b8:79:98:89:30:3c:3e:
                    2c:71:97:23:dc:6c:91:08:f9:21:95:f1:ee:b3:c8:
                    30:9e:3b:34:d8:39:51:56:3d:75:4c:2e:39:82:d3:
                    43:ae:51:0b:be:48:75:08:5c:02:e8:f0:c6:f4:95:
                    39:35:6a:35:4f:4f:dc:31:af:1b:7e:65:20:db:c4:
                    fe:3f:a2:4a:c5:7e:93:29:9a:d8:af:39:cd:0e:6d:
                    73:d0:8b:7f:bd:94:e7:31:9a:53:80:a1:e9:3c:06:
                    63:89:21:fe:31:78:13:ad:eb:42:3f:f5:1f:22:74:
                    2b:7f:cd:21:07:b6:f7:1f:8c:71:1b:91:2e:f8:bf:
                    11:08:cb:f0:7e:d6:02:06:76:aa:e2:0e:be:e0:33:
                    84:57:d4:d5:d1:55:f8:51:97:15:5b:f5:22:3f:2e:
                    ff:d8:16:c5:2c:ef:d6:33:3e:5c:b4:03:6e:61:d1:
                    2c:f0:20:31:4c:49:e7:22:d8:7c:19:85:d9:90:97:
                    4d:a4:8f:2f:60:08:aa:b7:c6:f3:55:32:fb:17:f4:
                    42:1a:41:e7:31:82:fc:d6:86:94:85:69:63:72:c2:
                    1a:39:45:4f:f3:4d:27:d6:1e:64:9b:ba:ca:c6:0e:
                    35:6b:eb:60:41:8c:33:4a:d8:76:37:6b:1a:46:e4:
                    ba:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:ED:7D:41:9B:92:51:4E:2E:16:07:A9:04:BE:24:B2:E3:18:A4:EF
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e396a028-56df-44a9-96dc-503e8cf5f35f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da60:6080::/46

    Signature Algorithm: sha256WithRSAEncryption
         ab:65:d9:87:4f:0c:43:62:0c:84:af:fe:d6:4f:bb:e6:ae:6e:
         00:e8:d2:80:57:d4:3f:10:4b:ee:f9:81:12:84:16:50:27:2f:
         ab:48:0d:c3:d8:fd:95:17:3b:0b:32:8d:e3:cd:74:d5:a7:89:
         b6:a2:e5:68:f3:90:3d:c7:bc:8f:9b:0b:4a:28:a3:d6:20:16:
         f1:d3:20:db:ce:3e:e2:38:a6:22:65:ea:b2:95:a8:09:ea:49:
         85:1f:0c:98:87:44:eb:89:7c:92:0d:fc:76:08:3c:eb:4a:1d:
         1e:03:19:77:c3:0d:07:f8:40:a1:f0:9c:a8:92:c4:19:bb:a7:
         df:1b:78:ac:fa:b1:ff:67:a5:87:da:06:99:35:7a:ab:4d:69:
         6e:62:d0:99:e9:4f:7d:01:48:8b:33:2f:59:89:c3:05:4d:7a:
         a3:e1:cb:b1:c9:a0:4b:5c:ef:f0:0c:b9:62:66:8f:27:1b:f4:
         08:e5:5a:a2:96:8b:6e:ca:dd:a8:51:e8:65:30:61:eb:17:dc:
         10:60:3f:af:aa:26:0d:14:3a:3a:6e:01:a7:a7:ec:2f:82:bc:
         9d:e0:0e:95:47:3b:78:d4:f3:f8:44:96:80:33:74:17:bb:bf:
         45:c9:d2:ab:8b:32:de:3d:fa:57:f8:76:e3:d8:1a:2d:4d:47:
         99:44:02:76
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUfY7rF6/F3pWkwQfq52InUt4Ew2AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAYjA3ZWUzY2RjYTRlMjMxNTJhODll
MjJjODQ5MGJhZGIwM2U0MWIwOGIzM2EyNmY3MDcyMWZlZDk1MzliOTkyZDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jKG/1l2e7h5mIkwPD4scZcj3GyR
CPkhlfHus8gwnjs02DlRVj11TC45gtNDrlELvkh1CFwC6PDG9JU5NWo1T0/cMa8b
fmUg28T+P6JKxX6TKZrYrznNDm1z0It/vZTnMZpTgKHpPAZjiSH+MXgTretCP/Uf
InQrf80hB7b3H4xxG5Eu+L8RCMvwftYCBnaq4g6+4DOEV9TV0VX4UZcVW/UiPy7/
2BbFLO/WMz5ctANuYdEs8CAxTEnnIth8GYXZkJdNpI8vYAiqt8bzVTL7F/RCGkHn
MYL81oaUhWljcsIaOUVP800n1h5km7rKxg41a+tgQYwzSth2N2saRuS6KwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFMftfUGbklFOLhYHqQS+JLLjGKTvMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2UzOTZhMDI4LTU2ZGYtNDRhOS05NmRjLTUwM2U4Y2Y1ZjM1Zi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAbaYGCAMA0GCSqGSIb3DQEBCwUAA4IBAQCrZdmHTwxDYgyEr/7W
T7vmrm4A6NKAV9Q/EEvu+YEShBZQJy+rSA3D2P2VFzsLMo3jzXTVp4m2ouVo85A9
x7yPmwtKKKPWIBbx0yDbzj7iOKYiZeqylagJ6kmFHwyYh0TriXySDfx2CDzrSh0e
Axl3ww0H+ECh8JyoksQZu6ffG3is+rH/Z6WH2gaZNXqrTWluYtCZ6U99AUiLMy9Z
icMFTXqj4cuxyaBLXO/wDLliZo8nG/QI5Vqilotuyt2oUehlMGHrF9wQYD+vqiYN
FDo6bgGnp+wvgryd4A6VRzt41PP4RJaAM3QXu79FydKrizLePfpX+Hbj2BotTUeZ
RAJ2
-----END CERTIFICATE-----