Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f2be6ec4-c1d5-4686-9a41-2b150cf9ae9d.roa
File:                     f2be6ec4-c1d5-4686-9a41-2b150cf9ae9d.roa (raw, json)
Hash identifier:          Ffqw5Vh1srHvW5XAjockiEOc8aaARXQdyOUzkGsF1cc=
Subject key identifier:   2C:C2:A1:05:FC:F0:50:12:26:26:89:01:63:B7:03:4C:27:63:0C:8A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       708F1CFDDC888D31A896C18F7002A35DD1169FDD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f2be6ec4-c1d5-4686-9a41-2b150cf9ae9d.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da30:800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8f:1c:fd:dc:88:8d:31:a8:96:c1:8f:70:02:a3:5d:d1:16:9f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=61dffc5df3940d903bc03cb47637f80e6ec7a1e024b149cbb1e738439c910195, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:75:4a:39:a0:15:ed:49:16:b1:ce:86:40:0e:
                    f7:d6:96:86:9f:61:36:51:b5:5c:35:81:e0:ea:05:
                    c3:fd:59:c5:91:53:ba:11:a3:e4:4f:0c:38:4d:0d:
                    88:ae:03:ce:dd:b4:71:e4:92:d2:c0:7f:e9:e1:d3:
                    8a:2c:5f:37:7a:62:0c:39:75:2b:cb:5f:5f:d5:64:
                    67:83:11:8b:da:2f:41:5b:b8:5e:5a:17:26:d0:66:
                    f3:2f:09:55:84:17:eb:08:60:82:0f:66:92:4c:80:
                    5b:00:bf:83:6e:b9:9e:7a:b1:b0:5d:f4:22:37:be:
                    74:18:4d:c9:92:ff:86:b1:36:bd:a1:8e:4e:7c:3d:
                    3c:91:a2:00:fe:10:79:54:7e:d8:f5:ee:f5:3b:68:
                    dc:9a:7d:02:6e:d7:12:e0:60:a0:b3:3c:13:f3:ba:
                    86:81:45:fb:ca:b2:2f:f8:ff:f9:95:03:44:0f:90:
                    b8:08:8e:61:7f:d1:48:1e:ff:4e:83:65:01:b3:fb:
                    2b:19:4e:eb:10:f5:de:12:46:3d:cb:c0:e8:9c:3b:
                    18:f9:10:b2:99:e1:4b:0c:01:54:33:08:90:c8:b6:
                    c7:8a:fb:13:7a:01:b5:37:ce:64:61:70:66:44:70:
                    bb:5c:fa:07:68:da:6c:75:59:79:04:a2:82:ea:75:
                    55:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C2:A1:05:FC:F0:50:12:26:26:89:01:63:B7:03:4C:27:63:0C:8A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f2be6ec4-c1d5-4686-9a41-2b150cf9ae9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da30:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:8a:d0:6c:83:41:81:8b:4d:a7:df:d2:85:9f:90:6c:0d:37:
         2e:8f:12:c6:bb:2d:fc:d6:81:70:58:55:e5:54:c5:33:11:81:
         0b:8c:63:d9:ff:ce:3c:b5:06:f6:b9:9d:40:c3:75:a9:97:a6:
         f0:bf:db:5a:05:fd:71:6a:f2:3a:d7:0a:7e:ba:d5:3e:fe:5f:
         8c:5e:80:3e:e2:6b:46:4e:e4:28:0e:3c:72:a0:b0:b5:2f:a3:
         e3:53:ac:75:ef:d6:d7:9d:48:f8:fb:af:ec:99:f5:ee:11:61:
         e0:f7:d9:77:25:b3:f2:02:e0:c1:8c:7b:c8:ea:93:22:88:64:
         1f:28:63:7f:e1:48:3c:a4:2e:aa:bd:d8:cf:12:d0:25:d3:98:
         38:3f:b0:2a:be:77:b1:87:2e:af:ed:93:95:fd:70:37:dd:37:
         6a:ab:90:28:6d:9e:c8:23:8e:ed:d6:63:18:87:46:1a:75:09:
         c1:77:b6:4a:4f:56:dd:03:ea:04:ef:e4:0e:de:31:69:89:78:
         3b:22:83:5b:3d:32:5c:4e:a2:77:1e:c1:46:bd:5c:4f:79:a9:
         62:c7:a7:bf:77:99:04:73:4f:a1:50:a2:99:66:30:e5:17:00:
         42:89:f0:7d:3c:29:67:5a:ad:05:60:f4:fd:20:5e:b9:97:d5:
         7e:d5:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----