Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/094d8343-6f84-4689-8078-17afcd623f2b.roa
File:                     094d8343-6f84-4689-8078-17afcd623f2b.roa (raw, json)
Hash identifier:          +4V/PwdN6syXBc8nCXIPZ0kBZqtvW2yUMZI5eJGk7lA=
Subject key identifier:   FC:DC:52:36:83:F8:AB:F3:4B:57:24:D8:89:87:A8:22:DF:18:01:3E
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       3C971EE33A12822E4EA15AE376CB24A7CE73F5E2
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/094d8343-6f84-4689-8078-17afcd623f2b.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2606:f40::/32 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:97:1e:e3:3a:12:82:2e:4e:a1:5a:e3:76:cb:24:a7:ce:73:f5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=75fae7dae05e921aa22209325b9d84378459ff24265aab7a0ec091a7a6a167ae, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:80:6a:45:66:80:f3:b7:44:02:34:fe:f9:
                    02:5a:27:2f:52:e9:36:e6:bb:73:ed:67:84:9c:d4:
                    2a:c3:0d:5b:f4:42:df:d9:68:e0:68:86:53:ff:ee:
                    75:67:df:3d:32:9e:6d:2f:c5:1f:67:d3:c5:ef:ea:
                    ef:78:d0:3e:4b:47:71:59:ff:46:79:05:29:42:65:
                    ba:10:4a:44:43:37:7a:fe:39:b7:f5:20:b7:8f:cc:
                    ae:fc:a6:8c:14:a9:cd:68:91:44:2e:31:d7:38:4e:
                    6a:af:07:1d:38:9d:27:cb:58:4a:72:f8:88:bf:3f:
                    bf:eb:63:23:b4:55:17:8e:3c:94:7c:4d:39:8f:12:
                    51:b7:e6:fe:06:f3:18:c6:7e:43:5a:17:31:9f:a8:
                    c4:09:77:9a:66:2f:53:2b:a2:0f:a9:df:db:1c:25:
                    d6:33:c3:d2:5f:8f:88:bb:59:27:d5:1d:5d:ab:58:
                    51:3c:37:11:19:9b:1a:f6:35:39:01:53:81:44:2a:
                    c5:55:bd:ee:1b:84:80:bc:75:9d:dc:0e:5e:34:c9:
                    3c:95:d6:45:b5:ab:57:17:de:42:84:dc:19:6d:3d:
                    95:d7:d8:2e:ed:36:53:08:6d:f2:60:de:46:de:74:
                    8b:a9:53:f2:0f:ed:fb:21:ad:88:07:31:f6:81:f9:
                    82:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DC:52:36:83:F8:AB:F3:4B:57:24:D8:89:87:A8:22:DF:18:01:3E
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/094d8343-6f84-4689-8078-17afcd623f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:69:cc:9a:3c:82:92:1d:c7:b9:c7:4a:e4:67:0a:3a:df:3f:
         3e:07:2e:37:45:bb:72:e3:08:6d:26:5d:cf:3a:b4:8c:aa:e0:
         9c:d6:5d:53:31:ae:64:e8:0f:ed:9f:60:71:37:36:1a:90:17:
         01:85:fe:d0:83:15:ca:c1:09:30:86:5d:e5:10:36:b0:1c:1a:
         32:0a:f6:db:6d:92:ee:5d:49:d5:0c:2f:82:ef:81:36:34:f7:
         2c:25:32:f3:8f:a3:64:19:7d:10:72:c1:5e:95:25:cd:bf:95:
         59:2c:c0:fe:9b:98:76:bc:88:74:f4:25:9a:7c:61:8f:af:7c:
         86:dc:2b:2a:17:f8:a6:c1:70:46:0f:80:87:6d:b8:73:b7:f9:
         c7:ca:0d:6a:46:56:e8:cb:b0:49:3b:52:b4:6d:88:1b:4f:5c:
         50:a7:14:4f:f3:07:67:05:88:7f:45:44:1b:0a:0f:98:bc:b7:
         c2:99:0e:60:f7:0e:ce:b2:91:5e:cf:b5:56:b9:cf:5b:dd:cf:
         59:f6:19:b0:b4:24:07:4d:e2:63:f1:3a:1e:ab:39:d0:cd:61:
         9a:e7:1b:f2:ad:37:e1:8e:bf:8f:18:e3:30:f7:d7:74:77:57:
         21:49:f4:a6:fd:65:95:82:77:96:8a:34:13:a7:44:8b:d4:f8:
         dc:6e:26:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----