Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/243c69cc-67ea-408c-8571-49118f431df0.roa
File:                     243c69cc-67ea-408c-8571-49118f431df0.roa (raw, json)
Hash identifier:          SdRTHKZONoatxrV1paXQqF4yX91EvzomfDLSwFBYmCQ=
Subject key identifier:   3F:D6:87:4B:BE:D9:82:F0:9D:E9:B2:85:AA:78:9C:FB:B3:8F:E0:45
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       66784EC61254938386C9B0A04774269E12586E88
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/243c69cc-67ea-408c-8571-49118f431df0.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da60:b040::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:78:4e:c6:12:54:93:83:86:c9:b0:a0:47:74:26:9e:12:58:6e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=946764e89bb7e5a1f7103fb6fdc17b45fc8c5600ad6f6b5abe68c03a6a222f8a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:39:60:9c:8d:75:6a:e3:04:07:96:b5:50:87:
                    eb:60:d3:63:9a:15:b2:77:6c:b5:1f:c9:cd:78:9c:
                    ab:a9:b0:7b:e3:e4:b1:43:98:cf:8e:e4:8e:f6:96:
                    31:7b:e7:96:b1:cf:8d:05:1b:60:01:d5:e2:0f:6b:
                    83:d7:37:6c:fb:20:3e:1e:55:68:4a:23:33:43:67:
                    81:7a:96:92:f9:f8:dd:b2:6b:db:95:1a:a0:0f:f4:
                    66:aa:cf:95:c1:d5:f4:08:c3:eb:0f:f0:93:bd:59:
                    b9:87:f6:44:74:9f:1d:cb:7f:94:7a:fc:83:28:4b:
                    7b:28:11:f0:1a:7b:cd:eb:5b:67:19:14:50:35:8f:
                    dd:cf:72:82:21:56:20:b5:7e:13:33:f3:ab:80:90:
                    b5:c1:bd:00:5b:1a:cf:90:ae:66:c7:fe:0a:4f:0a:
                    8d:b6:c7:27:7c:88:62:ca:d4:d8:34:26:4e:58:63:
                    2a:be:78:96:f5:99:4f:07:e9:09:77:25:81:ed:76:
                    0b:0f:7b:7a:94:7a:70:27:d5:63:c5:0e:08:15:2c:
                    14:7f:04:ee:de:1e:64:2b:ea:e3:85:de:ee:34:79:
                    c1:d9:bb:9a:c7:c7:a0:2b:ee:4e:f0:17:15:55:2e:
                    6e:bb:d5:87:cd:04:7c:63:b1:0f:f5:06:3e:ac:d0:
                    11:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D6:87:4B:BE:D9:82:F0:9D:E9:B2:85:AA:78:9C:FB:B3:8F:E0:45
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/243c69cc-67ea-408c-8571-49118f431df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da60:b040::/46

    Signature Algorithm: sha256WithRSAEncryption
         02:c1:32:48:50:2b:2a:3a:52:f3:1a:e3:e9:27:1b:e1:d9:f3:
         40:72:d2:8b:32:95:62:78:68:9c:e4:ec:c7:50:13:56:2a:06:
         3c:b5:8b:cf:8d:c6:c1:63:ad:c0:a5:6f:af:8e:36:ac:05:56:
         28:27:60:c0:ce:02:15:dc:8e:0c:bc:17:cb:fa:57:79:5b:30:
         7d:2d:20:ce:3e:88:47:5a:e1:91:98:d6:bb:47:fc:06:10:3d:
         a1:ef:f0:09:b8:79:0c:de:da:b8:1b:e8:3a:aa:e9:6d:d5:d7:
         ba:9a:65:a6:8a:0f:de:70:ff:e2:e2:60:55:82:e3:ff:8c:1a:
         64:2b:c5:37:37:60:86:c9:5b:e1:39:03:d6:6f:2e:b3:ff:4c:
         8c:b6:f3:a4:ab:dc:24:03:1f:e7:28:58:23:6a:17:47:3c:53:
         f2:ed:c2:99:55:62:d3:dc:d8:80:25:ce:e6:8d:c8:b0:26:80:
         f1:d4:1f:c7:fd:95:1f:1c:b9:c0:7c:af:7a:a7:6f:3e:5d:30:
         01:bb:31:78:55:cf:3f:7a:39:d0:f5:11:b1:9a:34:6c:e0:d0:
         71:4f:cf:57:5d:16:43:e3:19:6b:89:38:b3:24:e1:0b:0a:11:
         b5:6b:d7:65:57:bd:6c:50:e8:29:c8:8b:7d:a4:5e:6a:e2:14:
         71:1c:da:2e
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUZnhOxhJUk4OGybCgR3QmnhJYbogwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAOTQ2NzY0ZTg5YmI3ZTVhMWY3MTAz
ZmI2ZmRjMTdiNDVmYzhjNTYwMGFkNmY2YjVhYmU2OGMwM2E2YTIyMmY4YTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDlgnI11auMEB5a1UIfrYNNjmhWy
d2y1H8nNeJyrqbB74+SxQ5jPjuSO9pYxe+eWsc+NBRtgAdXiD2uD1zds+yA+HlVo
SiMzQ2eBepaS+fjdsmvblRqgD/Rmqs+VwdX0CMPrD/CTvVm5h/ZEdJ8dy3+UevyD
KEt7KBHwGnvN61tnGRRQNY/dz3KCIVYgtX4TM/OrgJC1wb0AWxrPkK5mx/4KTwqN
tscnfIhiytTYNCZOWGMqvniW9ZlPB+kJdyWB7XYLD3t6lHpwJ9VjxQ4IFSwUfwTu
3h5kK+rjhd7uNHnB2buax8egK+5O8BcVVS5uu9WHzQR8Y7EP9QY+rNAR4wIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFD/Wh0u+2YLwnemyhap4nPuzj+BFMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzI0M2M2OWNjLTY3ZWEtNDA4Yy04NTcxLTQ5MTE4ZjQzMWRmMC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAbaYLBAMA0GCSqGSIb3DQEBCwUAA4IBAQACwTJIUCsqOlLzGuPp
Jxvh2fNActKLMpVieGic5OzHUBNWKgY8tYvPjcbBY63ApW+vjjasBVYoJ2DAzgIV
3I4MvBfL+ld5WzB9LSDOPohHWuGRmNa7R/wGED2h7/AJuHkM3tq4G+g6qult1de6
mmWmig/ecP/i4mBVguP/jBpkK8U3N2CGyVvhOQPWby6z/0yMtvOkq9wkAx/nKFgj
ahdHPFPy7cKZVWLT3NiAJc7mjciwJoDx1B/H/ZUfHLnAfK96p28+XTABuzF4Vc8/
ejnQ9RGxmjRs4NBxT89XXRZD4xlriTizJOELChG1a9dlV71sUOgpyIt9pF5q4hRx
HNou
-----END CERTIFICATE-----