Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26ca557a-a1b7-4989-bd6a-879b4c65b643.roa
File:                     26ca557a-a1b7-4989-bd6a-879b4c65b643.roa (raw, json)
Hash identifier:          PBp7Zhzcr+bqSyF0x5SkjrfGDU16UIQ2W4bUrXXouM8=
Subject key identifier:   13:AD:4D:E0:BA:AF:30:1E:94:E4:11:D1:9D:6A:52:3B:7A:97:94:20
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       70B61E636B823A1361EF29696A3D5B18FD6E32AF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26ca557a-a1b7-4989-bd6a-879b4c65b643.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:2000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b6:1e:63:6b:82:3a:13:61:ef:29:69:6a:3d:5b:18:fd:6e:32:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=3b15ac3cae0a7c27634ae331ec96187d030322932c7684689e4d5c99c97c0494, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:65:2f:a2:9e:a5:25:ab:2b:60:c1:bf:43:
                    90:79:9a:70:6d:ac:d5:c8:2a:e8:eb:f5:a6:80:07:
                    9f:28:3c:9f:b5:c0:da:71:3c:7a:94:99:ea:1d:b8:
                    9e:8a:6a:9f:ce:87:68:34:c8:d1:0c:25:77:ea:47:
                    ce:31:6b:88:05:72:1b:88:f5:07:65:2d:6e:d6:6e:
                    74:81:30:2f:8b:55:ba:c7:3e:dc:e1:77:7d:4a:67:
                    9b:ce:5c:44:31:02:32:8c:94:a8:3e:bc:03:9a:8a:
                    ab:7d:1b:be:ef:92:97:db:33:ec:a3:b7:85:1a:eb:
                    55:6a:e4:1f:3d:9f:ce:9c:8d:cc:f0:73:b7:43:90:
                    49:35:e9:b4:ff:ab:10:4a:4a:98:3d:a8:56:c0:59:
                    7d:61:00:e7:a0:67:e6:52:14:72:9c:ee:a2:b4:7f:
                    1f:f6:23:61:a0:22:71:6e:4a:38:8d:4b:59:3b:b1:
                    8c:21:0e:36:14:6d:7a:cd:bc:31:c4:89:51:13:23:
                    b7:46:db:04:12:7a:95:c9:b0:97:5c:f9:0d:84:a4:
                    e1:bd:c5:fc:02:c6:8c:29:98:b1:b7:f2:11:6d:15:
                    df:be:31:2b:62:3c:93:3e:47:66:60:b5:49:6f:d4:
                    95:a4:69:9e:ed:55:63:27:57:ed:f1:a4:26:ee:d4:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AD:4D:E0:BA:AF:30:1E:94:E4:11:D1:9D:6A:52:3B:7A:97:94:20
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26ca557a-a1b7-4989-bd6a-879b4c65b643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:d5:78:91:f9:73:de:cc:cc:32:07:a9:2d:a6:6b:97:1f:70:
         b6:d0:2b:1c:89:ea:0e:8e:37:65:4e:62:ae:37:e1:77:b7:32:
         ca:ac:f0:bf:ee:2d:07:ed:d8:87:fe:29:37:35:d6:e1:0c:d1:
         4e:36:da:73:cb:da:2a:1a:bf:f9:cb:e1:5a:7f:1e:31:39:f1:
         4d:65:34:31:3d:56:d8:18:32:1d:2e:d5:3f:97:6d:c6:f9:21:
         d9:8a:da:63:be:9e:37:d0:0f:d0:5f:6b:43:1a:23:03:50:de:
         c8:58:8e:53:b5:58:43:a5:c2:0f:e1:60:10:f9:83:3d:e4:30:
         07:37:b1:2e:4a:5c:ec:ae:10:fe:e5:97:3a:1a:0e:33:b9:40:
         8f:fe:9f:90:b8:bd:07:4f:59:e4:6b:c5:8d:10:14:5d:40:a7:
         ef:dd:24:bf:69:d5:43:7c:7f:be:64:95:f3:af:93:2a:2c:08:
         74:7e:33:fc:e5:2f:c8:6c:84:43:7b:7b:a6:c5:1e:2e:fc:27:
         b8:21:5b:e4:cd:54:03:84:5f:b7:34:3e:0a:c0:71:68:ef:cb:
         2a:6f:d6:23:60:3c:5a:95:0d:62:1d:99:3f:77:f2:5c:4d:bf:
         ec:f7:77:ce:c3:a0:dd:18:37:3a:c0:2a:c0:a7:4f:e0:92:68:
         a1:ce:d5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----