Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/37457302-a65d-4f14-9c67-a743213e4b61.roa
File:                     37457302-a65d-4f14-9c67-a743213e4b61.roa (raw, json)
Hash identifier:          wCfzUZR2Xf3LmdpNGaL/v697lxt+quf+S+qdmj7XxdE=
Subject key identifier:   80:03:91:D7:65:F3:57:C5:42:02:4A:73:FA:2A:8F:7B:2A:22:2A:61
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       46CD5899E68D8CC0B2B81302FD064CCE012C40E8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/37457302-a65d-4f14-9c67-a743213e4b61.roa
Signing time:             Tue 17 Dec 2024 00:00:00 +0000
ROA not before:           Tue 17 Dec 2024 00:00:00 +0000
ROA not after:            Tue 21 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:4000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cd:58:99:e6:8d:8c:c0:b2:b8:13:02:fd:06:4c:ce:01:2c:40:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 17 00:00:00 2024 GMT
            Not After : Jan 21 23:59:59 2025 GMT
        Subject: serialNumber=1b4bb2103b7a39d0a7249340a1d6ce0177afc9b9f259160ee89123aae5766cbd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8b:30:05:06:71:f6:a5:80:61:31:be:75:fe:
                    72:81:15:2b:dc:8b:c7:d4:b6:7e:1c:65:67:49:53:
                    28:6c:71:fe:9d:29:91:a8:1d:4b:3d:ee:16:86:47:
                    26:03:8a:ea:97:5a:a7:9c:61:7c:08:39:59:33:a5:
                    78:b2:0c:94:1b:4d:eb:f1:94:95:f6:fb:91:a9:88:
                    e0:a1:40:13:ba:ed:85:9b:eb:89:a0:89:bb:d4:04:
                    42:a7:80:2d:c5:09:3f:0f:2e:b7:55:d7:bb:1b:70:
                    69:06:67:8f:79:e4:76:a0:b7:4a:66:0e:9f:3d:11:
                    43:81:cd:70:8d:74:ae:eb:fb:0c:d9:68:8a:64:d1:
                    07:64:af:eb:98:2d:2b:a4:4a:b3:75:1c:8b:50:93:
                    07:be:67:9c:34:24:92:66:3b:73:7b:c8:0a:70:3c:
                    fe:f7:93:fb:9d:65:e5:34:f7:5f:ed:b4:9d:05:36:
                    00:f6:f5:06:2f:fa:7a:c6:cf:f0:49:16:18:24:67:
                    3f:4a:87:cc:ae:49:e4:8b:22:51:7e:7d:da:de:b9:
                    03:bf:b5:23:4e:c4:86:09:cf:90:6e:31:3f:e7:d5:
                    01:db:c2:13:9d:dc:90:b9:e0:b9:3b:a5:43:9f:f6:
                    a0:20:f4:67:17:be:72:22:13:f7:9d:15:18:30:df:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:03:91:D7:65:F3:57:C5:42:02:4A:73:FA:2A:8F:7B:2A:22:2A:61
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/37457302-a65d-4f14-9c67-a743213e4b61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:42:47:bc:bd:9a:66:d4:7d:c8:a8:cd:fd:ea:a2:14:54:87:
         de:c3:12:0b:4f:01:3b:85:06:2d:ca:29:c2:53:03:d1:a9:d0:
         58:1b:90:fe:5b:fb:35:63:1f:9b:db:4c:cc:6a:c9:f1:99:0b:
         33:6e:6d:38:83:bc:77:5e:db:81:0e:a9:68:79:5d:3a:9d:7d:
         aa:e4:64:3c:50:5a:55:d8:ad:76:90:92:46:43:cb:8a:5b:42:
         a3:fc:c4:aa:94:48:84:92:a7:c3:c0:3c:d6:c6:2a:52:99:a3:
         5c:56:88:f2:b6:e6:bd:ad:18:f2:f9:c8:7e:c2:ad:9f:72:52:
         9e:bf:ea:fb:58:f9:f2:74:f6:56:ac:18:0f:27:2d:25:e3:69:
         1d:24:7f:ac:cb:ec:5b:04:91:d1:72:89:2c:e4:38:bf:f0:76:
         85:19:e8:20:14:8d:7f:b3:97:8b:6b:9b:67:86:0c:59:d8:19:
         79:a2:c5:67:86:eb:3c:10:04:ab:2b:ff:84:cb:79:39:07:3f:
         db:ca:16:da:20:8a:97:b5:df:79:7c:c4:12:e4:7e:a6:c7:88:
         87:78:de:cf:e3:7f:a5:6f:3a:e6:7d:a8:48:2e:81:4f:b4:68:
         05:f3:5c:33:dc:e7:97:a2:7a:13:f7:63:cc:80:c6:5e:ee:e8:
         6f:81:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----