Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4420de-ff86-4c47-a15d-ae9ee811974e.roa
File:                     3e4420de-ff86-4c47-a15d-ae9ee811974e.roa (raw, json)
Hash identifier:          54g8LrIZ0Ohjb44TfnwcOaNW0Vo3/uPit88H8St6Tok=
Subject key identifier:   16:39:F5:F7:09:A1:91:3A:63:A2:E2:19:9B:62:8C:55:F8:A5:7A:09
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0C445CAAA969C7BCCC97066AB02A994569E10A4D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4420de-ff86-4c47-a15d-ae9ee811974e.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:e000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:44:5c:aa:a9:69:c7:bc:cc:97:06:6a:b0:2a:99:45:69:e1:0a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=3f02eb71b19607d43ab974d729174b48a9f5196555ed95772655efdb56579afd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:77:cc:ae:67:c3:3a:f8:d2:ad:6f:f5:7c:
                    dd:42:80:12:62:00:37:8e:01:cf:c2:96:f0:3d:66:
                    78:2d:3b:b1:bb:e3:ca:e1:af:b4:93:89:0b:e7:cc:
                    e2:8d:51:88:74:e9:de:eb:af:f3:d2:fb:f8:9e:c2:
                    e7:ec:5d:cf:b8:c4:c7:e6:47:a5:24:f3:fc:a7:6c:
                    7e:17:92:05:1e:78:18:34:9e:9f:ee:a3:e3:cd:b1:
                    8f:26:3b:56:cf:a6:30:ab:83:49:a0:3b:87:c3:2a:
                    18:59:1b:76:ec:00:52:4c:0f:4e:10:6d:10:b4:4d:
                    f8:f3:6d:98:d9:2c:14:fa:9f:e0:9e:96:98:65:fd:
                    65:b2:db:28:43:5a:06:51:d2:09:0b:5f:3e:fd:a9:
                    91:d5:55:b2:17:57:d1:c8:e0:43:65:0a:7d:e0:ad:
                    b0:61:62:a0:5c:d6:87:b1:25:17:2d:3d:11:e5:b1:
                    ab:1a:28:18:2f:20:f6:2c:73:75:00:db:dc:a4:55:
                    cd:cc:c8:37:ea:1c:de:ea:e7:75:99:f5:42:75:4f:
                    f6:00:6b:dd:b1:03:82:cc:c3:05:e5:d8:07:66:34:
                    83:a5:cb:b4:96:19:31:05:b3:87:b8:51:45:31:93:
                    3b:eb:c7:60:a1:d6:94:7d:e9:48:f0:e7:1b:39:b3:
                    eb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:39:F5:F7:09:A1:91:3A:63:A2:E2:19:9B:62:8C:55:F8:A5:7A:09
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4420de-ff86-4c47-a15d-ae9ee811974e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:98:7f:a5:70:1f:2b:10:9e:2e:4e:a8:59:f8:1e:d3:09:b0:
         ce:5c:75:97:09:a0:41:78:20:8f:18:74:e2:6d:52:d3:dd:48:
         d3:d7:e7:25:e4:77:fd:db:fc:b3:b5:80:51:7e:2f:91:65:23:
         39:18:c9:e4:ee:e6:e9:3c:38:89:cf:15:c2:4a:d8:98:b7:ee:
         db:f7:8e:d0:0e:44:2a:38:7c:0e:13:9f:c1:b2:52:a3:e4:88:
         69:3f:ef:69:64:32:cb:0f:a5:12:d5:9d:ec:45:c0:45:b1:d3:
         2b:10:96:ba:21:32:09:88:47:52:e7:31:5b:0c:f7:32:f9:6f:
         63:ce:c5:08:6e:cc:d4:f4:e9:91:aa:ec:d5:e5:96:62:7c:18:
         17:0b:1c:0b:69:71:49:59:aa:ef:c7:47:59:72:da:0d:5e:c0:
         67:83:95:89:00:98:6a:64:e1:5c:d8:c4:ec:eb:fe:91:7f:92:
         2f:aa:40:54:2d:c2:a6:cc:56:51:39:c3:cc:cc:7b:73:73:78:
         72:34:c4:26:9f:7e:7f:f9:65:2c:36:a5:8d:cb:68:71:ff:73:
         15:52:ab:88:b3:9b:b1:5c:16:cf:76:37:ca:38:e5:6f:87:56:
         62:25:94:bf:20:e1:e0:b8:df:a8:b0:e5:66:87:26:b4:0c:b7:
         ba:39:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----