Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa
File:                     50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa (raw, json)
Hash identifier:          S/X0TApQ2K78eoil0qMMv/o/9xlHVBnOto9HM4UirhU=
Subject key identifier:   54:7C:8F:5B:B3:0A:05:89:CB:49:5E:57:31:25:A7:65:73:FC:66:02
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       230E52C08DC4CCC912426E080BA48AD02153C290
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:f000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0e:52:c0:8d:c4:cc:c9:12:42:6e:08:0b:a4:8a:d0:21:53:c2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=7731c8fcb6fb4d91b510ec195c713d14986e92008d589124047531d746f8ed2b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:df:e0:a5:d7:7c:ce:dd:00:c4:58:70:2a:
                    d1:3f:46:62:01:22:22:bc:e7:4c:b4:06:54:7e:94:
                    b6:cc:50:28:c7:5d:a9:b2:c0:2b:1b:19:8f:b5:24:
                    19:e4:c0:90:3c:ce:3a:62:0b:40:b3:00:b7:13:e6:
                    00:2a:ac:9a:d4:dc:24:8c:65:e4:30:16:04:89:92:
                    a3:06:f6:90:2b:51:81:f4:52:55:36:ef:1c:96:fa:
                    58:02:59:c7:b7:bf:f2:7b:f6:fe:f3:55:af:2a:38:
                    ed:50:a7:8d:11:2e:0b:58:fa:e3:be:6b:27:d1:51:
                    98:9b:35:90:a8:da:25:c8:ce:9b:a2:d9:a7:1d:c6:
                    3d:4d:e6:49:f5:82:ce:c1:6d:f8:2a:1e:fa:7f:71:
                    35:29:4d:da:17:10:d2:2a:cc:76:1f:ef:29:2a:a4:
                    e0:b8:76:f9:9d:0e:ba:b5:9b:50:3b:b4:ee:dd:37:
                    da:1b:7a:ce:ca:85:45:d5:6f:75:31:d1:3a:09:d3:
                    e2:75:c2:87:14:5e:84:14:33:65:cb:ef:1a:7a:de:
                    19:07:d6:0b:91:28:3e:53:f6:b5:5c:f7:33:03:2b:
                    0a:97:d6:c6:cd:c9:53:38:35:31:31:86:73:4d:f6:
                    6d:b9:ef:24:c2:89:9f:1f:6a:f1:0d:45:fd:32:e5:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7C:8F:5B:B3:0A:05:89:CB:49:5E:57:31:25:A7:65:73:FC:66:02
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:aa:b9:75:85:70:73:3c:73:fc:77:cd:1d:bd:db:a8:9e:90:
         51:7b:5d:5f:22:97:94:03:00:40:85:77:b6:18:36:9e:0c:2a:
         cf:f9:14:3d:8b:3e:82:9e:8f:0a:39:ec:38:b4:6f:70:09:cd:
         c8:dd:ef:b3:af:61:b6:77:e2:7e:1a:42:8c:b4:ab:24:a3:6c:
         f1:d5:3d:c4:e1:c7:58:51:49:61:f9:fe:62:c2:d5:b7:18:a1:
         17:34:80:17:ff:92:3f:ea:3c:be:00:54:a1:2e:7a:d2:d0:40:
         f5:2e:18:66:26:5a:11:47:61:14:9a:1d:8c:8d:1c:ad:a0:4a:
         27:c8:d4:6c:28:4f:1b:19:37:7c:23:5a:1e:15:ff:e2:60:3c:
         e0:95:90:2b:bc:7b:94:d0:e9:8c:7c:bf:1e:dd:0b:1a:63:4a:
         e8:2e:bc:71:9e:51:34:7a:22:b0:d3:c1:45:97:b0:ca:35:a4:
         88:3c:28:61:41:e3:df:5d:4b:28:65:95:ad:20:7f:de:e2:f2:
         68:3a:cb:33:a7:d0:70:c5:be:8d:39:57:73:21:b9:00:0b:be:
         a4:3a:aa:a9:36:8d:48:b2:8c:bb:d1:97:f7:27:b3:29:ce:b6:
         2b:6c:2d:7f:d6:df:a2:48:4f:20:86:75:f5:63:8f:7a:f5:39:
         ec:e5:56:e3
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUIw5SwI3EzMkSQm4IC6SK0CFTwpAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNjAwMDAwMFoX
DTI1MDEyMDIzNTk1OVowejFJMEcGA1UEBRNANzczMWM4ZmNiNmZiNGQ5MWI1MTBl
YzE5NWM3MTNkMTQ5ODZlOTIwMDhkNTg5MTI0MDQ3NTMxZDc0NmY4ZWQyYjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR7f4KXXfM7dAMRYcCrRP0ZiASIi
vOdMtAZUfpS2zFAox12pssArGxmPtSQZ5MCQPM46YgtAswC3E+YAKqya1NwkjGXk
MBYEiZKjBvaQK1GB9FJVNu8clvpYAlnHt7/ye/b+81WvKjjtUKeNES4LWPrjvmsn
0VGYmzWQqNolyM6botmnHcY9TeZJ9YLOwW34Kh76f3E1KU3aFxDSKsx2H+8pKqTg
uHb5nQ66tZtQO7Tu3TfaG3rOyoVF1W91MdE6CdPidcKHFF6EFDNly+8aet4ZB9YL
kSg+U/a1XPczAysKl9bGzclTODUxMYZzTfZtue8kwomfH2rxDUX9MuXebQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFFR8j1uzCgWJy0leVzElp2Vz/GYCMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzUwYWJmZGUwLTFiZjQtNDI3Ni1iMWI4LTBjNWE0OWEzYTNiMy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba8vAwDQYJKoZIhvcNAQELBQADggEBAAGquXWFcHM8c/x3zR29
26iekFF7XV8il5QDAECFd7YYNp4MKs/5FD2LPoKejwo57Di0b3AJzcjd77OvYbZ3
4n4aQoy0qySjbPHVPcThx1hRSWH5/mLC1bcYoRc0gBf/kj/qPL4AVKEuetLQQPUu
GGYmWhFHYRSaHYyNHK2gSifI1GwoTxsZN3wjWh4V/+JgPOCVkCu8e5TQ6Yx8vx7d
CxpjSuguvHGeUTR6IrDTwUWXsMo1pIg8KGFB499dSyhlla0gf97i8mg6yzOn0HDF
vo05V3MhuQALvqQ6qqk2jUiyjLvRl/cnsynOtitsLX/W36JITyCGdfVjj3r1Oezl
VuM=
-----END CERTIFICATE-----