Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57de765d-f125-4040-8a03-86e1748e2010.roa
File:                     57de765d-f125-4040-8a03-86e1748e2010.roa (raw, json)
Hash identifier:          vjHlVgaToeOuVuGuUi2GhwK3PmUDAXMyxSfFKuH2Dm8=
Subject key identifier:   F3:4F:EC:59:C9:7C:52:1C:09:64:B6:79:DC:34:30:2F:26:97:40:89
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       63C82AFA7EFA1433B5605ACF52DFB5FAE98E58D5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57de765d-f125-4040-8a03-86e1748e2010.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da60:60c0::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c8:2a:fa:7e:fa:14:33:b5:60:5a:cf:52:df:b5:fa:e9:8e:58:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=607fcfed9b83e4fc3ea79d297a93b3fd6772e12902846c511904ba022db55660, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:89:81:a9:b4:3b:60:b4:96:29:df:b6:3d:ef:
                    55:43:33:1c:d5:e0:30:98:87:f4:df:5f:03:a5:79:
                    ca:6c:9b:94:2b:13:36:27:75:2d:3c:81:a7:56:b6:
                    87:2c:93:0d:0f:87:e3:9b:15:b8:65:92:63:05:b7:
                    b1:51:ce:28:9a:89:a2:01:fb:21:01:9b:53:90:fb:
                    fa:8c:32:b1:6b:40:73:21:35:aa:62:ef:dc:86:9c:
                    a2:25:9f:5d:ed:de:2b:3e:22:ed:8a:9f:25:3c:60:
                    e7:f3:ce:cc:a3:10:40:56:ab:43:c3:c9:65:b0:f1:
                    c7:99:b3:5d:d9:10:32:af:40:18:45:83:df:6b:42:
                    d7:97:c1:8a:dc:07:d6:17:7c:28:7d:1c:1f:85:ea:
                    a4:58:ea:5a:79:99:98:d3:02:e8:10:a7:06:dd:61:
                    89:06:87:33:2b:5c:fe:99:11:71:c2:ee:e4:71:50:
                    48:3b:5f:f7:01:7e:11:ea:c4:f7:41:ad:16:b8:5e:
                    02:af:8b:f5:d6:54:94:d3:1a:a1:ff:9c:96:41:33:
                    6c:e8:35:01:13:24:87:66:71:5d:bb:e8:22:38:9f:
                    57:44:8b:d1:a4:37:b5:39:cf:49:82:df:07:b6:a8:
                    33:35:bd:dc:ff:61:38:8f:1d:c2:eb:b0:8f:47:b6:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4F:EC:59:C9:7C:52:1C:09:64:B6:79:DC:34:30:2F:26:97:40:89
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57de765d-f125-4040-8a03-86e1748e2010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da60:60c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         6a:44:09:3f:30:30:26:a8:c1:73:22:1a:17:3f:3a:77:ee:2a:
         86:9c:49:4f:07:67:2d:fd:a8:7d:f4:6b:8a:46:10:df:56:52:
         b8:b3:df:68:be:aa:85:93:2d:c4:72:72:e4:05:c6:5c:80:8c:
         3d:bc:3e:98:2e:1b:17:f3:87:12:88:9a:38:10:95:8b:9c:0b:
         28:82:dd:c9:4a:7a:4f:21:9e:cf:67:67:9e:79:a1:51:17:5b:
         17:84:d3:f5:84:cb:92:71:ea:a9:fe:0b:b9:5a:e7:b5:59:e7:
         b6:62:ae:7d:3c:25:e5:11:dd:ef:3e:56:29:08:87:12:de:06:
         50:a5:ac:ef:49:99:72:26:d8:58:df:8b:e9:67:b5:43:f9:c3:
         ad:28:1c:96:8e:68:ce:49:d9:e1:fe:42:b6:1b:86:e7:60:59:
         61:91:34:fb:db:ba:6d:2c:a4:bc:f1:85:bf:52:d1:0f:0b:a7:
         47:8e:67:1d:4c:57:3c:12:fa:76:dc:6a:4c:a2:eb:7e:01:3c:
         d1:84:8f:a9:9e:61:26:b6:af:94:2b:2a:aa:b7:31:f3:21:82:
         4e:04:d0:96:84:65:72:bf:c8:15:e4:f4:10:56:93:b5:53:50:
         b7:7c:91:bf:57:56:87:cc:33:aa:1d:21:d5:ad:6c:c8:4f:71:
         61:69:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----