Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/70ab34fb-ad01-4d41-9091-996a24931d4c.roa
File:                     70ab34fb-ad01-4d41-9091-996a24931d4c.roa (raw, json)
Hash identifier:          Hh3BtjoOqCD4U+3MXvQWqELPkSCiuECJrdMl3rPhZG0=
Subject key identifier:   EE:23:5F:EA:B5:8A:7E:E7:7A:7C:00:B7:33:0D:44:AF:65:E3:AA:9E
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4B2F5797604793DFA56AF75F09A7507D26B7933C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/70ab34fb-ad01-4d41-9091-996a24931d4c.roa
Signing time:             Tue 31 Dec 2024 00:00:00 +0000
ROA not before:           Tue 31 Dec 2024 00:00:00 +0000
ROA not after:            Tue 04 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:c800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2f:57:97:60:47:93:df:a5:6a:f7:5f:09:a7:50:7d:26:b7:93:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 31 00:00:00 2024 GMT
            Not After : Feb  4 23:59:59 2025 GMT
        Subject: serialNumber=feeb4ae438420cc22b3a189429c8afd358117c0c05ac734ac61a261cbf983a57, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:08:ac:bd:0b:7f:76:14:7b:b5:62:c9:82:
                    e2:4f:c8:18:e9:39:14:73:82:2b:e0:92:df:8b:7c:
                    04:7d:6d:02:e3:08:36:f9:8a:e0:b9:4e:44:9e:2e:
                    46:d0:af:0f:e8:2f:c2:ab:d6:65:e4:0d:d9:20:4c:
                    10:4d:bc:d0:e9:06:f8:65:b9:17:cb:4d:ce:bd:3f:
                    29:02:0f:eb:94:b3:68:a8:18:fc:11:9e:ec:b8:6b:
                    d6:98:8d:2b:bb:4b:9c:94:9b:11:8c:6e:f4:b3:24:
                    42:a1:d4:8a:38:f0:16:92:5d:b8:7a:fc:37:15:2f:
                    45:8c:ce:24:9f:21:0b:cb:a7:39:94:51:ec:a3:11:
                    80:c7:dd:d6:7a:e3:6d:79:d3:54:8f:12:dc:58:ad:
                    71:3c:d6:29:85:56:8e:d6:27:85:ec:5e:7c:0d:bd:
                    a6:3a:c0:7a:91:e6:36:61:a7:c1:d3:43:62:84:fb:
                    98:c8:b3:1c:d4:81:a9:d7:be:77:35:44:05:09:d3:
                    94:93:96:94:26:f7:65:fc:9f:f9:78:bc:64:6b:cd:
                    d8:f9:d0:59:95:de:4c:7d:59:74:e7:0f:68:2c:40:
                    6f:67:51:cb:d3:e3:47:7b:ca:c9:26:f0:67:a0:74:
                    9e:1e:91:4d:d1:fc:33:45:a2:85:17:7d:f7:e5:7a:
                    90:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:23:5F:EA:B5:8A:7E:E7:7A:7C:00:B7:33:0D:44:AF:65:E3:AA:9E
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/70ab34fb-ad01-4d41-9091-996a24931d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:16:31:cd:fe:eb:59:6d:63:9b:40:a6:d2:b0:28:89:ae:79:
         32:11:c1:90:b9:2c:b1:a7:b4:28:e8:2d:d6:ab:00:db:2b:ee:
         86:ce:b8:dd:35:99:c1:60:ac:c1:7b:8e:46:be:11:a7:ef:6d:
         66:a2:79:16:6d:45:6b:6b:50:5e:9d:ea:38:13:00:3d:3f:3d:
         46:3c:ad:b0:3b:ea:03:5c:ea:ac:6c:38:a9:53:86:5e:96:26:
         4c:94:e8:0e:28:62:10:85:7f:fa:3a:25:67:d8:b8:75:40:7a:
         92:f2:7d:c5:f0:cb:39:dc:ce:b8:7a:10:95:50:a1:bb:0f:f3:
         df:6f:41:34:0c:97:7a:56:31:81:ef:e9:cf:cb:2d:ba:55:f7:
         19:ab:9e:e4:fe:df:d3:45:00:b6:39:9a:78:9e:d2:0d:6f:93:
         4f:56:04:dd:f4:16:44:67:e0:14:54:31:ed:ee:7b:71:3b:0a:
         ff:09:29:3c:c3:ce:b0:6e:57:be:1b:20:a7:2b:1e:00:4e:5e:
         87:b1:ee:75:45:73:0f:43:85:14:bd:69:8f:02:a0:e3:ca:17:
         4e:cf:6f:e3:17:55:0e:8c:d5:fc:7d:11:62:65:46:63:40:f2:
         ec:84:04:11:02:7c:96:c0:32:81:ff:f2:41:fd:5d:5f:e9:63:
         42:d4:0f:f1
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUSy9Xl2BHk9+lavdfCadQfSa3kzwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIzMTAwMDAwMFoX
DTI1MDIwNDIzNTk1OVowejFJMEcGA1UEBRNAZmVlYjRhZTQzODQyMGNjMjJiM2Ex
ODk0MjljOGFmZDM1ODExN2MwYzA1YWM3MzRhYzYxYTI2MWNiZjk4M2E1NzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfEIrL0Lf3YUe7ViyYLiT8gY6TkU
c4Ir4JLfi3wEfW0C4wg2+YrguU5Eni5G0K8P6C/Cq9Zl5A3ZIEwQTbzQ6Qb4ZbkX
y03OvT8pAg/rlLNoqBj8EZ7suGvWmI0ru0uclJsRjG70syRCodSKOPAWkl24evw3
FS9FjM4knyELy6c5lFHsoxGAx93WeuNtedNUjxLcWK1xPNYphVaO1ieF7F58Db2m
OsB6keY2YafB00NihPuYyLMc1IGp1753NUQFCdOUk5aUJvdl/J/5eLxka83Y+dBZ
ld5MfVl05w9oLEBvZ1HL0+NHe8rJJvBnoHSeHpFN0fwzRaKFF3335XqQGQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFO4jX+q1in7nenwAtzMNRK9l46qeMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzcwYWIzNGZiLWFkMDEtNGQ0MS05MDkxLTk5NmEyNDkzMWQ0Yy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba98gwDQYJKoZIhvcNAQELBQADggEBALsWMc3+61ltY5tAptKw
KImueTIRwZC5LLGntCjoLdarANsr7obOuN01mcFgrMF7jka+EafvbWaieRZtRWtr
UF6d6jgTAD0/PUY8rbA76gNc6qxsOKlThl6WJkyU6A4oYhCFf/o6JWfYuHVAepLy
fcXwyznczrh6EJVQobsP899vQTQMl3pWMYHv6c/LLbpV9xmrnuT+39NFALY5mnie
0g1vk09WBN30FkRn4BRUMe3ue3E7Cv8JKTzDzrBuV74bIKcrHgBOXoex7nVFcw9D
hRS9aY8CoOPKF07Pb+MXVQ6M1fx9EWJlRmNA8uyEBBECfJbAMoH/8kH9XV/pY0LU
D/E=
-----END CERTIFICATE-----