Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/719ab7af-df28-4130-a9de-5188082f1820.roa
File:                     719ab7af-df28-4130-a9de-5188082f1820.roa (raw, json)
Hash identifier:          0kPs4Wvk1WW+rdyGmSRZl4k3/ar1XwA2PF5QjtrZROA=
Subject key identifier:   DF:C9:C6:18:8E:95:0D:10:5B:4C:A7:C3:2B:C5:6B:B1:44:8E:1E:0C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0722F32D2C008A6E99897DA66DD06B83072775A4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/719ab7af-df28-4130-a9de-5188082f1820.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:1000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:22:f3:2d:2c:00:8a:6e:99:89:7d:a6:6d:d0:6b:83:07:27:75:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=864893455188d782bd0ad34ce0fe2e83a13ee7c1979e8e7c843933e322cfcc57, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:03:ca:17:61:39:77:9d:42:ae:a2:f5:58:
                    f3:58:16:d1:e8:e0:80:d4:f8:44:da:e5:8f:60:f3:
                    8f:24:b5:8f:83:e7:0d:84:02:df:62:6b:6c:7e:d6:
                    f2:ee:09:4c:87:50:f8:4b:0d:1a:51:7e:5f:17:0a:
                    e9:33:cb:18:d7:f3:b7:65:e5:cf:0c:1f:88:62:87:
                    57:e8:59:6d:c2:60:57:ee:29:7c:f3:7b:71:19:74:
                    44:01:db:a5:14:60:21:f5:16:80:fd:b1:bc:37:b2:
                    d5:14:00:ba:a6:50:1e:24:2f:bf:7e:1a:95:90:6a:
                    d2:4a:ef:30:c9:fd:aa:30:2d:50:75:df:08:f7:2f:
                    d3:a4:b0:e6:06:e9:42:52:d8:9e:ce:8f:9b:ee:dc:
                    9a:0a:f0:a3:6e:e3:81:9a:d0:f5:62:ae:36:22:4a:
                    21:1e:47:d2:a6:61:4a:99:69:ca:69:cc:48:81:d7:
                    d5:f3:b0:fd:af:fc:f9:ed:36:2f:92:a4:68:67:7d:
                    9a:04:9e:14:06:45:fc:4f:65:39:42:79:87:36:72:
                    83:6f:10:c5:5b:a8:ba:a2:e3:34:dd:0c:f5:e8:9a:
                    39:09:7d:24:5d:6a:43:6c:c2:09:e0:5f:42:59:23:
                    6d:ce:b5:33:9a:95:aa:0d:5d:a6:1a:0b:75:93:d5:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C9:C6:18:8E:95:0D:10:5B:4C:A7:C3:2B:C5:6B:B1:44:8E:1E:0C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/719ab7af-df28-4130-a9de-5188082f1820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:f2:d9:fd:c3:a4:07:2d:44:82:f9:81:b4:a1:77:7e:19:05:
         2a:17:a1:c9:5b:8a:c4:2d:da:45:4e:89:b3:a6:42:1f:a9:76:
         25:46:06:da:80:80:cc:8b:c0:60:ef:7b:7c:e8:c3:49:76:fb:
         2b:a8:c9:92:b1:15:f3:1a:f5:c6:41:94:47:56:57:83:dc:2f:
         27:d1:29:d0:43:b8:54:d7:0e:72:90:38:f0:60:40:db:03:6c:
         c1:da:64:7c:8a:30:e1:fc:48:c3:62:0f:00:2c:86:4f:6e:2b:
         fc:2e:37:93:c3:61:98:b9:ff:5d:d9:20:12:a0:ff:0b:05:a5:
         d0:c1:3a:1e:6a:ea:ca:7e:49:b2:ac:6e:7e:bb:e7:1a:b5:95:
         37:9a:41:0c:67:31:fe:b4:17:d2:90:af:97:d1:1d:56:b5:d3:
         77:31:63:e0:7f:00:7d:84:18:0a:75:ca:61:90:44:54:47:b1:
         29:56:25:76:b4:bb:8a:39:78:f6:5d:2d:37:5c:34:6f:9c:76:
         a0:54:23:b4:11:ca:a5:c6:b4:1d:23:47:96:3e:58:88:ff:ce:
         ec:f5:72:12:40:46:be:de:23:2c:fa:76:22:f3:c4:ee:f3:d3:
         fd:a5:d9:17:e9:02:97:c3:13:8b:10:52:d7:f3:20:a2:4b:d9:
         6e:0f:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----