Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7af6d5b6-fa6f-4ab7-8316-c73abac19389.roa
File:                     7af6d5b6-fa6f-4ab7-8316-c73abac19389.roa (raw, json)
Hash identifier:          lLCZmmeVUqdyfzMXCyQrYYrLyafuRy3h86VN3xen6LE=
Subject key identifier:   26:1D:69:ED:A7:01:CB:1E:D5:8C:EC:88:F6:0C:F4:8B:CB:15:21:9B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       55D403B19CF2BD771EAB006C01A9BF52ADDD5FCD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7af6d5b6-fa6f-4ab7-8316-c73abac19389.roa
Signing time:             Sat 14 Dec 2024 00:00:00 +0000
ROA not before:           Sat 14 Dec 2024 00:00:00 +0000
ROA not after:            Sat 18 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:c800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d4:03:b1:9c:f2:bd:77:1e:ab:00:6c:01:a9:bf:52:ad:dd:5f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 14 00:00:00 2024 GMT
            Not After : Jan 18 23:59:59 2025 GMT
        Subject: serialNumber=9e31ff2e4d3d2f108ee7535279dd73172a003069446d6c30e7897615e45aac9f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:9c:2e:c7:e5:67:7b:9f:4e:fc:66:3c:b2:
                    56:8c:2c:09:eb:b5:a6:10:07:2b:d9:be:f3:2c:4a:
                    66:6f:a3:1c:81:bb:7f:49:5f:88:2f:74:19:70:d4:
                    77:3a:47:d3:82:e6:4f:9d:f8:6d:28:b6:9e:69:b6:
                    0f:3b:a0:e1:50:87:78:eb:cd:e6:bb:21:2c:ec:5f:
                    18:5f:fa:81:ff:31:b1:4d:18:97:9a:16:94:8a:1d:
                    02:de:90:47:4a:dd:c9:29:1d:a2:4e:21:04:77:07:
                    5c:bb:08:f6:72:06:ac:33:54:81:6e:7b:13:4f:07:
                    1b:ab:a9:0a:57:7d:85:68:bd:e4:f9:f9:46:87:1c:
                    54:c8:d1:8b:3e:65:fa:e5:6b:14:8f:96:ca:61:6f:
                    0e:95:c6:4f:38:12:4a:99:c8:a6:0c:cb:6a:21:02:
                    15:34:3f:07:8b:7c:63:26:bf:00:22:fa:d8:a6:ea:
                    34:47:1f:90:f2:15:3a:15:19:5f:04:eb:7e:4b:07:
                    c8:2b:cb:57:d2:a8:45:fd:62:de:9c:75:c2:fe:c0:
                    d7:5d:91:e9:b6:7c:d0:b7:35:c3:75:88:ae:2b:27:
                    26:9f:3d:a5:f1:a1:0f:da:5e:95:0f:1f:a3:ff:0e:
                    a7:ed:bb:2b:2c:a0:5a:d9:3d:71:13:b0:e1:9f:d0:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1D:69:ED:A7:01:CB:1E:D5:8C:EC:88:F6:0C:F4:8B:CB:15:21:9B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7af6d5b6-fa6f-4ab7-8316-c73abac19389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:21:73:46:4d:6a:43:b7:28:29:e6:e0:65:59:01:d7:6a:c2:
         fa:30:a4:b1:4a:9a:0e:1b:28:74:61:b8:7f:7a:e6:72:69:49:
         eb:b0:d8:6b:96:f2:14:59:ae:fd:dd:30:b3:0a:73:8d:7b:dc:
         d2:20:5f:39:82:60:30:31:49:1e:8e:a0:ee:2c:21:5a:c0:ef:
         4d:ae:aa:d6:98:7e:e5:c6:f5:e0:df:98:27:05:07:28:50:ac:
         da:95:43:7f:1e:39:a7:f0:b2:38:2d:34:f1:dd:c9:c4:5c:ca:
         b6:c2:b8:42:ea:c5:c0:a7:f4:33:89:42:eb:cd:8d:c8:a2:55:
         79:94:0e:3d:39:66:39:31:f8:7a:8c:3a:21:14:9a:86:98:76:
         de:4b:0a:2a:53:51:28:6a:9e:07:d1:ea:3a:83:77:ae:7e:0a:
         cc:fe:aa:51:d8:28:4a:fd:73:1f:16:b8:7e:bb:41:f7:58:3c:
         b9:fc:64:0e:cc:36:c1:53:51:47:bb:2f:05:23:e0:95:26:e4:
         d6:93:b4:61:62:9e:2d:47:47:10:ac:d2:17:17:83:f5:61:b3:
         d4:7a:1a:d6:87:c4:e9:01:8f:e4:da:9e:61:6f:f5:8a:61:f8:
         21:d8:30:82:57:15:48:6b:59:58:4f:a2:00:3b:39:22:d0:fb:
         38:c0:10:ae
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUVdQDsZzyvXceqwBsAam/Uq3dX80wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNDAwMDAwMFoX
DTI1MDExODIzNTk1OVowejFJMEcGA1UEBRNAOWUzMWZmMmU0ZDNkMmYxMDhlZTc1
MzUyNzlkZDczMTcyYTAwMzA2OTQ0NmQ2YzMwZTc4OTc2MTVlNDVhYWM5ZjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqicLsflZ3ufTvxmPLJWjCwJ67Wm
EAcr2b7zLEpmb6Mcgbt/SV+IL3QZcNR3OkfTguZPnfhtKLaeabYPO6DhUId4683m
uyEs7F8YX/qB/zGxTRiXmhaUih0C3pBHSt3JKR2iTiEEdwdcuwj2cgasM1SBbnsT
Twcbq6kKV32FaL3k+flGhxxUyNGLPmX65WsUj5bKYW8OlcZPOBJKmcimDMtqIQIV
ND8Hi3xjJr8AIvrYpuo0Rx+Q8hU6FRlfBOt+SwfIK8tX0qhF/WLenHXC/sDXXZHp
tnzQtzXDdYiuKycmnz2l8aEP2l6VDx+j/w6n7bsrLKBa2T1xE7Dhn9DnxwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFCYdae2nAcse1YzsiPYM9IvLFSGbMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzdhZjZkNWI2LWZhNmYtNGFiNy04MzE2LWM3M2FiYWMxOTM4OS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaOMgwDQYJKoZIhvcNAQELBQADggEBACYhc0ZNakO3KCnm4GVZ
AddqwvowpLFKmg4bKHRhuH965nJpSeuw2GuW8hRZrv3dMLMKc4173NIgXzmCYDAx
SR6OoO4sIVrA702uqtaYfuXG9eDfmCcFByhQrNqVQ38eOafwsjgtNPHdycRcyrbC
uELqxcCn9DOJQuvNjciiVXmUDj05Zjkx+HqMOiEUmoaYdt5LCipTUShqngfR6jqD
d65+Csz+qlHYKEr9cx8WuH67QfdYPLn8ZA7MNsFTUUe7LwUj4JUm5NaTtGFini1H
RxCs0hcXg/Vhs9R6GtaHxOkBj+TanmFv9Yph+CHYMIJXFUhrWVhPogA7OSLQ+zjA
EK4=
-----END CERTIFICATE-----