Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86677898-f2f4-412d-80cc-abdd68e6a9a3.roa
File:                     86677898-f2f4-412d-80cc-abdd68e6a9a3.roa (raw, json)
Hash identifier:          88Bb7lO328eQZvRGCNNuLmFlpuzJFiQIYsD1dSmo/yY=
Subject key identifier:   F9:BB:BD:9B:2F:33:04:CC:60:40:36:7E:30:40:BD:C1:B3:88:25:48
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6766292A8856AB85A1EFDB26BA70E50A207A69CE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86677898-f2f4-412d-80cc-abdd68e6a9a3.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da30:4800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:66:29:2a:88:56:ab:85:a1:ef:db:26:ba:70:e5:0a:20:7a:69:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=c286e9ef89ef0ab1a6c65481046057475e7435426e8e5023cc04a7b9c418bfb7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:10:92:66:e3:be:a6:79:dc:19:21:5d:14:
                    b5:bc:d4:10:96:75:3e:f3:3a:92:4e:f7:7c:8a:0e:
                    76:31:19:1a:dd:55:f5:e8:57:20:85:25:0b:6f:89:
                    ea:de:5c:bd:f9:80:76:ae:27:2c:9b:08:ff:e0:05:
                    46:e0:64:7e:e0:8d:de:12:20:4e:76:d0:15:42:ee:
                    c9:da:80:15:e3:84:58:84:7a:3f:84:e1:50:ce:aa:
                    99:fb:5d:32:80:a7:d2:5b:1d:5c:8d:68:f5:53:e5:
                    18:cc:bf:bc:60:08:ab:e0:d8:d4:d7:3c:39:1f:23:
                    e4:cd:0d:85:27:9c:01:02:59:3b:13:14:22:ec:1b:
                    5d:2f:e8:ae:ed:b0:de:b5:4a:17:a4:b7:f1:34:17:
                    e4:db:fa:53:74:d8:aa:30:fa:2f:1f:94:b2:c8:79:
                    ca:81:4f:88:59:f4:fb:f3:8b:fb:84:af:b3:d5:17:
                    e7:e9:fe:74:5f:18:fb:a1:33:30:3a:93:6b:08:12:
                    e8:d0:41:16:93:da:79:c4:2d:66:7a:5a:a3:4c:1e:
                    a4:36:6a:a1:2b:58:4e:a8:59:7c:19:1c:fc:76:05:
                    d8:6e:17:0e:85:e7:0a:eb:bd:73:17:61:de:34:43:
                    09:27:8a:60:c4:15:9e:bd:79:51:0a:c1:ae:7b:41:
                    bd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BB:BD:9B:2F:33:04:CC:60:40:36:7E:30:40:BD:C1:B3:88:25:48
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86677898-f2f4-412d-80cc-abdd68e6a9a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da30:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:e1:b8:f5:86:19:fc:11:e5:0d:f8:8e:18:eb:89:b5:25:3e:
         1c:05:56:ea:04:01:4c:fc:73:3a:5b:35:db:0c:2a:73:12:ee:
         4f:2a:cc:97:27:e7:46:8f:c6:a6:f9:cb:e7:55:1a:4d:26:64:
         31:d0:7d:66:f1:e8:b6:28:77:4c:28:8b:9f:b3:e2:a2:7f:03:
         0a:86:fb:ec:29:45:ea:79:de:f9:65:34:d5:db:64:d2:83:e5:
         73:84:7a:e7:4b:a3:f5:a2:12:6e:cb:a1:26:46:a9:51:d1:01:
         22:9e:1b:87:4a:e3:53:f6:39:a7:b1:52:33:e4:e7:70:80:b9:
         ff:e7:cd:a7:5b:a8:52:d7:b8:60:d8:d5:cf:05:90:25:cd:50:
         98:39:a6:a4:9e:b3:5e:8d:01:41:bf:3f:1d:3e:12:47:96:81:
         57:c6:30:d9:dd:84:1b:af:05:8d:f5:2a:03:66:a5:3d:68:01:
         9f:26:7a:c2:18:96:dc:2a:0b:fa:d2:80:67:04:37:3f:8f:ac:
         83:b6:10:ed:21:be:92:50:bc:dd:b2:08:5a:c6:d2:23:c1:41:
         20:78:0f:5f:a1:96:26:5c:dc:27:ed:8e:52:98:bd:46:50:8d:
         7f:f6:0b:4d:ea:1b:91:25:5a:cf:2a:38:33:14:74:d1:fe:db:
         13:27:10:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----