Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8d283560-96ec-4dbc-9771-bcbab0c8b891.roa
File:                     8d283560-96ec-4dbc-9771-bcbab0c8b891.roa (raw, json)
Hash identifier:          hjTvwR5psARAJi1pMkD2s4lOmkUsGCwDgyWls+7sHtk=
Subject key identifier:   45:82:EB:75:C1:D1:05:49:95:5A:A3:63:ED:53:83:98:D7:74:93:65
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7EDD17D59D50C498209135E13C416F8F9C96CC86
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8d283560-96ec-4dbc-9771-bcbab0c8b891.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da60:a000::/40 maxlen: 40
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:dd:17:d5:9d:50:c4:98:20:91:35:e1:3c:41:6f:8f:9c:96:cc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=d0c7d772e234defaebc0a5e6b20b0b912a66998e7f90e8638ec444ae35dc9803, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:22:12:4b:86:dd:33:44:24:a8:0c:83:2b:f2:
                    99:9b:09:d7:9c:b9:4a:0a:91:cd:25:a3:16:f5:c5:
                    81:9c:43:d9:b1:ba:99:d5:f8:f1:89:b2:f9:d1:92:
                    1d:bc:72:5a:d2:27:c1:ce:1a:9c:22:86:7f:70:32:
                    d3:f5:c4:24:cd:4e:f1:2e:92:e3:4b:37:8a:b0:44:
                    6f:34:56:ce:1c:61:3a:87:46:90:50:1d:69:08:a2:
                    26:d6:3d:20:40:95:74:d6:1c:6c:02:bc:68:aa:4a:
                    ba:15:2e:fd:1a:9d:d7:92:01:25:91:96:d0:22:e3:
                    44:5b:28:cd:35:84:d4:3a:9b:57:e6:8e:4e:38:f3:
                    4c:10:6f:5f:95:a6:21:cc:2f:0a:91:71:21:39:e4:
                    04:25:4c:c9:66:88:68:9e:1b:7e:d7:3d:83:8e:c3:
                    27:1c:67:19:a8:e7:40:27:4c:02:48:92:46:c3:b7:
                    3c:dc:8f:fb:a9:66:5d:84:25:7e:30:41:4c:b0:a7:
                    3e:75:5b:26:54:72:7a:d3:a2:7a:c1:c2:32:d1:d5:
                    02:38:1e:d8:06:d0:6b:dc:2f:f6:07:87:af:81:cb:
                    1f:12:50:16:db:da:07:98:99:92:43:ea:6e:16:a6:
                    1b:a4:c8:05:a2:2f:f1:83:98:03:c9:d6:5d:fc:df:
                    5b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:82:EB:75:C1:D1:05:49:95:5A:A3:63:ED:53:83:98:D7:74:93:65
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8d283560-96ec-4dbc-9771-bcbab0c8b891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da60:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:a4:63:e5:fd:0b:14:c8:47:ec:77:68:5f:06:e6:59:2c:bb:
         b3:31:d2:3c:67:39:bf:72:f9:9d:f4:89:fe:ef:c5:8e:5f:ca:
         b1:2f:2b:d1:e6:fd:34:be:61:fc:33:c1:8f:e4:15:59:c9:53:
         d5:1e:6f:e0:3e:cd:b4:32:e9:2d:99:f4:20:cc:86:b7:29:7c:
         9e:7e:7f:77:a0:70:c9:1e:34:50:f8:d8:bb:03:f5:33:80:e6:
         19:35:b0:b8:2a:e8:b1:0b:7e:fb:1d:c9:df:0a:2d:fa:a6:dc:
         c7:3d:ad:7c:d4:f9:ba:08:70:af:0b:8a:3c:7a:d5:e2:2b:07:
         e4:3d:42:ed:65:0b:c7:39:7f:4b:7d:65:20:81:7e:d2:cf:7d:
         f9:5b:0c:b1:fa:2f:f9:5a:7b:32:f3:a8:1b:a2:02:79:1d:fb:
         6f:29:21:f7:f6:9b:6f:41:24:dc:7d:b5:68:e3:fc:e7:29:50:
         aa:7d:a5:43:33:32:30:66:07:b0:5c:3c:7f:94:5a:b3:77:1f:
         f4:55:bd:df:f5:49:3e:47:51:d9:cb:11:05:5a:6d:74:ea:e0:
         13:9a:cf:f7:2c:80:a9:2f:60:d8:18:38:60:71:8b:52:0c:35:
         8d:5b:86:e2:ee:e0:ba:9a:4d:8b:46:4d:ff:d8:56:90:15:15:
         c7:27:a7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----