Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0d3eeb4-3292-4a9c-80c8-53490941178d.roa
File:                     b0d3eeb4-3292-4a9c-80c8-53490941178d.roa (raw, json)
Hash identifier:          nXEwiK4zxV13OHZqrwzJbimGwIyVhsqSKEMPFazS284=
Subject key identifier:   34:63:91:C6:3C:C2:66:36:B8:F8:84:B3:AB:B9:0F:1B:EF:73:19:16
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7E3CAABB320CE9FC31D8C4D955C5EFC7745B0BAD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0d3eeb4-3292-4a9c-80c8-53490941178d.roa
Signing time:             Sat 14 Dec 2024 00:00:00 +0000
ROA not before:           Sat 14 Dec 2024 00:00:00 +0000
ROA not after:            Sat 18 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf0:e000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3c:aa:bb:32:0c:e9:fc:31:d8:c4:d9:55:c5:ef:c7:74:5b:0b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 14 00:00:00 2024 GMT
            Not After : Jan 18 23:59:59 2025 GMT
        Subject: serialNumber=eff0f978f2e40774819e77429470458bf4f2ee7a7e81ef031a4698685308ce34, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:19:92:ed:1b:56:78:9b:ed:66:6c:6f:76:
                    7c:03:0b:db:a7:5d:85:66:f9:88:19:71:c1:82:39:
                    c1:0c:41:f6:f0:62:23:b7:5c:3b:75:e3:eb:92:03:
                    a2:ee:ed:a7:85:1c:2b:21:04:dc:63:59:37:31:bc:
                    36:16:96:5e:d3:fd:7b:cb:ff:29:15:80:10:a8:82:
                    9e:25:2c:3f:71:16:ee:ae:0d:c6:13:44:cc:75:8d:
                    78:ef:16:5c:e0:34:0c:57:93:46:a8:9c:8a:4f:63:
                    fa:5a:a9:ca:4d:7d:62:48:16:3e:5b:2d:bd:4b:06:
                    22:aa:1a:23:42:b9:88:86:f6:2d:78:1b:95:e3:6a:
                    41:bd:84:fb:74:48:52:74:e6:aa:6c:6d:cd:89:d5:
                    4d:1b:21:2a:95:bb:c5:94:3f:e7:81:d0:e9:48:3a:
                    26:bd:94:69:0c:34:9a:ae:d0:65:2e:c2:fa:10:94:
                    30:06:47:23:df:b5:53:71:24:a5:7a:c4:87:eb:e8:
                    af:79:7d:88:5b:ab:42:75:fb:7b:f1:7f:55:53:4c:
                    ba:ee:f0:34:d9:41:c1:73:f3:c0:b2:b0:38:11:3c:
                    5c:2d:70:79:a6:ad:f5:79:62:98:0e:17:a8:46:6d:
                    46:dd:2d:60:e2:47:19:47:60:d8:c2:0e:a4:0d:38:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:63:91:C6:3C:C2:66:36:B8:F8:84:B3:AB:B9:0F:1B:EF:73:19:16
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0d3eeb4-3292-4a9c-80c8-53490941178d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf0:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:dd:6a:e4:73:f7:3d:f0:42:7e:5b:d3:28:0f:43:1b:5d:d2:
         da:bc:a7:77:60:f2:0c:40:9a:5a:b4:2f:fe:76:d3:69:2b:fb:
         85:73:6f:f6:b3:fe:4e:26:41:56:f2:65:ea:43:f5:04:5c:ed:
         64:09:f1:c6:b6:b1:43:d7:0b:67:d1:0b:66:b5:82:7d:cb:77:
         7f:1c:1d:4e:c8:71:d9:05:d9:dc:79:20:db:8b:d3:27:13:a3:
         0c:e2:47:99:48:a6:eb:5a:5c:40:43:90:6b:6b:f6:eb:2b:5e:
         4a:b4:e7:2e:d6:0e:39:4b:b2:ec:9e:98:f9:1d:fa:66:53:49:
         1f:fd:be:5e:51:f3:b1:6c:ab:bd:7f:3c:4b:78:9a:38:96:5c:
         46:1c:d4:68:06:72:c0:a9:df:bd:54:1e:d2:fb:00:55:30:ef:
         52:b0:1e:90:44:fa:4f:40:40:78:8a:e4:d2:4a:d7:d4:67:5f:
         18:9f:f7:82:2b:11:3c:07:01:b4:2e:6d:bd:d5:a2:6f:1f:2c:
         96:c5:16:5c:35:f3:46:2e:97:72:5d:06:28:c2:57:12:73:9b:
         ef:76:f8:32:3b:33:c4:ea:42:3d:e1:70:c6:b9:44:de:5e:3b:
         64:25:f9:26:d0:5b:0b:fa:a9:95:57:70:cd:2f:84:8a:4b:b3:
         3c:61:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----