Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c4ec7bbb-08b8-4913-b77a-f7374e534d87.roa
File:                     c4ec7bbb-08b8-4913-b77a-f7374e534d87.roa (raw, json)
Hash identifier:          UipDHmGFHuzChHZOrTh1Ab3j02vNHBFPGiZeg28Y1Ac=
Subject key identifier:   2E:76:27:47:20:67:83:1A:53:DA:21:ED:E8:70:5F:9D:B4:52:73:D6
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       20BAEFCEE455FC1AE7E663F3B5DE5608767BDAE6
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c4ec7bbb-08b8-4913-b77a-f7374e534d87.roa
Signing time:             Sat 25 Jan 2025 00:00:00 +0000
ROA not before:           Sat 25 Jan 2025 00:00:00 +0000
ROA not after:            Sat 01 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf9:8800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ba:ef:ce:e4:55:fc:1a:e7:e6:63:f3:b5:de:56:08:76:7b:da:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 25 00:00:00 2025 GMT
            Not After : Mar  1 23:59:59 2025 GMT
        Subject: serialNumber=2eb1fdce9d20372b5f9431868a4c484c5af7dbaed02f3e1e78316b463ec38a96, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cd:02:60:e7:42:41:25:c1:eb:7f:f4:f8:88:
                    1d:41:e9:71:74:e1:07:67:a6:ae:34:d1:ee:bb:31:
                    a3:91:72:60:6a:ff:52:fd:71:e8:06:60:d6:da:49:
                    89:13:7f:17:25:6b:25:80:3d:5f:c7:f5:3c:a6:94:
                    53:c2:53:9f:1b:6c:0e:86:32:84:68:07:72:de:23:
                    74:e4:44:fe:27:51:d8:1d:87:6a:d4:eb:83:b9:f3:
                    a0:5d:92:3c:e2:60:f9:cb:8d:25:53:74:75:8c:7f:
                    da:08:d3:c3:d2:39:94:b7:a6:db:6d:f6:98:98:4d:
                    fb:92:64:4f:fc:4b:f8:34:83:c6:4c:73:8b:87:1a:
                    48:53:43:76:95:3c:6d:b2:90:f2:31:1f:ea:90:31:
                    e6:18:dd:e9:1e:70:70:f7:96:8c:75:da:34:3b:9f:
                    d6:36:ae:fc:a1:c1:c0:f3:60:09:34:37:77:d1:e0:
                    57:fe:1a:b3:c2:f9:6f:68:c6:b7:a7:3e:5b:6f:b7:
                    41:c1:ca:04:4d:10:5b:d7:18:e2:99:4d:6d:b5:8b:
                    75:3f:b0:00:ae:c4:85:31:82:76:43:0a:33:46:87:
                    81:d3:05:ed:c6:25:78:bb:e5:59:9d:7f:0d:d7:c7:
                    05:98:62:95:41:40:93:94:63:ca:43:45:72:e5:ab:
                    ca:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:76:27:47:20:67:83:1A:53:DA:21:ED:E8:70:5F:9D:B4:52:73:D6
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c4ec7bbb-08b8-4913-b77a-f7374e534d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf9:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:9a:9a:4b:e6:9a:ad:4e:2d:aa:4a:77:76:40:2b:10:e0:dc:
         62:b2:54:f0:9a:49:f5:e7:99:32:8e:59:1d:7b:1b:70:06:75:
         27:33:57:d3:6f:e4:2d:9d:b4:f9:79:80:c4:09:0b:1e:9b:42:
         d8:76:91:54:10:8d:36:e6:76:f3:08:df:be:e7:4e:f6:4e:de:
         a9:6a:f5:bc:c9:12:f4:dc:49:55:6b:a9:61:0a:6d:6b:48:be:
         ac:55:99:99:c2:44:f8:76:86:4e:c1:ac:17:80:bb:76:cc:40:
         e4:c9:98:ef:6d:32:5a:60:eb:de:94:29:00:7d:65:f0:e2:93:
         65:6f:d9:7f:9b:76:cb:2b:47:64:72:52:f8:1c:d4:ef:f2:ee:
         4f:ef:48:99:f3:ea:57:35:14:d9:40:d3:39:43:7d:4b:9f:3c:
         d3:ab:3c:cb:75:46:b6:6b:70:0e:b8:c5:03:b7:18:48:e1:f3:
         46:23:3a:c0:2c:63:4c:4a:8e:b1:dd:11:bd:99:14:c1:5f:0f:
         a3:3f:94:73:0d:0a:74:ee:f9:31:13:7d:0c:5d:ac:2f:63:93:
         89:7c:69:6b:99:d1:27:a6:b4:e4:26:d6:a7:56:d2:69:94:77:
         3a:cf:48:4e:d2:b0:02:60:5a:9c:5c:ae:b4:d8:d4:af:65:34:
         42:77:86:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----