Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf289da6-3eab-42c8-9297-c9a682f901df.roa
File:                     cf289da6-3eab-42c8-9297-c9a682f901df.roa (raw, json)
Hash identifier:          nvcHNVjAFyKEVZPWpV9qARJL4witHXRCpK9Mq8C/90Y=
Subject key identifier:   04:9B:E1:79:D4:D5:A8:F9:F8:9D:A6:D5:F0:97:B2:C0:C4:08:FA:14
Certificate issuer:       /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial:       11B6CFFD4D37DE16497CF68014357F87B377D583
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf289da6-3eab-42c8-9297-c9a682f901df.roa
Signing time:             Wed 18 Dec 2024 00:00:00 +0000
ROA not before:           Wed 18 Dec 2024 00:00:00 +0000
ROA not after:            Wed 22 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        159.248.216.0/21 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b6:cf:fd:4d:37:de:16:49:7c:f6:80:14:35:7f:87:b3:77:d5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
        Validity
            Not Before: Dec 18 00:00:00 2024 GMT
            Not After : Jan 22 23:59:59 2025 GMT
        Subject: serialNumber=e599206d3704c0d7fa738f641fe59a978bed0f19e052cebe8137cfc89066afdb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:2a:9c:a2:7b:14:72:fb:8d:77:b3:8e:dc:
                    82:a5:83:2b:08:1d:2d:57:08:de:b2:bf:f9:0c:81:
                    68:c5:25:d2:7d:41:b7:65:1c:74:13:f5:77:d0:91:
                    db:0d:ec:c5:70:ee:9d:f9:33:1a:f9:29:b4:99:02:
                    5c:a2:85:ce:f5:2a:28:67:37:ae:90:d6:7c:42:72:
                    ef:41:d1:d1:e9:44:5d:75:b8:8e:35:b6:5b:e6:48:
                    2c:a5:82:68:b1:32:d6:47:34:4d:7a:ff:25:21:7a:
                    f0:09:85:23:8e:2e:d1:2b:a5:97:fb:2c:e2:26:eb:
                    1a:ce:05:55:12:ef:49:ce:fe:f5:28:c0:b9:03:cd:
                    f5:88:24:a3:c5:e7:0a:b3:2a:7a:9d:94:a8:f0:3b:
                    db:26:64:10:46:1a:f3:cd:2a:ae:0f:dc:cf:49:c6:
                    47:8a:47:3e:e0:af:b5:33:8e:d2:49:90:5b:c4:8d:
                    f3:d9:4c:59:73:af:6f:92:2e:d5:39:b5:b3:08:72:
                    77:da:c7:b4:ea:43:3a:f7:d8:33:fa:88:28:a4:9c:
                    9e:4a:23:d9:81:35:7c:ec:d0:ea:44:8f:1b:ae:73:
                    f3:3a:1e:55:db:8d:8a:02:a0:31:0e:c4:d7:71:a2:
                    e5:7b:95:b9:7a:36:35:1b:83:dd:e2:d0:8e:a7:f7:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9B:E1:79:D4:D5:A8:F9:F8:9D:A6:D5:F0:97:B2:C0:C4:08:FA:14
            X509v3 Authority Key Identifier:
                keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf289da6-3eab-42c8-9297-c9a682f901df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.248.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:5d:8a:14:a7:b7:50:40:2a:49:7b:79:45:0c:ab:a5:2c:
         f6:63:4b:66:c9:f0:ad:88:5a:70:cb:a3:80:08:ee:37:4e:41:
         b2:b1:6b:71:d1:35:b9:77:a5:21:b2:72:3a:5d:f1:e8:bc:6a:
         9b:9c:82:9e:6f:d0:ca:92:e3:2a:33:b9:af:a2:5a:64:10:f4:
         19:f0:00:66:ad:e4:eb:2e:fe:55:49:d0:4a:b2:fd:49:a6:30:
         6c:0e:ba:5a:76:9c:8a:50:67:99:f6:3b:b8:3e:50:db:68:5e:
         21:75:11:d0:21:da:7f:48:e7:55:ad:01:9c:d3:72:66:83:8b:
         f2:54:d7:f8:f0:39:2a:6b:a4:05:63:46:75:a4:a7:34:00:f6:
         d5:a9:a6:cf:3f:a3:6a:3a:44:ab:ed:51:04:84:9b:70:17:5f:
         43:b6:ed:25:74:66:b3:84:ce:5a:69:47:c6:64:ad:4f:89:4c:
         db:8b:e6:0c:24:11:ec:ba:6e:f5:18:e3:60:2c:94:9a:fa:2c:
         e3:a9:67:7d:4b:a7:cf:80:b9:90:fc:a3:c6:5c:e9:42:e7:f0:
         eb:f6:d8:d3:c2:16:e2:7a:e4:4d:36:10:6a:72:c8:32:86:d9:
         7f:94:66:75:ef:c3:69:55:38:de:ac:3a:17:09:e9:d6:03:45:
         92:3b:1b:ed
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIUEbbP/U033hZJfPaAFDV/h7N31YMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG
QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI0MTIxODAwMDAwMFoX
DTI1MDEyMjIzNTk1OVowejFJMEcGA1UEBRNAZTU5OTIwNmQzNzA0YzBkN2ZhNzM4
ZjY0MWZlNTlhOTc4YmVkMGYxOWUwNTJjZWJlODEzN2NmYzg5MDY2YWZkYjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz8qnKJ7FHL7jXezjtyCpYMrCB0t
Vwjesr/5DIFoxSXSfUG3ZRx0E/V30JHbDezFcO6d+TMa+Sm0mQJcooXO9SooZzeu
kNZ8QnLvQdHR6URddbiONbZb5kgspYJosTLWRzRNev8lIXrwCYUjji7RK6WX+yzi
JusazgVVEu9Jzv71KMC5A831iCSjxecKsyp6nZSo8DvbJmQQRhrzzSquD9zPScZH
ikc+4K+1M47SSZBbxI3z2UxZc69vki7VObWzCHJ32se06kM699gz+ogopJyeSiPZ
gTV87NDqRI8brnPzOh5V242KAqAxDsTXcaLle5W5ejY1G4Pd4tCOp/eTbQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFASb4XnU1aj5+J2m1fCXssDECPoUMB8GA1UdIwQY
MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt
alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2NmMjg5ZGE2LTNlYWItNDJjOC05Mjk3LWM5YTY4MmY5MDFkZi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDn/jYMA0GCSqGSIb3DQEBCwUAA4IBAQAU/F2KFKe3UEAqSXt5RQyr
pSz2Y0tmyfCtiFpwy6OACO43TkGysWtx0TW5d6UhsnI6XfHovGqbnIKeb9DKkuMq
M7mvolpkEPQZ8ABmreTrLv5VSdBKsv1JpjBsDrpadpyKUGeZ9ju4PlDbaF4hdRHQ
Idp/SOdVrQGc03Jmg4vyVNf48Dkqa6QFY0Z1pKc0APbVqabPP6NqOkSr7VEEhJtw
F19Dtu0ldGazhM5aaUfGZK1PiUzbi+YMJBHsum71GONgLJSa+izjqWd9S6fPgLmQ
/KPGXOlC5/Dr9tjTwhbieuRNNhBqcsgyhtl/lGZ178NpVTjerDoXCenWA0WSOxvt
-----END CERTIFICATE-----