Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f46d90e9-7430-4040-b0ee-8e00a5e7a09f.roa
File:                     f46d90e9-7430-4040-b0ee-8e00a5e7a09f.roa (raw, json)
Hash identifier:          V7pIIZKV9QV25xmJJxIf2ervJzJZy0D0EIdglt4nM98=
Subject key identifier:   51:D3:36:23:81:36:47:77:14:54:25:50:59:05:7A:6F:22:FF:78:C2
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5768C9A8AEFCAE624AA7F79ABA511A719B77F4AC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f46d90e9-7430-4040-b0ee-8e00a5e7a09f.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da60:2880::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:68:c9:a8:ae:fc:ae:62:4a:a7:f7:9a:ba:51:1a:71:9b:77:f4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=713c7aec7cfc1ad532d793d3cf6629bea05f5c5b5a3430690b5bcf876cc03a7e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:1e:46:24:e8:0d:08:b4:1e:1b:53:cd:d5:
                    96:32:9a:3f:64:22:b1:bc:4e:6b:55:a0:79:82:79:
                    c3:9e:99:ab:1d:81:84:0b:88:4a:ff:8d:b5:ea:7c:
                    4d:2d:76:1e:b2:0b:de:84:07:63:d6:be:dc:29:1a:
                    55:fd:d9:fa:ac:19:65:e8:49:5e:a5:f2:5b:6c:71:
                    16:e1:9d:56:59:86:e5:33:8b:8b:ab:c6:89:99:68:
                    d2:43:dc:06:17:c5:f0:c9:df:8e:2b:d0:ba:0a:8c:
                    0d:3e:60:d0:d0:e2:ad:cf:52:c5:63:36:65:34:48:
                    ef:2d:fc:12:93:25:24:b0:4a:5f:30:af:53:81:42:
                    78:e1:b6:e4:9c:f8:ef:76:ef:9d:fa:f8:1b:13:3c:
                    80:99:6b:8f:4d:38:ad:3b:a0:4b:2f:79:1c:91:19:
                    d4:ca:88:b8:ac:6f:d2:b3:8e:6a:ce:8e:12:50:c9:
                    7f:22:b8:b4:7b:7a:af:21:93:30:d5:09:2b:d8:ae:
                    fc:c0:4c:a1:28:9e:22:07:32:02:01:af:03:5c:c7:
                    e7:f2:b0:dc:7c:09:c8:eb:45:50:d1:25:72:fe:71:
                    91:aa:9f:a1:1f:b8:66:b3:b6:48:bf:bd:76:68:6e:
                    3a:34:2e:00:51:1e:67:57:66:56:4d:a6:e8:cf:62:
                    62:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D3:36:23:81:36:47:77:14:54:25:50:59:05:7A:6F:22:FF:78:C2
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f46d90e9-7430-4040-b0ee-8e00a5e7a09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da60:2880::/46

    Signature Algorithm: sha256WithRSAEncryption
         61:23:ec:45:6f:c4:de:77:a5:98:00:27:9d:fa:8f:77:20:ac:
         60:fa:00:7e:ad:21:df:e2:c7:03:54:5b:45:b9:6d:fe:e4:dd:
         8a:e1:25:df:10:85:18:2e:e2:81:10:9a:3f:47:22:ca:c3:cd:
         c4:e3:39:1d:33:94:8a:88:1b:6f:07:4f:fd:a3:bc:f6:4a:00:
         19:8a:19:1c:8c:27:89:e7:af:bf:35:3f:3f:82:ce:77:63:a2:
         80:bd:a7:00:d1:c2:84:f8:17:b4:ac:23:ff:b1:6c:0a:b1:4f:
         ef:09:d4:d2:34:65:69:b7:f2:54:d6:73:12:0e:9d:65:8c:5e:
         83:e7:21:c2:e6:55:31:96:88:f0:1f:2d:0a:8b:32:8c:f4:b4:
         60:70:8a:44:db:9a:74:33:b5:12:41:b1:3b:2e:2c:73:18:aa:
         9c:a0:4f:62:fa:cf:12:d6:45:8e:0a:4c:46:be:63:84:7c:9d:
         5b:ab:a8:7c:0b:62:83:7d:c5:d7:85:0c:02:41:88:4e:a0:fb:
         1b:2a:a7:67:d9:51:1d:47:09:e8:21:56:cb:a7:40:de:df:a6:
         c5:eb:b6:e7:af:bc:33:cf:e4:61:3e:a3:40:03:de:b3:6c:9b:
         45:fa:0d:c4:3b:95:b8:ef:5f:7a:c1:07:de:03:fe:01:1f:75:
         5d:ff:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----