Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1cce03-c2bd-4309-9698-9b9cadaf0b60.roa
File:                     fd1cce03-c2bd-4309-9698-9b9cadaf0b60.roa (raw, json)
Hash identifier:          QEkn6YgYxen23zTc70NvP6hS0hc81r8DK66Mp2VIC00=
Subject key identifier:   2B:94:67:D3:E0:57:2E:D0:E5:AC:1C:93:E2:15:18:D4:E6:83:8A:C7
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       488494C13309378549A65929A1209F07FE4BA158
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1cce03-c2bd-4309-9698-9b9cadaf0b60.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:4800::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:84:94:c1:33:09:37:85:49:a6:59:29:a1:20:9f:07:fe:4b:a1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=d566845d1f4e05211d01883a2a56126f13f2bbffe9266d748861b83021d316b7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ca:6c:fe:8c:66:56:26:d4:47:2c:49:0d:63:
                    f9:45:00:90:10:44:23:34:89:a4:52:0a:25:88:8b:
                    b3:83:73:4e:06:e0:4e:6e:bd:f5:7f:56:ea:c9:2b:
                    6a:f4:3a:97:84:78:9d:00:73:96:8c:62:45:70:69:
                    e3:59:d1:84:d9:68:9b:79:0e:df:0e:7b:f1:9c:c2:
                    8a:f0:14:f8:9a:bf:5f:0b:40:24:c9:0c:c2:bf:ac:
                    94:06:22:b9:9c:55:40:43:71:02:23:ce:66:db:7d:
                    f6:bb:7e:9a:51:2a:9c:ca:67:f9:d5:d2:36:0f:90:
                    21:46:47:32:ab:17:77:eb:e7:c3:d4:19:89:5d:49:
                    34:bc:11:81:13:c6:41:74:93:f0:eb:56:93:af:09:
                    ba:75:be:28:00:75:60:63:0b:a8:7f:cb:94:75:7d:
                    7c:5d:e9:ff:a8:55:fe:cf:2c:ed:30:28:f4:49:18:
                    05:68:ea:6b:f0:7a:52:26:92:69:61:1b:6a:44:52:
                    b5:70:f1:42:5b:4a:9b:81:2d:23:e4:e7:6a:78:e5:
                    a8:5c:b0:14:7d:cc:6f:b1:8a:a9:ea:ac:4f:35:a0:
                    d1:45:28:5d:c1:74:63:68:7d:13:99:0f:4c:7b:c3:
                    2d:4d:21:ff:d9:d3:4b:a9:8e:3e:0a:1c:63:22:5b:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:94:67:D3:E0:57:2E:D0:E5:AC:1C:93:E2:15:18:D4:E6:83:8A:C7
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1cce03-c2bd-4309-9698-9b9cadaf0b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:f7:4b:36:2e:f3:3c:bb:1b:74:72:e7:cf:d1:26:d1:60:61:
         43:45:a3:25:81:cd:d2:6a:a4:68:7d:c6:34:42:5c:46:72:89:
         ca:35:4b:54:37:63:1d:a7:c7:f9:fa:ef:75:cf:0f:c2:5f:42:
         e0:4f:c6:ba:e8:db:78:6b:7e:fe:6d:58:07:0d:ce:e5:de:a5:
         eb:e1:da:4d:da:35:17:32:65:8c:8e:33:72:11:01:e6:aa:29:
         f4:b8:42:2b:15:6e:89:5b:a0:92:95:4d:93:72:97:87:cd:b6:
         d1:57:80:19:b5:73:00:87:3e:af:cc:99:6c:42:e6:3c:7b:c6:
         ac:26:e8:82:24:f3:2e:35:00:03:98:0c:d0:81:94:3c:d1:1b:
         ac:0b:44:db:f6:e7:ad:c9:43:71:19:00:33:37:da:af:14:92:
         75:6e:b3:92:28:e1:af:84:b0:cc:e2:25:c5:9c:e9:c7:01:ee:
         c8:5f:e2:f5:ce:b5:91:61:2b:57:93:04:35:9d:f0:c2:17:39:
         53:06:c1:96:97:75:52:dd:4e:28:25:4d:c6:c3:35:11:55:04:
         c3:44:d1:e4:62:76:97:26:ee:67:c9:35:7e:15:1a:96:ae:7f:
         db:6c:8d:bd:6c:38:49:85:ef:bd:38:27:bb:4f:7d:9f:a2:68:
         fe:12:12:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----