Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bc4defb3-3b7f-41b0-9b47-56b4d0f50806.roa
File:                     bc4defb3-3b7f-41b0-9b47-56b4d0f50806.roa (raw, json)
Hash identifier:          Bgv/yPTBSiC0QLiZZqObhnuTZfws8WysS1vsq1Q7YGM=
Subject key identifier:   F4:9B:B9:70:A2:BC:98:CF:D0:09:66:EF:D4:FD:5A:69:D7:D2:85:95
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5BEFB5D1207F0DE6FCCCB7871A637CBF6A59E5FB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bc4defb3-3b7f-41b0-9b47-56b4d0f50806.roa
Signing time:             Sat 08 Mar 2025 00:00:14 +0000
ROA not before:           Sat 08 Mar 2025 00:00:14 +0000
ROA not after:            Sat 12 Apr 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2406:daef:a000::/40 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ef:b5:d1:20:7f:0d:e6:fc:cc:b7:87:1a:63:7c:bf:6a:59:e5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000
        Validity
            Not Before: Mar  8 00:00:14 2025 GMT
            Not After : Apr 12 23:59:59 2025 GMT
        Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:d6:be:00:27:fb:6d:73:68:38:c3:9a:57:
                    e3:8f:cc:8a:3c:dd:18:f2:3c:b6:63:bb:7e:79:3c:
                    9a:6b:83:8c:81:6f:d6:75:c3:ff:ba:8b:ec:5e:9a:
                    18:41:bf:fb:7c:1c:2a:9e:43:14:5b:d0:6e:2a:2c:
                    51:04:ca:ca:d3:fe:c1:15:b7:d4:f6:ab:fc:b3:30:
                    c7:0a:c5:34:8b:fb:c7:ef:05:78:57:0b:ca:7e:bd:
                    e7:cf:e6:4f:20:33:d0:c2:31:97:ee:88:dc:b2:24:
                    cd:09:21:02:84:b1:00:a9:ad:c6:0c:a3:63:87:fb:
                    98:3b:13:4a:3d:1c:c3:7b:6d:63:22:d7:1f:9f:41:
                    0b:f2:f0:c2:59:ef:00:f1:3a:43:43:33:cf:aa:8c:
                    fe:7d:68:5f:31:42:3d:21:74:47:7a:5e:c0:47:06:
                    b0:91:ae:f2:8a:30:75:fb:07:a1:36:b0:ed:b6:7f:
                    03:b8:36:a1:ae:f7:dc:8b:23:fb:65:be:58:5b:29:
                    eb:74:65:a9:f1:96:b9:d3:c7:2f:97:9b:9c:0a:23:
                    10:64:a3:c3:79:48:00:b4:3c:56:4c:11:4d:84:ac:
                    53:1e:f5:d4:7a:b4:de:d5:7a:f7:ee:d2:98:dc:4e:
                    8b:7a:9e:d9:9e:3c:97:c8:59:a4:b1:6d:55:9a:73:
                    09:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9B:B9:70:A2:BC:98:CF:D0:09:66:EF:D4:FD:5A:69:D7:D2:85:95
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bc4defb3-3b7f-41b0-9b47-56b4d0f50806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daef:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:26:fa:24:12:1c:5b:37:1a:e9:a3:b1:6e:a3:ce:a0:6e:df:
         bd:df:b2:93:78:6a:35:b0:6e:b7:20:34:0a:48:47:8e:3e:f6:
         2d:69:2a:b5:75:46:7c:3c:b6:6e:b8:6c:6e:89:95:70:a1:8b:
         fc:98:d0:46:6a:c5:ac:6b:0e:77:4c:9c:ee:c7:58:d6:ac:a0:
         92:a2:e6:da:e7:f3:7d:63:46:b2:e0:ba:cf:69:98:92:f9:9a:
         f6:1d:ab:a5:97:31:e4:c7:45:9b:1e:d1:cd:c1:3e:52:f6:57:
         b6:06:d3:f0:20:20:d4:aa:9d:cd:d0:5d:11:c8:7a:70:d1:b4:
         de:19:8e:35:76:db:58:e9:c4:da:6e:a5:f2:f5:f8:d0:85:b8:
         b9:c5:c1:ed:81:f1:87:87:7c:23:71:f3:40:00:8d:e1:19:20:
         15:c5:5c:81:6e:a4:7d:33:d3:d6:25:ff:37:7f:2b:ca:8b:cf:
         78:a4:d8:f1:02:de:b8:96:f3:07:50:9a:fe:e8:79:72:12:ab:
         94:c1:9d:73:8e:d6:80:d8:90:b3:f3:1d:86:1f:b8:57:c4:66:
         ce:c7:a7:7b:4c:14:67:92:19:00:be:d5:d2:46:c6:13:79:f9:
         87:1f:57:50:55:1f:17:9e:cf:89:fe:b9:fc:6e:6a:b0:c8:5c:
         a9:00:e5:91
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUW++10SB/Deb8zLeHGmN8v2pZ5fswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMwODAwMDAxNFoX
DTI1MDQxMjIzNTk1OVowejFJMEcGA1UEBRNAYzkwNDYwYTJmZTVjZGQ4Yjg0Nzgx
MWMyMWU1ZTk5MjcxY2M5NmVjOGIzMzQ4OTJjY2M0YTc4MWI3ZTI2NjlkZTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY7WvgAn+21zaDjDmlfjj8yKPN0Y
8jy2Y7t+eTyaa4OMgW/WdcP/uovsXpoYQb/7fBwqnkMUW9BuKixRBMrK0/7BFbfU
9qv8szDHCsU0i/vH7wV4VwvKfr3nz+ZPIDPQwjGX7ojcsiTNCSEChLEAqa3GDKNj
h/uYOxNKPRzDe21jItcfn0EL8vDCWe8A8TpDQzPPqoz+fWhfMUI9IXRHel7ARwaw
ka7yijB1+wehNrDttn8DuDahrvfciyP7Zb5YWynrdGWp8Za508cvl5ucCiMQZKPD
eUgAtDxWTBFNhKxTHvXUerTe1Xr37tKY3E6Lep7ZnjyXyFmksW1VmnMJpwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFPSbuXCivJjP0Alm79T9WmnX0oWVMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2JjNGRlZmIzLTNiN2YtNDFiMC05YjQ3LTU2YjRkMGY1MDgwNi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba76AwDQYJKoZIhvcNAQELBQADggEBAGom+iQSHFs3GumjsW6j
zqBu373fspN4ajWwbrcgNApIR44+9i1pKrV1Rnw8tm64bG6JlXChi/yY0EZqxaxr
DndMnO7HWNasoJKi5trn831jRrLgus9pmJL5mvYdq6WXMeTHRZse0c3BPlL2V7YG
0/AgINSqnc3QXRHIenDRtN4ZjjV221jpxNpupfL1+NCFuLnFwe2B8YeHfCNx80AA
jeEZIBXFXIFupH0z09Yl/zd/K8qLz3ik2PEC3riW8wdQmv7oeXISq5TBnXOO1oDY
kLPzHYYfuFfEZs7Hp3tMFGeSGQC+1dJGxhN5+YcfV1BVHxeez4n+ufxuarDIXKkA
5ZE=
-----END CERTIFICATE-----