Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfd0398f-9f8a-423b-81aa-122fc571f9ea.roa
File:                     dfd0398f-9f8a-423b-81aa-122fc571f9ea.roa (raw, json)
Hash identifier:          Gy1h0+uwHn3UTbHlrBiY0hlz9e3Nf0jmKOPPgecaLhc=
Subject key identifier:   45:D2:2B:3E:28:73:7F:9A:23:24:5B:8B:C1:07:04:38:A8:BF:BB:25
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1F42B6F6F55598BE5E8FEB5EFE365463EAD64DF7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfd0398f-9f8a-423b-81aa-122fc571f9ea.roa
Signing time:             Fri 14 Mar 2025 00:00:09 +0000
ROA not before:           Fri 14 Mar 2025 00:00:09 +0000
ROA not after:            Fri 18 Apr 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2406:da30::/32 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:42:b6:f6:f5:55:98:be:5e:8f:eb:5e:fe:36:54:63:ea:d6:4d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000
        Validity
            Not Before: Mar 14 00:00:09 2025 GMT
            Not After : Apr 18 23:59:59 2025 GMT
        Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:60:b5:cb:18:ec:8a:31:47:70:db:87:20:
                    38:53:68:e3:1c:2a:cb:a1:b7:ef:ef:cc:62:ee:26:
                    1e:e3:68:e5:4e:37:10:b1:1d:87:e4:97:aa:f6:9e:
                    65:40:98:57:ca:b5:b2:41:9c:a3:00:0b:6c:5d:83:
                    ee:37:07:20:fd:67:e5:dd:08:d8:33:82:86:23:c4:
                    72:ac:83:49:3f:b7:44:ea:07:bc:53:09:5c:aa:d1:
                    fa:43:17:e7:a2:ea:94:cc:4f:ad:30:e5:9c:12:f3:
                    49:95:0e:29:e2:1b:0e:ae:1e:7a:5a:ce:4e:d5:92:
                    d7:50:6f:7e:f6:82:79:02:40:3f:6d:34:3b:3f:ee:
                    b4:40:93:e4:fd:29:7b:11:0c:60:8b:31:d7:59:00:
                    63:28:f4:f1:a6:09:3a:43:14:83:12:89:6d:8e:dc:
                    6d:73:24:59:3f:04:50:d7:8e:41:3a:c6:87:d3:b7:
                    c4:92:40:ca:52:0d:84:53:65:e2:65:0b:7b:1b:99:
                    ec:a0:5d:e0:8e:c1:e5:b0:8c:de:40:92:07:02:f2:
                    8c:3a:f6:bb:70:2a:c0:b0:b2:fc:53:14:01:ff:ed:
                    c3:d9:70:e5:5c:f8:48:19:9e:23:d7:95:cb:08:17:
                    de:93:4d:61:87:17:74:b1:a7:ae:1c:ff:58:c8:6d:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D2:2B:3E:28:73:7F:9A:23:24:5B:8B:C1:07:04:38:A8:BF:BB:25
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfd0398f-9f8a-423b-81aa-122fc571f9ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da30::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:5b:91:67:0c:f4:1b:f3:34:26:dd:76:55:af:1c:e2:49:2f:
         91:bc:16:a7:25:15:5f:61:2c:f0:9c:1e:ab:f8:35:f1:56:f2:
         c3:41:3d:81:b1:57:28:47:4b:b9:df:10:8c:99:79:da:55:32:
         11:21:cd:73:21:d1:e6:40:16:9b:df:ea:52:89:2d:34:e6:55:
         9c:e0:bc:f1:c8:50:2e:35:81:38:e4:7b:f5:e1:ca:1d:06:dd:
         d7:aa:4c:06:9e:44:3c:01:cf:f5:bc:f6:86:3e:21:c4:81:00:
         af:a6:9e:49:35:e4:f0:30:ad:ab:be:a4:66:85:43:13:45:b7:
         11:46:08:41:c1:d2:b0:75:82:ad:eb:2c:ad:6f:28:9a:ee:40:
         95:13:10:fe:0a:4d:1f:69:84:96:1f:fa:07:2e:fd:73:b2:bc:
         0f:5a:a5:39:74:d7:6f:4c:ce:4b:49:c4:a6:d3:02:ae:01:a7:
         7f:da:a8:ab:68:92:e0:18:e3:ab:6f:4d:e8:f3:71:54:cf:f1:
         4d:f9:3a:5b:61:3b:d4:70:ab:ed:8f:24:70:8f:c7:c8:4e:76:
         aa:5e:57:ec:cf:b9:6c:38:05:59:fe:03:36:5c:b0:19:79:af:
         7e:4c:71:d8:c1:36:eb:f1:31:39:ab:ee:42:89:f6:0b:2c:87:
         74:d0:f8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----