Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/947bb2de-efc5-4067-a19f-264e77e316ea.roa
File:                     947bb2de-efc5-4067-a19f-264e77e316ea.roa (raw, json)
Hash identifier:          KHgqfPJvU6+Gp4tnJoP9WN1XR7en02UyWDprEqygzTc=
Subject key identifier:   A8:15:8C:9C:B5:44:03:66:8D:F2:78:C7:66:1C:CF:E3:6D:15:84:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F5DBDEC439DB21992E9D25EBD52B9256C1C9E94
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/947bb2de-efc5-4067-a19f-264e77e316ea.roa
Signing time:             Fri 23 Feb 2024 00:00:00 +0000
ROA not before:           Fri 23 Feb 2024 00:00:00 +0000
ROA not after:            Fri 29 Mar 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f13:8000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5d:bd:ec:43:9d:b2:19:92:e9:d2:5e:bd:52:b9:25:6c:1c:9e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 23 00:00:00 2024 GMT
            Not After : Mar 29 23:59:59 2024 GMT
        Subject: serialNumber=7048ea6d43b0423fb83026a2c98ff9c540f0b1e094a42a7d0c6ebc46a0bc8a56, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:d6:d5:05:20:34:20:d6:99:b6:b4:dc:58:
                    92:bc:88:db:93:d9:02:d1:d0:82:2a:17:61:d3:fe:
                    2d:b9:2e:3b:3e:50:fd:db:2f:3d:ab:70:9e:1c:2a:
                    be:d8:81:50:dd:8c:64:4e:72:9f:e8:e4:29:22:e5:
                    56:a5:64:a2:e3:26:57:b9:11:ba:9d:fd:1f:c4:b1:
                    a6:57:6c:0c:7e:c8:08:51:17:fa:14:31:6b:7c:cf:
                    38:26:a3:70:db:a7:f6:38:d8:26:61:89:dc:88:79:
                    5f:38:6d:9e:31:49:ae:02:3d:21:5e:8a:1d:41:89:
                    a3:35:8a:69:4a:6d:5a:3b:39:3e:6d:6f:28:85:1b:
                    10:18:44:df:44:19:b7:18:c6:a1:cd:11:85:b7:b2:
                    b4:09:29:8b:0a:2a:75:2d:2f:c6:c7:0b:2e:30:da:
                    9b:ae:3a:36:5f:26:b8:55:d4:0f:b7:4b:08:4b:b9:
                    94:98:87:e9:a5:b3:5e:91:72:ac:f3:e1:92:28:58:
                    de:24:74:2f:b3:83:00:8c:53:84:6d:a9:13:22:f7:
                    ff:b8:51:d9:6e:dd:77:40:94:c7:da:78:a1:bf:24:
                    28:8e:9e:eb:f3:f3:93:a4:d4:4c:ed:f4:9c:e7:d3:
                    0f:4e:8e:f0:11:ef:27:e8:92:49:5a:a6:95:b4:71:
                    2b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:15:8C:9C:B5:44:03:66:8D:F2:78:C7:66:1C:CF:E3:6D:15:84:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/947bb2de-efc5-4067-a19f-264e77e316ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f13:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:15:de:4d:63:9b:05:c5:7c:71:68:a6:1e:56:9d:d0:22:4a:
         68:56:12:43:5b:52:09:b4:0a:cb:0c:3c:f2:e3:f3:94:3f:b8:
         c6:31:d4:b2:a1:02:6a:25:5d:12:65:6a:6a:3c:f5:f0:f3:bf:
         69:15:b6:b0:fc:2a:77:ee:6a:1d:f2:a4:e0:78:f2:61:a0:55:
         dd:a5:58:f5:f2:bb:93:0b:c5:7d:d0:a9:f0:21:64:97:c9:12:
         6c:1c:61:8f:61:71:ec:94:02:37:ec:01:ff:6d:5a:ce:60:d7:
         bd:a2:bc:11:a1:55:52:d8:ba:77:d1:3b:41:f4:34:22:15:23:
         1d:b5:ea:8d:f1:f1:85:fb:32:9f:d8:a1:54:22:47:e4:4e:09:
         3f:26:8c:88:28:7a:ee:ba:46:9d:0e:44:df:a9:7d:81:30:c9:
         8b:fe:fd:f6:de:7c:54:a3:5b:83:21:8f:cd:21:f7:73:81:ce:
         ae:46:96:41:ec:73:39:7f:27:99:6d:e4:b7:97:d9:ea:70:1b:
         12:38:4e:d6:ef:b4:e5:16:ca:2d:24:c1:c0:bb:aa:83:33:01:
         b3:fc:4f:5b:5f:3a:de:f3:6c:05:92:fb:fb:f7:9e:8c:8a:12:
         b9:7b:3f:79:50:fc:f5:d1:4f:dc:81:29:05:e6:be:a0:98:b3:
         49:60:cc:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----