Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/0fd90883-20eb-4a41-834d-178df78fdcf2.roa
File:                     0fd90883-20eb-4a41-834d-178df78fdcf2.roa (raw, json)
Hash identifier:          1a/hNANowKxZ1E1pL/88Hs7JHpz5M08/ozINzBfjVLk=
Subject key identifier:   30:40:AC:BF:79:8C:35:01:B9:17:71:BC:43:44:2D:FD:52:69:16:C0
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       4CDD73FB8AD5717B3E5DC0EB57C024763F5CB305
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/0fd90883-20eb-4a41-834d-178df78fdcf2.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:9000::/39 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:dd:73:fb:8a:d5:71:7b:3e:5d:c0:eb:57:c0:24:76:3f:5c:b3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=daf422b36100c737b16827cdd8e64b489356dec0709510a44759cc8d864b1eaf, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:11:94:eb:2f:fa:e2:fa:f4:f8:66:d6:eb:
                    4a:5a:de:04:b7:16:a3:d2:30:a7:3d:89:67:f2:8f:
                    18:3e:54:49:6e:3e:5c:06:d7:f1:2e:c6:dd:09:f7:
                    42:dd:29:41:2c:3c:e2:b6:ce:98:a8:04:0b:d0:7e:
                    2f:0c:0a:35:93:a2:5f:9e:fa:c7:97:da:43:a5:23:
                    f0:2b:52:19:16:16:cb:7c:ed:15:6a:99:0e:2b:34:
                    7a:ab:a7:35:97:c7:4c:f0:c4:74:6b:78:b0:91:70:
                    7b:15:bb:bb:9c:00:42:2a:b3:2a:8b:a7:aa:a4:ed:
                    e5:72:4c:d0:9b:7d:21:49:b5:20:66:9b:56:dd:12:
                    e4:d2:c7:d5:bd:33:58:3b:e3:35:5a:7c:b1:22:6e:
                    77:19:0d:a8:1d:5c:56:b6:aa:b2:a6:9e:64:02:c1:
                    f1:c5:ed:e8:ee:99:10:e4:a4:1e:b4:f6:f3:b2:1f:
                    be:18:a1:32:e5:e1:f6:53:d6:80:ae:16:d8:01:9e:
                    9d:03:4c:02:8a:33:71:24:4d:a4:f7:4c:42:be:d2:
                    f0:65:99:fb:c7:57:99:05:c2:51:9e:4c:38:09:3f:
                    8c:b4:41:92:52:b5:81:06:fe:fd:44:e4:75:0d:73:
                    d3:29:32:e8:1e:7c:a5:8d:00:b1:b0:ca:7d:0d:64:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:40:AC:BF:79:8C:35:01:B9:17:71:BC:43:44:2D:FD:52:69:16:C0
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/0fd90883-20eb-4a41-834d-178df78fdcf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:9000::/39

    Signature Algorithm: sha256WithRSAEncryption
         3c:50:df:c7:8a:38:c3:d6:10:f6:fc:3f:1b:0c:aa:12:0e:c9:
         65:93:b9:17:89:ea:bc:ab:e1:c4:35:df:47:4e:e9:b9:15:ed:
         53:7f:20:4f:20:98:47:b5:de:04:0e:48:d8:8e:44:27:c6:5e:
         55:93:0c:5d:e2:4e:c7:21:39:a8:4f:0b:0d:c2:2c:47:8b:49:
         bc:75:92:6d:d5:93:57:72:75:45:b2:a4:83:e3:52:17:ff:2a:
         c2:81:14:ab:0d:dd:b4:84:e3:f5:70:da:ba:ef:18:67:d4:f3:
         72:fc:43:31:23:74:68:66:4f:9a:9c:07:29:46:22:80:cd:9d:
         61:14:12:17:a2:65:ea:91:cc:4d:8b:38:81:40:17:16:f8:f6:
         86:0f:77:b1:57:20:45:81:04:76:f6:77:ff:53:2b:26:51:da:
         5b:18:0f:25:9b:8d:c5:4a:09:ab:5c:ba:95:5c:ec:2f:67:75:
         ca:c3:2e:bf:6c:6a:cd:3c:1a:3e:2b:a8:17:5e:db:b2:cb:61:
         85:58:a1:69:95:e1:49:e6:f5:24:64:28:86:2b:87:25:b5:b7:
         f2:b3:50:3b:9b:03:43:53:ee:27:8d:e9:57:d0:3a:82:7f:93:
         87:1c:f7:8b:a1:13:9e:7b:db:30:a0:05:4d:9d:bb:72:d7:77:
         c7:50:67:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----