Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/abe42905-b032-4c0a-b08a-22ef7222b003.roa
File:                     abe42905-b032-4c0a-b08a-22ef7222b003.roa (raw, json)
Hash identifier:          gNeY7SuBzb66WEgtnZMwPluzXX/NYj6IYdh2vB1fu6A=
Subject key identifier:   B0:E0:87:A0:0B:F6:E8:59:5C:09:D7:44:13:33:0C:25:08:70:EF:23
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       291F3AEEFCAF0A826A41F6FD54C974ACED84951A
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/abe42905-b032-4c0a-b08a-22ef7222b003.roa
Signing time:             Tue 31 Dec 2024 00:00:00 +0000
ROA not before:           Tue 31 Dec 2024 00:00:00 +0000
ROA not after:            Tue 04 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:8400::/39 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1f:3a:ee:fc:af:0a:82:6a:41:f6:fd:54:c9:74:ac:ed:84:95:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Dec 31 00:00:00 2024 GMT
            Not After : Feb  4 23:59:59 2025 GMT
        Subject: serialNumber=7a11a5f3be5e1aaae26f78aef0abd624e66da78a07d100a3faebf3b745a36516, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:2a:e2:a0:42:6b:12:93:5a:20:1d:01:b2:
                    b8:88:e2:8c:c3:d7:a4:12:1f:d5:42:cf:fb:a9:9b:
                    90:c9:e7:fd:98:07:aa:1e:4b:7a:c5:d9:8a:c3:78:
                    33:e2:c4:65:d7:73:07:55:15:3d:65:d8:27:0e:1d:
                    7b:8a:60:46:d6:0b:53:0a:f8:ed:32:8e:4c:43:37:
                    bf:c4:1f:ac:23:70:26:8e:25:f9:bd:3b:1e:a5:a9:
                    ce:fb:7b:c1:23:1c:ce:02:4f:23:08:23:53:b0:79:
                    bc:c0:97:51:75:86:13:06:24:db:6b:a5:90:43:4a:
                    a8:38:09:f4:9f:be:8d:98:b5:e8:53:14:99:e6:f4:
                    59:c1:30:59:64:e9:43:33:55:f1:49:26:ce:9c:c1:
                    28:39:38:07:ce:99:80:43:c6:11:49:9b:d4:4b:08:
                    0b:12:b6:af:6e:e2:89:aa:72:0b:02:09:f0:7a:2a:
                    f0:19:3b:7f:52:05:85:8f:92:9d:90:86:0b:28:c9:
                    4c:3f:5e:74:08:ca:8b:68:11:bd:74:f8:ed:63:1c:
                    f5:1a:be:c9:f1:fe:4c:c0:2f:ae:1b:0e:f8:0a:c2:
                    2e:86:01:e5:cc:cb:57:1c:10:40:b1:df:d6:dd:a2:
                    86:e5:2a:3d:70:0e:6d:1c:7c:a9:f1:21:c2:de:e1:
                    99:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E0:87:A0:0B:F6:E8:59:5C:09:D7:44:13:33:0C:25:08:70:EF:23
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/abe42905-b032-4c0a-b08a-22ef7222b003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:8400::/39

    Signature Algorithm: sha256WithRSAEncryption
         60:0e:e6:b2:30:68:6d:4f:0c:f9:bc:b6:a3:7e:70:f9:b1:ac:
         ba:36:c8:14:57:19:3e:30:0d:4b:a7:9e:6e:7c:d1:d5:68:a7:
         b2:32:cb:8e:71:da:28:70:e0:7d:09:07:02:4c:fc:63:26:03:
         ef:c6:29:06:8d:ec:05:c1:4c:ae:e8:23:57:50:b1:04:12:cf:
         b8:36:e0:21:55:2d:43:25:47:29:27:65:e3:22:a4:e4:67:9d:
         c9:cd:32:a3:6d:8a:3f:79:f5:82:c0:81:32:ce:e7:6f:00:26:
         2a:e9:4e:3e:ae:73:99:4d:c5:d4:f7:ef:41:6b:d4:00:84:e3:
         44:e4:0f:07:0c:56:7a:b0:da:5a:73:6a:58:64:6d:0f:6c:02:
         46:74:4d:d5:84:b8:9f:1c:48:d0:2c:06:a4:d1:c2:c9:e9:0f:
         7c:c9:a5:e2:79:bc:06:78:e6:fc:fe:f7:e5:1c:fb:d1:92:24:
         35:87:f8:34:23:45:b5:c5:3d:ff:39:8b:ef:d1:e4:d1:b6:ff:
         4d:53:a7:c6:2d:63:03:fa:28:20:f4:a6:9f:32:8e:9b:52:86:
         47:72:73:e2:f2:60:48:e3:01:92:0f:e0:40:3e:af:85:26:53:
         a3:41:42:32:c6:b4:4d:e8:e9:bc:15:b4:c9:38:83:e2:6a:d0:
         11:6b:da:7c
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUKR867vyvCoJqQfb9VMl0rO2ElRowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4
NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjQxMjMxMDAwMDAwWhcNMjUwMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3YTExYTVmM2JlNWUxYWFhZTI2Zjc4YWVmMGFiZDYyNGU2
NmRhNzhhMDdkMTAwYTNmYWViZjNiNzQ1YTM2NTE2MS0wKwYDVQQDEyQ4Zjk1ZTRk
MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1IyrioEJrEpNaIB0BsriI4ozD16QSH9VCz/upm5DJ5/2Y
B6oeS3rF2YrDeDPixGXXcwdVFT1l2CcOHXuKYEbWC1MK+O0yjkxDN7/EH6wjcCaO
Jfm9Ox6lqc77e8EjHM4CTyMII1OwebzAl1F1hhMGJNtrpZBDSqg4CfSfvo2YtehT
FJnm9FnBMFlk6UMzVfFJJs6cwSg5OAfOmYBDxhFJm9RLCAsStq9u4omqcgsCCfB6
KvAZO39SBYWPkp2QhgsoyUw/XnQIyotoEb10+O1jHPUavsnx/kzAL64bDvgKwi6G
AeXMy1ccEECx39bdooblKj1wDm0cfKnxIcLe4Zm9AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUsOCHoAv26FlcCddEEzMMJQhw7yMwHwYDVR0jBBgwFoAUHl8tYvha0oTU
0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05
Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm
NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh
MzhjMzJmZDRjL2FiZTQyOTA1LWIwMzItNGMwYS1iMDhhLTIyZWY3MjIyYjAwMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl
LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmBg9AhDANBgkqhkiG9w0BAQsFAAOCAQEAYA7msjBobU8M+by2o35w+bGs
ujbIFFcZPjANS6eebnzR1WinsjLLjnHaKHDgfQkHAkz8YyYD78YpBo3sBcFMrugj
V1CxBBLPuDbgIVUtQyVHKSdl4yKk5Gedyc0yo22KP3n1gsCBMs7nbwAmKulOPq5z
mU3F1PfvQWvUAITjROQPBwxWerDaWnNqWGRtD2wCRnRN1YS4nxxI0CwGpNHCyekP
fMml4nm8Bnjm/P735Rz70ZIkNYf4NCNFtcU9/zmL79Hk0bb/TVOnxi1jA/ooIPSm
nzKOm1KGR3Jz4vJgSOMBkg/gQD6vhSZTo0FCMsa0TejpvBW0yTiD4mrQEWvafA==
-----END CERTIFICATE-----