Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/68fe3037-b87b-4379-a014-213012da3a11.roa
File:                     68fe3037-b87b-4379-a014-213012da3a11.roa (raw, json)
Hash identifier:          Wt0PlQChGuyTomUWfrcK5JjJWmyFiCdZsOK4oVfot78=
Subject key identifier:   58:9F:53:83:17:4C:D7:26:B6:40:FB:65:05:CD:61:2E:89:CA:40:2F
Certificate issuer:       /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial:       5430ADBEFE2636362F9B16D7A9F97811E462767F
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/68fe3037-b87b-4379-a014-213012da3a11.roa
Signing time:             Wed 25 Dec 2024 00:00:00 +0000
ROA not before:           Wed 25 Dec 2024 00:00:00 +0000
ROA not after:            Wed 29 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        103.8.172.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:30:ad:be:fe:26:36:36:2f:9b:16:d7:a9:f9:78:11:e4:62:76:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
        Validity
            Not Before: Dec 25 00:00:00 2024 GMT
            Not After : Jan 29 23:59:59 2025 GMT
        Subject: serialNumber=9c61bd685649a0420303aec7f1920dd968264e6b35e2054dd05cd6ad05972aca, CN=bb9a9116-f615-462e-a680-5266b327e0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:82:0c:70:bc:e4:03:ac:b5:ce:3c:15:e7:
                    80:6c:74:02:f4:4a:f5:53:dc:04:d8:24:a2:25:19:
                    5b:c0:26:19:63:01:30:ae:6f:f8:1d:1b:41:ef:04:
                    05:f5:83:64:80:9f:a7:9f:c3:e2:9f:fb:60:ee:ca:
                    a1:bb:b4:03:18:c7:23:76:09:8d:1e:05:3a:13:71:
                    76:e7:d4:45:3f:f8:70:f5:84:ef:32:fa:0a:4a:7d:
                    83:57:20:af:c5:fd:78:a2:27:c8:38:47:ed:12:5c:
                    47:35:a6:9b:a7:a5:38:cc:32:76:9b:79:8a:1e:54:
                    b6:8a:b2:9b:31:a7:83:a0:4f:8d:e5:25:18:28:58:
                    50:a4:38:60:97:9e:61:c1:c9:de:28:9f:4d:b8:4b:
                    4d:ac:97:50:53:eb:6f:69:c8:4c:30:f3:ea:3c:4f:
                    70:f6:68:98:3f:c2:d0:24:af:91:f1:9a:c3:f0:d6:
                    86:4f:c7:e7:4a:a6:f6:c6:33:83:5b:c6:42:62:ff:
                    30:53:ce:1e:2e:58:ed:7d:e4:36:59:c6:07:64:df:
                    5d:31:f2:c4:72:ce:9e:ad:7a:ec:26:09:49:58:8a:
                    45:53:a4:74:02:87:2e:d7:2e:4e:84:5a:0d:8c:02:
                    6c:30:f3:1c:af:20:bd:d0:b1:11:29:eb:40:01:f2:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9F:53:83:17:4C:D7:26:B6:40:FB:65:05:CD:61:2E:89:CA:40:2F
            X509v3 Authority Key Identifier:
                keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/68fe3037-b87b-4379-a014-213012da3a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:03:4e:40:f5:84:33:36:38:68:2b:70:50:b6:51:d7:d4:
         0a:13:a4:ba:77:d1:5a:c4:e4:9e:c3:42:51:5c:f4:0a:02:c2:
         4f:19:b3:8e:4b:0e:ac:8e:78:ba:5c:5c:cc:53:f3:11:ef:46:
         cd:52:1e:1e:ee:d1:c5:47:5b:e6:27:69:d4:f8:76:7c:8d:d1:
         fe:d4:20:1a:be:5c:2a:73:c0:63:f9:1a:8c:78:86:80:b5:e2:
         3c:f9:d5:18:31:9d:22:52:64:26:b8:a7:a6:d5:76:d6:6d:f6:
         62:8d:8e:47:c2:30:74:21:29:2d:5d:3e:5c:ba:6b:10:4e:ed:
         d0:8f:c6:b7:20:c3:5b:42:99:c7:bc:85:7c:66:0b:c4:c5:0d:
         b2:6b:90:14:a0:eb:84:44:15:4f:52:91:e2:c8:41:ba:f0:f5:
         1a:4e:e2:90:76:41:13:5e:aa:be:e5:94:0d:e7:b7:d0:a1:b3:
         14:b5:76:29:08:46:7d:f8:66:7c:92:5e:7f:36:8a:7f:57:b4:
         ac:c8:5b:0f:19:d8:81:9e:ac:2e:30:b0:81:0c:97:5f:71:80:
         f1:d3:84:be:dd:bd:4c:c4:99:db:8e:2c:24:57:16:de:bf:83:
         b9:ac:b0:e0:79:c5:8b:bd:6f:a3:b6:50:01:aa:b3:1c:fd:54:
         70:b4:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----