Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b695a6b-ec66-4d2c-9703-db1465b53dd4.roa
File:                     6b695a6b-ec66-4d2c-9703-db1465b53dd4.roa (raw, json)
Hash identifier:          92DssWcKOEEa9EFlNEh7f1SIKX/s45korYY/4smm6dg=
Subject key identifier:   E2:1B:E8:EB:F9:FD:D6:AA:B8:99:D2:29:D3:44:09:3B:CD:C4:19:18
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0A45C2DB5C17344BD7D0863F94577A8EF6B7B359
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b695a6b-ec66-4d2c-9703-db1465b53dd4.roa
Signing time:             Fri 13 Dec 2024 00:00:00 +0000
ROA not before:           Fri 13 Dec 2024 00:00:00 +0000
ROA not after:            Fri 17 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        176.34.128.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:45:c2:db:5c:17:34:4b:d7:d0:86:3f:94:57:7a:8e:f6:b7:b3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 13 00:00:00 2024 GMT
            Not After : Jan 17 23:59:59 2025 GMT
        Subject: serialNumber=d88031856329463817d25f46c45a7baa0ba7c751193d0fa49127d367c3a48f83, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:eb:cd:18:39:38:41:b7:47:66:cb:be:58:
                    8e:ce:f1:6d:af:b3:1e:b3:c0:65:fd:09:c4:99:73:
                    99:a9:67:7f:7c:17:00:05:89:91:c1:ed:25:47:32:
                    09:ba:06:e7:59:12:fa:f6:ac:df:e1:f7:2b:a2:39:
                    9c:f9:c6:aa:9d:91:5b:b9:1c:fd:be:9b:0b:b3:bf:
                    de:bf:99:b2:f6:15:f9:53:36:12:18:fe:22:54:5d:
                    0f:ab:f7:33:98:10:30:69:69:75:e7:f5:88:57:b0:
                    49:b1:93:6b:20:a4:d8:b3:af:06:c8:ef:8b:a8:b9:
                    93:f9:24:45:f7:37:52:1a:2d:0f:d3:19:0d:b8:49:
                    83:be:3d:37:c4:75:87:0e:5f:ee:3b:52:f3:a2:13:
                    76:b8:04:04:77:07:b6:5f:7d:8e:35:d2:81:f2:bd:
                    0b:f1:f6:4b:5b:66:b4:54:43:b3:21:5f:a8:0e:0b:
                    7c:6b:cc:50:b6:78:3e:81:00:a5:43:b2:18:03:b0:
                    b8:da:a1:fb:e9:3e:d6:7b:2e:ec:84:07:92:f8:16:
                    83:dc:b4:bd:52:0b:c8:eb:d5:3b:b4:0f:52:1a:1c:
                    1e:83:c4:b2:89:77:5a:40:50:5a:a3:74:ff:05:c8:
                    79:21:e4:a7:ee:53:ff:5d:bf:b7:1d:04:63:25:71:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1B:E8:EB:F9:FD:D6:AA:B8:99:D2:29:D3:44:09:3B:CD:C4:19:18
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b695a6b-ec66-4d2c-9703-db1465b53dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.34.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         13:8e:bb:aa:bc:bc:ee:61:2c:79:95:d0:bd:0b:54:c5:c0:ee:
         ce:24:f2:60:97:24:b8:41:58:4c:eb:e5:3d:54:42:e0:f3:16:
         5f:3f:19:96:38:78:3b:95:09:a5:5d:a1:6e:7f:dc:cf:2f:11:
         34:58:b0:a3:e9:c0:3a:45:94:00:ef:4a:be:be:0b:d0:ac:68:
         c0:1a:39:46:13:6d:ad:28:5c:a8:7a:84:c1:4e:ab:9a:cb:94:
         0a:81:b1:b4:c7:2e:cc:e6:2b:02:c8:a1:26:ac:bf:47:87:7f:
         63:c8:34:29:1f:69:a5:7b:9d:c6:49:6d:a5:11:02:45:96:dc:
         12:6c:08:28:51:9f:a3:6a:6d:bf:8a:53:e3:c5:17:47:77:e5:
         14:13:48:de:98:f2:06:58:74:01:3a:65:80:d9:59:bc:be:51:
         15:58:8f:5f:7b:48:63:b9:1c:ef:a3:2c:2c:d4:62:22:c0:e5:
         5a:ac:cb:ec:ee:3c:5c:e5:c2:88:98:01:65:2a:06:aa:9a:94:
         8b:40:c3:b8:84:86:5a:f8:cf:39:43:ce:24:9b:53:6c:53:55:
         16:40:9c:c3:82:ef:dc:22:80:a5:fb:79:45:a5:ab:49:65:b2:
         b3:d5:ee:41:20:1c:19:49:02:e9:12:0b:7e:db:74:cf:0a:27:
         74:09:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----