Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8c24eb90-9208-4e18-96a8-b80e7845ecfb.roa
File:                     8c24eb90-9208-4e18-96a8-b80e7845ecfb.roa (raw, json)
Hash identifier:          m2a/z1i9waV2HCi5Vbd77kTXekU6oaxseU1WxXUT+h0=
Subject key identifier:   16:06:3F:23:9B:2F:70:B4:80:E8:B5:49:0D:EB:DB:B1:76:A4:5A:82
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       5F4F074B14127D2161784E4EA335BF5D79A10D12
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8c24eb90-9208-4e18-96a8-b80e7845ecfb.roa
Signing time:             Mon 23 Dec 2024 00:00:00 +0000
ROA not before:           Mon 23 Dec 2024 00:00:00 +0000
ROA not after:            Mon 27 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.144.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4f:07:4b:14:12:7d:21:61:78:4e:4e:a3:35:bf:5d:79:a1:0d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Dec 23 00:00:00 2024 GMT
            Not After : Jan 27 23:59:59 2025 GMT
        Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:7c:71:06:0e:8c:ec:29:ed:76:78:d3:1e:
                    5a:16:07:08:df:90:7c:ce:6b:60:c8:9a:dd:22:1d:
                    cf:82:f9:ff:fd:27:f5:f4:bb:d3:6f:9f:ab:b7:f7:
                    fc:48:f8:63:48:19:22:03:e5:2d:04:99:e7:ef:70:
                    c7:00:e7:83:2d:0a:49:c7:41:0d:21:85:5a:b7:ce:
                    a7:34:70:b3:f3:7d:ce:56:bc:48:61:aa:73:56:a9:
                    45:0f:15:6c:7a:85:ca:87:db:5b:bc:53:b3:d6:c4:
                    db:97:dd:7c:b0:bb:1b:ba:ac:95:b5:4f:98:39:13:
                    cd:2f:cb:bd:3e:1a:75:33:42:32:3e:96:4c:5d:b3:
                    8c:3a:0a:c1:a9:8f:ed:e2:ae:ec:88:fe:7b:d2:35:
                    8d:d4:8b:3e:17:f2:ce:9c:55:38:74:1f:78:d7:b4:
                    ba:88:00:24:fd:20:a4:7b:25:2a:60:ec:8d:3b:05:
                    f0:8e:cd:d9:9a:02:3e:d6:dd:9b:b4:9a:f4:7e:4b:
                    11:5c:62:93:44:6c:6e:4a:8a:ca:93:9c:c9:f6:dd:
                    7b:b2:fe:33:ad:62:ac:64:2a:a3:c7:1b:c4:b2:15:
                    25:40:76:8d:63:fc:55:a1:47:58:bc:25:87:fe:14:
                    0d:4d:e9:7b:30:c6:37:21:d1:3b:af:1d:62:29:3c:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:06:3F:23:9B:2F:70:B4:80:E8:B5:49:0D:EB:DB:B1:76:A4:5A:82
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8c24eb90-9208-4e18-96a8-b80e7845ecfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:3d:c8:8c:b8:1f:df:e3:d6:18:b4:32:52:3a:a1:aa:27:63:
         23:64:4b:57:55:cb:61:3f:8f:e7:66:d1:fe:55:6b:c4:cc:7f:
         78:37:30:80:9b:63:2a:19:40:0d:a1:8e:75:20:e8:2a:62:46:
         4c:d7:8a:ed:f1:72:a2:06:ef:28:8e:60:47:29:b5:fc:ca:ae:
         9e:51:d7:b4:dc:75:41:67:b2:1e:a2:8a:f1:34:eb:9b:b4:9a:
         2c:bf:1b:0c:4a:c3:05:73:d6:e2:14:88:4c:46:5d:20:83:6f:
         11:89:54:36:d3:fb:79:d8:74:ec:c8:e8:1f:cd:58:c7:87:55:
         65:79:f4:7e:20:77:c6:06:e5:b8:ef:2f:0d:f2:78:8c:d0:ea:
         40:11:b8:d8:d4:98:10:e4:ad:a3:45:b0:26:16:d8:48:d3:8d:
         96:e9:ec:85:a3:21:b2:73:f9:7d:c6:b8:18:cc:be:56:a4:47:
         22:e6:62:1b:b5:8e:a2:71:b9:91:f5:67:7e:2f:b1:8a:49:ba:
         e0:bf:0b:a0:f7:9a:31:18:dd:44:a5:49:82:a4:de:65:8d:ea:
         f0:b4:cb:b6:e0:f3:fb:18:8f:ed:34:13:63:05:51:ea:57:f1:
         7c:a0:f4:c5:ba:1c:25:b9:2f:be:bf:ff:1c:94:7f:71:6e:d0:
         b3:d2:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----