Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1969fe99-868c-4004-9e48-edd9ce55b923.roa
File:                     1969fe99-868c-4004-9e48-edd9ce55b923.roa (raw, json)
Hash identifier:          3gjT5G7JVIa9ZnG+LHGJFZ9axKQS6pnnbRct7eIxT9E=
Subject key identifier:   2A:3C:84:BD:B0:07:D4:1C:50:65:60:28:1B:6F:36:FD:84:2E:33:44
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       163FAC1B76E314820287BFA60DBF8ED8D1EAC6C6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1969fe99-868c-4004-9e48-edd9ce55b923.roa
Signing time:             Tue 24 Dec 2024 00:00:00 +0000
ROA not before:           Tue 24 Dec 2024 00:00:00 +0000
ROA not after:            Tue 28 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.35.208.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3f:ac:1b:76:e3:14:82:02:87:bf:a6:0d:bf:8e:d8:d1:ea:c6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 24 00:00:00 2024 GMT
            Not After : Jan 28 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:b6:31:7d:91:72:b2:ba:69:0c:95:c8:d4:
                    2e:37:35:b1:6f:df:8a:77:d6:42:05:93:68:4e:5b:
                    5d:fb:e9:fa:1e:b0:db:6d:4c:66:33:2e:95:3e:38:
                    84:65:7e:06:5c:ca:ed:80:ec:8d:56:9c:e6:2a:82:
                    f4:eb:18:e7:db:07:6e:5c:84:85:d2:e3:30:1c:e3:
                    1b:ca:c1:98:1a:67:81:c5:92:c8:98:ef:27:78:b5:
                    32:b4:82:60:2b:1d:99:85:fd:e4:83:8e:dd:08:25:
                    4e:9d:cb:69:9e:18:3f:23:04:93:a7:47:5c:ea:24:
                    71:13:f0:f9:b3:0a:c9:62:42:bc:56:0a:e8:4b:a1:
                    e1:76:9d:16:36:08:fd:f0:f6:21:0a:7d:8b:30:32:
                    e7:ff:46:6d:e1:b3:43:c5:26:eb:8b:21:e1:15:42:
                    98:44:75:2f:44:8f:78:32:d8:ce:4b:ca:32:6e:dd:
                    33:a7:a4:60:ec:3f:f6:88:b7:90:ee:7a:79:95:ea:
                    94:06:b6:ad:42:4a:03:bb:a1:d5:c7:e2:6d:6a:07:
                    2a:a0:eb:35:0b:73:4b:a2:91:2b:c8:56:42:0a:83:
                    a6:ba:31:7a:f5:49:a4:64:45:1f:39:dc:59:00:16:
                    3e:bb:00:cf:4a:3a:e9:86:1c:51:6e:17:97:a8:6e:
                    c6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3C:84:BD:B0:07:D4:1C:50:65:60:28:1B:6F:36:FD:84:2E:33:44
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1969fe99-868c-4004-9e48-edd9ce55b923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.35.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:bb:63:90:03:31:ac:3d:2b:08:c2:c1:ea:88:88:19:dc:
         4b:49:bf:c1:81:3c:38:fa:2e:73:c8:a0:ca:5e:c4:09:ab:ed:
         12:6a:f1:f3:27:20:20:d0:da:58:3d:8d:1a:c1:4f:3d:f7:1d:
         aa:6e:89:da:37:f7:a2:58:ab:99:85:13:d6:dd:09:e1:e4:f2:
         0d:40:5c:d1:a1:f4:c6:a7:11:6b:83:63:97:d4:87:74:67:53:
         f0:46:81:5a:36:2f:75:ea:a2:b1:57:8e:1f:81:74:6b:8e:e6:
         f8:c7:9f:f1:e3:49:58:a7:6a:f4:93:d8:75:df:90:fe:c6:0f:
         04:b0:dc:62:d0:57:0c:34:e6:eb:04:14:32:fd:41:65:90:c8:
         65:40:95:a1:79:f2:9b:ea:f6:ce:1d:4f:81:dc:af:77:2c:f2:
         b6:eb:da:ff:80:53:5e:fb:97:c8:6c:b0:e8:72:a7:30:ae:63:
         fc:58:8b:c3:71:5c:a1:8f:8c:ad:21:f9:cd:2b:5d:2a:9f:42:
         a4:d4:e4:33:d8:37:10:bb:db:85:85:11:b9:4e:5e:13:17:dd:
         05:e4:8d:01:5d:83:68:a9:dd:fc:7a:94:fe:24:c0:5f:e4:8b:
         ba:b0:19:e7:1c:18:6b:96:cc:c9:f4:37:c6:70:18:e0:96:08:
         46:6e:71:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----