Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19f20629-a100-4144-b659-45d887410cc9.roa
File:                     19f20629-a100-4144-b659-45d887410cc9.roa (raw, json)
Hash identifier:          7oHnunm322FGmoKwjkkj2mfIWtQgfT9R+iXQhLbA7IU=
Subject key identifier:   F1:F3:5D:18:F2:18:32:3D:8E:EB:E9:8B:E9:1B:6E:65:7E:D2:34:5F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3BF1569291B8C8D04CC7886785B0FE1EC25B0DDE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19f20629-a100-4144-b659-45d887410cc9.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.5.72.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f1:56:92:91:b8:c8:d0:4c:c7:88:67:85:b0:fe:1e:c2:5b:0d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:f6:5d:9d:70:1e:c6:c5:5a:8e:74:d5:e9:
                    59:ca:f2:f2:39:89:dc:e3:d8:c2:fe:e6:20:74:56:
                    a4:eb:7a:73:90:aa:48:ac:97:bc:cf:1b:ba:05:df:
                    99:8b:a6:ee:42:1c:cd:7a:aa:50:0c:29:b1:c5:2b:
                    e4:a6:53:cc:bc:d0:9a:3a:80:44:66:b4:5c:32:a2:
                    41:06:ad:0e:90:71:3b:a3:9e:a0:92:12:4b:59:a2:
                    92:c5:16:a2:93:4e:ed:af:31:7d:00:a7:57:80:92:
                    8b:4e:cc:1f:ce:c9:91:b2:29:6d:e4:e5:fe:ed:9e:
                    ae:6c:ce:8a:6e:e1:06:a2:56:5d:a0:ee:b6:68:98:
                    12:e0:fe:f7:1e:f7:c4:81:f8:4f:8f:18:6f:02:08:
                    af:bf:1a:6d:35:7c:1b:98:ba:52:a1:1b:01:c3:fa:
                    11:79:47:d6:7c:49:47:e6:a1:f2:1e:c9:45:fb:d5:
                    0f:cc:aa:21:c6:c2:c7:1f:26:92:d4:94:16:61:8d:
                    b7:7b:9e:22:27:5d:5e:04:fa:29:a2:aa:e5:a6:b1:
                    b0:b6:de:88:a9:a7:ed:e3:93:8a:0b:07:3d:78:35:
                    5c:cc:6d:5d:7c:3e:5c:78:5e:d6:50:de:76:42:a4:
                    e9:32:2c:03:87:29:5d:e2:bc:ef:5f:1d:e4:92:63:
                    7f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F3:5D:18:F2:18:32:3D:8E:EB:E9:8B:E9:1B:6E:65:7E:D2:34:5F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19f20629-a100-4144-b659-45d887410cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.5.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:bd:e3:4c:06:1a:8a:50:cc:fe:2f:07:37:a8:21:5c:55:b2:
         d9:7b:cb:2b:db:f5:49:fb:a0:57:c1:dd:47:fc:1c:bc:d7:a5:
         ef:3b:5a:ea:ca:5d:2e:86:c7:9d:f9:7b:eb:a4:ce:61:0c:60:
         0a:9a:fd:da:fe:2b:1b:77:2f:6e:82:ce:00:95:b0:3a:c5:af:
         6f:d4:10:10:6b:db:71:65:0a:e5:fe:44:fe:24:4d:43:cb:d6:
         aa:43:34:76:13:71:4b:da:7d:bc:31:88:80:e0:42:36:4e:62:
         b6:bc:3c:e9:15:55:df:20:fd:6e:5b:a3:7d:09:fa:dd:39:f3:
         b5:33:3c:1b:fa:e2:84:3c:91:f6:b2:d3:6c:73:01:24:96:ad:
         b7:b9:1b:09:65:c0:e6:d1:6f:4c:98:40:05:7e:fa:e8:f2:a3:
         ce:85:c4:d6:57:f3:31:b6:c5:c0:c4:c6:a1:05:fa:4d:82:00:
         a6:ff:72:d7:50:f0:4a:9d:fe:9d:6d:b6:27:0b:f4:3d:f9:39:
         38:ac:a6:c9:57:0a:6b:2b:a3:31:08:38:02:90:ea:90:a1:3d:
         08:13:7b:0b:f0:03:3f:59:e9:db:ff:78:4f:ea:61:5f:29:d0:
         eb:27:f4:52:85:fb:96:84:6c:69:54:1f:21:0d:fc:a7:a1:d0:
         84:3b:cf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----