Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68953288-3f67-4b9d-a653-1252cacd8da5.roa
File:                     68953288-3f67-4b9d-a653-1252cacd8da5.roa (raw, json)
Hash identifier:          t++WQb65KDAYw1Flk7QMnf5CrnDdrZFTjjLEcDZX0L4=
Subject key identifier:   27:C4:9A:EC:8B:E8:E4:1C:0A:73:F2:0F:50:E4:82:BB:24:7D:3C:8B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6197C572FABFAEFCB59AEB4B30F87AE0565271EA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68953288-3f67-4b9d-a653-1252cacd8da5.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.60.0.0/14 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:97:c5:72:fa:bf:ae:fc:b5:9a:eb:4b:30:f8:7a:e0:56:52:71:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ad:0f:35:6e:c2:0a:44:90:2f:31:04:52:de:
                    78:9c:c4:f0:5f:19:9b:ab:b9:4a:4b:44:c1:ec:62:
                    eb:0e:66:67:3d:69:8e:64:bb:f3:76:25:1d:a9:39:
                    48:b0:6f:00:d5:2b:01:25:97:cc:68:02:c6:e7:18:
                    c1:8c:a6:1e:32:39:77:1f:ab:38:13:6e:0d:9c:62:
                    5e:73:17:1c:02:6e:6d:10:e2:44:42:31:ab:11:4e:
                    89:0e:db:05:83:f8:66:e1:f1:a9:6a:d6:85:0c:21:
                    3b:3d:e1:74:bf:bb:4e:71:5d:eb:a7:f5:18:15:cd:
                    c3:24:b9:5b:3f:56:50:33:30:7f:20:d3:b3:05:20:
                    0a:1b:92:7e:26:a8:b6:1c:62:7d:98:56:66:8c:fd:
                    33:62:5b:9f:67:34:bf:0f:8b:72:1a:a9:39:a4:38:
                    dd:38:d3:2d:ac:b4:4b:46:86:65:20:3c:05:37:91:
                    09:90:c4:59:cf:c1:81:e3:be:40:3e:b3:71:5b:85:
                    60:a6:9a:12:c0:3b:df:d2:d4:b2:54:b7:5f:4f:81:
                    51:b5:0c:13:02:83:9c:e3:e8:7f:14:86:ce:b5:d8:
                    f5:9c:11:78:cc:ed:56:0a:8b:fa:10:c1:11:ca:c5:
                    65:9a:44:5d:43:fd:44:c3:82:ba:9f:91:2d:15:f5:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C4:9A:EC:8B:E8:E4:1C:0A:73:F2:0F:50:E4:82:BB:24:7D:3C:8B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68953288-3f67-4b9d-a653-1252cacd8da5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.60.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:b3:b6:76:34:7e:e3:bf:c9:18:66:b0:01:00:c2:6d:f1:
         19:53:6c:d8:dc:c5:af:63:37:e5:e1:40:0d:b0:a6:63:bf:c7:
         1f:2f:2c:6c:ca:2c:a7:2f:85:95:a8:09:7d:bc:a9:7d:4a:4d:
         42:4c:ba:75:ae:e7:e3:61:fb:01:f3:ca:49:b4:dd:1f:70:b1:
         8a:78:c4:59:d6:92:60:91:72:e5:a1:3c:94:67:c9:ef:22:cb:
         95:cf:ae:58:3b:9b:f8:b4:11:a1:58:a4:d0:5b:99:de:58:b8:
         b8:7c:71:8c:72:6f:cb:08:34:83:7a:4f:4f:a0:9d:61:b5:66:
         58:ec:1b:d5:ea:76:ed:98:a8:c8:64:e4:04:e8:27:91:81:14:
         a8:d4:3a:47:c5:68:42:95:59:4d:4a:43:e5:b3:c7:d2:86:fa:
         71:5a:b5:11:ed:a7:bb:9a:7d:e7:f1:43:4f:df:29:19:ec:b8:
         bb:7c:43:25:f1:4c:aa:13:37:f6:1a:93:41:69:f4:4f:85:a1:
         1f:14:f9:b3:b8:a2:27:67:a9:b5:a6:73:4e:d7:26:72:09:95:
         40:61:e6:78:cd:04:23:e7:2c:e7:9a:81:39:d3:ef:27:43:a4:
         75:76:da:0b:dd:5c:0a:b0:ac:7b:22:b0:01:50:42:b4:99:14:
         06:4e:a6:18
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUYZfFcvq/rvy1mutLMPh64FZSceowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjEwMDAwMDAwWhcNMjUwMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYjQ5YThkYzRlNmY3ZDc5YWMxZGQxNzhhYzk0MjNlMDE5
OWI1MDBhODM5YThiODA4ZDdiOTdjYTA2NWQwMDJiMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD1rQ81bsIKRJAvMQRS3nicxPBfGZuruUpLRMHsYusOZmc9
aY5ku/N2JR2pOUiwbwDVKwEll8xoAsbnGMGMph4yOXcfqzgTbg2cYl5zFxwCbm0Q
4kRCMasRTokO2wWD+Gbh8alq1oUMITs94XS/u05xXeun9RgVzcMkuVs/VlAzMH8g
07MFIAobkn4mqLYcYn2YVmaM/TNiW59nNL8Pi3IaqTmkON040y2stEtGhmUgPAU3
kQmQxFnPwYHjvkA+s3FbhWCmmhLAO9/S1LJUt19PgVG1DBMCg5zj6H8Uhs612PWc
EXjM7VYKi/oQwRHKxWWaRF1D/UTDgrqfkS0V9aaNAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUJ8Sa7Ivo5BwKc/IPUOSCuyR9PIswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzY4OTUzMjg4LTNmNjctNGI5ZC1hNjUzLTEyNTJjYWNkOGRhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwISPDANBgkqhkiG9w0BAQsFAAOCAQEAP/6ztnY0fuO/yRhmsAEAwm3xGVNs
2NzFr2M35eFADbCmY7/HHy8sbMospy+FlagJfbypfUpNQky6da7n42H7AfPKSbTd
H3CxinjEWdaSYJFy5aE8lGfJ7yLLlc+uWDub+LQRoVik0FuZ3li4uHxxjHJvywg0
g3pPT6CdYbVmWOwb1ep27ZioyGTkBOgnkYEUqNQ6R8VoQpVZTUpD5bPH0ob6cVq1
Ee2nu5p95/FDT98pGey4u3xDJfFMqhM39hqTQWn0T4WhHxT5s7iiJ2eptaZzTtcm
cgmVQGHmeM0EI+cs55qBOdPvJ0OkdXbaC91cCrCseyKwAVBCtJkUBk6mGA==
-----END CERTIFICATE-----