Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c686f00-7a8a-470a-9f73-d55c6e3e9624.roa
File:                     0c686f00-7a8a-470a-9f73-d55c6e3e9624.roa (raw, json)
Hash identifier:          6CvWlKN0ZDfH1kBBboBjzHIKewQAo9/6k00TWepANcs=
Subject key identifier:   E4:9C:BF:FB:CF:A4:37:B8:48:A1:2F:A0:59:46:E6:1C:E1:21:ED:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29E650848F0E504BE8996CD6BDD36008C0C46F9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c686f00-7a8a-470a-9f73-d55c6e3e9624.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        56.241.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e6:50:84:8f:0e:50:4b:e8:99:6c:d6:bd:d3:60:08:c0:c4:6f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=8c1abcdb30213e8c647ae37d86fd6e46dea808e2c5ab160b2cb814a4d8e4e68a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:76:d4:72:dc:ce:54:fe:f7:aa:19:38:59:
                    d4:d1:f0:e3:4f:eb:54:e0:87:b9:90:33:a9:0d:59:
                    b1:1f:7c:11:07:ca:06:17:f0:89:92:20:32:2a:c8:
                    78:83:00:85:56:ae:5e:26:01:3c:dd:d9:f0:88:a1:
                    a0:df:d2:fe:0e:71:1f:81:19:b5:35:8b:0a:c6:62:
                    fb:90:26:b8:66:8d:d0:82:c7:58:1b:e5:8e:5b:02:
                    ef:c7:3b:2e:61:60:17:ce:e1:64:d6:df:38:d5:f4:
                    61:3a:18:03:34:a9:4b:80:1e:94:d4:a3:04:de:ab:
                    f7:98:ce:b7:cc:0e:36:fd:93:7a:e5:2f:b7:6b:ce:
                    01:d2:70:5f:3a:db:21:ed:45:22:d3:36:6f:a1:f8:
                    af:67:68:77:b5:0f:fe:83:9d:fa:52:7b:5f:59:fd:
                    f9:a0:84:06:bc:71:a4:7d:22:67:67:42:58:4b:58:
                    2a:77:e9:9d:ae:68:e1:d5:14:a6:73:7f:aa:c4:68:
                    8e:33:94:98:6a:ec:ce:31:3b:fd:74:8b:a3:77:3c:
                    9c:0e:f1:30:4b:5d:35:15:87:e3:98:fe:a8:53:0d:
                    2f:06:15:43:78:6f:bf:26:01:a8:16:98:a8:c0:58:
                    93:7f:aa:97:8e:89:48:f1:8a:e9:a7:dd:a3:97:21:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9C:BF:FB:CF:A4:37:B8:48:A1:2F:A0:59:46:E6:1C:E1:21:ED:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c686f00-7a8a-470a-9f73-d55c6e3e9624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:35:8e:df:ae:50:26:98:2d:ad:54:ed:ac:a5:62:31:f2:08:
         17:e4:4c:f6:3f:55:ce:06:81:df:c3:f0:d7:3d:18:c0:98:a8:
         0b:a1:7f:46:56:d4:c6:dc:88:71:bf:69:b8:ba:63:06:3e:e8:
         8f:d4:89:43:59:92:d5:db:27:ed:01:09:73:a4:ab:c3:2c:fc:
         d5:05:f4:85:0a:38:95:a5:0f:cc:16:22:b3:2d:e4:4d:d7:d3:
         7d:e6:7c:f8:7f:8f:84:2d:ee:6e:34:36:82:bf:b1:db:d6:13:
         67:14:75:3b:ec:20:d2:da:a0:25:71:55:aa:1c:3a:a1:ed:fd:
         be:42:b1:26:af:09:52:fc:3e:e9:39:86:de:6d:a6:19:15:4d:
         6e:29:7b:a2:fc:6e:b4:41:a8:cc:a8:d4:37:c4:68:cb:36:95:
         c6:4e:23:08:83:2d:d9:9c:d2:51:58:03:16:6b:3a:0f:95:f0:
         4f:5c:85:ab:a5:2f:9c:45:75:fb:0a:3d:a4:32:0c:b9:79:66:
         ac:69:8d:2f:59:2c:65:c3:e7:85:53:c2:c1:b8:48:fd:a0:4b:
         da:9c:eb:2b:8d:2e:05:a5:4e:c0:c6:50:14:dc:58:29:f0:50:
         e2:bd:e7:ae:08:95:e9:40:00:93:e6:b8:a0:eb:0a:48:cf:c0:
         96:57:7f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----