Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e7e19c1-c7c6-4535-a2a0-75f880691aac.roa
File:                     0e7e19c1-c7c6-4535-a2a0-75f880691aac.roa (raw, json)
Hash identifier:          2WwDCoxd71CjEUxCjYUg7MheDAltTfFXnbwIVSX4Qj0=
Subject key identifier:   63:AA:20:60:56:A5:FD:1D:C4:86:70:AD:DD:EC:8D:8D:60:E8:AF:68
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5610F760A1A4883D9CD781DF44508F8FEBBABCCF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e7e19c1-c7c6-4535-a2a0-75f880691aac.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.133.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:10:f7:60:a1:a4:88:3d:9c:d7:81:df:44:50:8f:8f:eb:ba:bc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=14548855c6bd295e4323896028f3676871ad9a4a7313a4ed8ca6976646e8be08, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:b4:ff:b4:ae:7e:ba:9b:9b:01:c4:b9:8e:
                    2e:49:75:7d:5a:4e:50:bd:a3:5d:35:89:f3:42:96:
                    bd:83:0a:6a:db:19:b2:83:bc:90:56:e0:77:43:cc:
                    9c:29:e8:31:8c:d2:b7:5b:a3:6a:73:c6:ac:17:19:
                    3e:f4:60:cb:3b:fc:d4:e8:09:3b:dd:ab:96:9e:cd:
                    fe:91:d2:97:e6:c1:ed:c3:f4:a9:eb:b9:1a:5e:f4:
                    ef:f3:8d:10:ee:7d:4a:4a:e0:28:59:42:dc:f6:b0:
                    42:bc:65:f6:74:03:1a:c2:89:ef:90:be:01:44:7e:
                    b8:d0:94:8a:3c:4d:95:f8:aa:82:e5:d0:34:a3:5f:
                    70:9a:27:76:da:59:dc:8f:f9:77:a7:30:76:82:06:
                    30:c9:73:90:93:d8:47:91:f8:b0:42:6a:72:4b:85:
                    e6:58:40:a2:07:af:98:8c:c0:2d:76:51:d1:76:84:
                    c8:4f:a7:36:c3:69:97:90:44:f5:b4:66:51:2b:06:
                    f6:3e:2b:37:ac:8b:00:78:08:06:bb:f0:7f:84:fe:
                    b2:6c:53:13:58:1a:76:87:fc:e3:06:a2:a1:a0:a6:
                    68:0d:e4:3b:eb:51:40:86:44:7d:10:f8:71:44:91:
                    7c:07:a3:47:23:f4:d0:77:e8:68:1f:8e:9c:45:fc:
                    03:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AA:20:60:56:A5:FD:1D:C4:86:70:AD:DD:EC:8D:8D:60:E8:AF:68
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e7e19c1-c7c6-4535-a2a0-75f880691aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.133.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:4e:ed:db:84:10:d8:98:0a:6d:14:b0:21:85:62:db:ab:28:
         b0:f9:d4:06:4a:97:a2:0f:2c:53:86:c3:00:ed:b6:a3:df:ef:
         e3:90:fa:4d:01:f5:f5:e7:da:a3:8b:67:f7:7c:93:ae:03:8a:
         5b:0f:25:58:8a:5e:ea:bb:c4:79:31:53:78:29:38:38:62:e1:
         24:3d:c5:78:0a:36:ea:6a:1c:56:c7:8f:d0:fb:97:c0:f9:25:
         a1:33:88:28:b5:98:e7:57:9a:c7:bf:54:7a:4a:57:17:a2:6c:
         f3:35:26:30:1a:9b:12:7a:d5:b0:b8:9e:51:ca:0c:df:4c:6a:
         0e:26:db:7f:c5:d4:8c:e3:bc:ad:29:6b:80:78:ff:ba:42:83:
         d7:91:49:97:19:84:00:85:75:2f:b8:51:9d:67:c1:c9:61:26:
         03:e0:e8:a1:45:58:66:a1:17:bb:f2:b1:41:ea:81:d0:14:10:
         47:76:cd:da:f5:f9:46:68:00:f4:6f:44:4b:bc:8b:9a:8a:96:
         5c:fe:4c:68:82:88:4f:17:9b:38:54:59:34:c4:9f:1a:bf:41:
         3e:3e:8e:44:f9:9c:db:dc:75:73:2c:da:de:e1:63:a9:79:f9:
         8d:53:46:ba:a6:04:e1:eb:2c:95:ff:9b:a6:ca:e0:64:21:c4:
         23:02:3b:ae
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUVhD3YKGkiD2c14HfRFCPj+u6vM8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNDU0ODg1NWM2YmQyOTVlNDMyMzg5NjAyOGYzNjc2ODcx
YWQ5YTRhNzMxM2E0ZWQ4Y2E2OTc2NjQ2ZThiZTA4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCKLT/tK5+upubAcS5ji5JdX1aTlC9o101ifNClr2DCmrb
GbKDvJBW4HdDzJwp6DGM0rdbo2pzxqwXGT70YMs7/NToCTvdq5aezf6R0pfmwe3D
9KnruRpe9O/zjRDufUpK4ChZQtz2sEK8ZfZ0AxrCie+QvgFEfrjQlIo8TZX4qoLl
0DSjX3CaJ3baWdyP+XenMHaCBjDJc5CT2EeR+LBCanJLheZYQKIHr5iMwC12UdF2
hMhPpzbDaZeQRPW0ZlErBvY+KzesiwB4CAa78H+E/rJsUxNYGnaH/OMGoqGgpmgN
5DvrUUCGRH0Q+HFEkXwHo0cj9NB36GgfjpxF/AODAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUY6ogYFal/R3EhnCt3eyNjWDor2gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBlN2UxOWMxLWM3YzYtNDUzNS1hMmEwLTc1Zjg4MDY5MWFhYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4hTANBgkqhkiG9w0BAQsFAAOCAQEAdE7t24QQ2JgKbRSwIYVi26sosPnU
BkqXog8sU4bDAO22o9/v45D6TQH19efao4tn93yTrgOKWw8lWIpe6rvEeTFTeCk4
OGLhJD3FeAo26mocVseP0PuXwPkloTOIKLWY51eax79UekpXF6Js8zUmMBqbEnrV
sLieUcoM30xqDibbf8XUjOO8rSlrgHj/ukKD15FJlxmEAIV1L7hRnWfByWEmA+Do
oUVYZqEXu/KxQeqB0BQQR3bN2vX5RmgA9G9ES7yLmoqWXP5MaIKITxebOFRZNMSf
Gr9BPj6ORPmc29x1cyza3uFjqXn5jVNGuqYE4esslf+bpsrgZCHEIwI7rg==
-----END CERTIFICATE-----