Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/157658fe-b5a8-438e-8c8b-39834eecfcd7.roa
File:                     157658fe-b5a8-438e-8c8b-39834eecfcd7.roa (raw, json)
Hash identifier:          INd2N2sa4uMy743O8X5zVL/e/qZX02325+7kud2MdMs=
Subject key identifier:   7D:2A:B1:B3:4F:3D:12:F4:FE:3A:41:6B:F2:BD:9A:59:67:72:04:12
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D3259897CA39BA0AE6519B8BDBBB79B041EB0DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/157658fe-b5a8-438e-8c8b-39834eecfcd7.roa
Signing time:             Fri 20 Dec 2024 00:00:00 +0000
ROA not before:           Fri 20 Dec 2024 00:00:00 +0000
ROA not after:            Fri 24 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        198.13.0.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:32:59:89:7c:a3:9b:a0:ae:65:19:b8:bd:bb:b7:9b:04:1e:b0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 20 00:00:00 2024 GMT
            Not After : Jan 24 23:59:59 2025 GMT
        Subject: serialNumber=5246989015473be254a9e341899a8b559f5c61d6d2312a5a96cb4de8d33d64a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:34:f0:c0:10:be:ec:b4:95:cb:7d:e4:9f:06:
                    91:d6:3c:84:8a:5b:18:76:92:ee:c7:be:3b:b3:10:
                    74:14:18:f5:47:4f:88:7c:cd:91:2a:60:f5:ed:86:
                    05:5c:41:fa:1c:e7:bc:06:6e:91:52:b0:56:c8:dd:
                    2a:c9:e4:43:7b:97:77:89:22:91:2b:eb:fb:7f:17:
                    2c:38:ae:4d:7f:81:61:d2:26:3e:08:cf:f9:3d:88:
                    3b:ce:5b:77:c7:91:a4:01:9e:a2:3a:d2:b6:29:9d:
                    9e:47:5a:1b:83:d6:98:85:a5:48:02:69:c4:ef:c6:
                    93:d0:6e:97:48:f0:19:72:c7:33:84:30:4e:1c:05:
                    18:9e:cc:e0:5a:31:70:b9:dc:0c:44:8e:b0:8a:29:
                    e8:06:24:f1:f3:6e:7f:7c:68:a8:2f:6f:cc:bc:fc:
                    14:c9:55:df:44:5a:c7:29:20:9f:fc:8f:e8:4d:5d:
                    fa:d6:7e:60:7b:4b:16:71:9a:27:d2:77:a2:13:b5:
                    87:ad:f8:ea:8f:34:e6:48:50:fd:a2:b3:aa:b3:6c:
                    6d:01:83:d0:e7:23:56:ef:45:05:7a:b8:86:d2:4f:
                    ad:b1:b5:ae:3d:a7:92:52:78:04:f1:33:4d:a0:e5:
                    ed:5e:06:42:7c:ba:29:b2:6d:07:ee:39:8a:3d:71:
                    11:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2A:B1:B3:4F:3D:12:F4:FE:3A:41:6B:F2:BD:9A:59:67:72:04:12
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/157658fe-b5a8-438e-8c8b-39834eecfcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.13.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c3:54:37:f9:31:66:68:70:ea:35:5a:1d:e2:4b:e8:f7:b4:19:
         3f:c1:fb:a3:6d:c6:a5:d6:c5:12:4a:38:11:cb:1b:12:c1:37:
         97:73:4d:dd:94:67:10:92:e7:cb:71:8b:a2:71:3d:8a:cf:38:
         fc:06:34:0e:f5:27:02:a1:c0:70:a5:88:e3:95:b0:f6:8c:96:
         b8:28:69:80:11:dc:13:3d:95:ce:10:a7:82:3d:fd:8c:9d:64:
         54:07:13:0b:89:be:8f:66:03:c6:c7:ec:3b:74:6c:80:2c:de:
         22:5a:c1:bb:ef:07:95:af:84:92:25:04:98:43:7e:36:68:db:
         6a:92:fb:47:2d:f1:f4:29:83:30:e1:10:92:28:2b:fd:c1:6e:
         94:85:fd:33:13:58:ec:03:25:16:c4:d6:2f:02:59:19:af:2e:
         8e:90:b2:8a:2d:2c:19:ed:a1:41:37:ab:66:03:d6:67:c6:60:
         b4:47:05:da:f2:fe:c2:60:f6:d8:94:0c:d1:0a:43:aa:22:f5:
         b9:12:b4:fd:fa:fb:67:97:d9:f8:56:71:16:27:04:bf:48:28:
         e5:0a:df:e2:9c:cc:81:ed:e6:39:29:5f:da:c5:38:3b:9a:58:
         93:ec:c1:27:a6:67:94:ec:d0:bd:f5:76:2d:95:cb:e0:4b:c0:
         24:0d:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----