Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15a122c4-488a-498d-b339-487a93248619.roa
File:                     15a122c4-488a-498d-b339-487a93248619.roa (raw, json)
Hash identifier:          4eCDnbwCfjCxZc9gl7AbxiWr24PNOvW3ahlZ9A9EtTA=
Subject key identifier:   9E:3F:25:43:50:4D:AB:BC:CE:FF:3A:B8:91:B9:A5:87:69:19:1F:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E0CB446396A292517F3FB26887F33049AB8A153
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15a122c4-488a-498d-b339-487a93248619.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.114.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0c:b4:46:39:6a:29:25:17:f3:fb:26:88:7f:33:04:9a:b8:a1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=7f71987d790ca1989060dde233c8ee58bb2ecccf725c2266acafce514bb4b791, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d2:48:69:c1:10:15:3f:ee:c9:a1:26:dc:2a:
                    a5:87:0e:c0:68:2b:a2:9b:bf:cd:93:ef:31:b4:73:
                    43:74:89:3a:b6:ef:d3:7c:6c:36:a4:7b:32:f0:89:
                    33:22:fb:c5:0d:0c:9e:05:a9:bd:b5:f0:0e:5d:0a:
                    e0:71:11:76:b3:67:c4:38:6b:ad:5d:8f:73:d2:3c:
                    25:54:96:b9:5d:ee:b4:55:43:8a:a0:1e:ca:5f:86:
                    96:4a:fc:f6:a8:c5:05:ab:ce:81:87:7e:3e:6b:f3:
                    ae:ae:bc:74:a2:61:85:e1:33:83:97:b2:26:86:1e:
                    93:ca:94:9a:46:38:69:49:e0:de:3c:ab:ed:93:4f:
                    25:db:3e:c1:f1:7c:68:56:ea:b3:25:df:d6:90:18:
                    31:a3:f8:ff:3c:ff:e1:94:b0:35:ff:ea:fe:cc:d5:
                    0f:3b:61:ca:97:8e:a8:af:5b:32:2d:78:54:52:7c:
                    a4:41:2b:b6:3b:15:dc:f3:8d:4e:c4:a6:56:fa:36:
                    c5:aa:c2:47:f8:15:d8:73:4a:80:1e:c3:7a:7a:b6:
                    00:87:37:02:3b:1a:6d:e6:ac:94:27:51:55:f8:bc:
                    42:a2:ae:a6:d3:23:d4:b9:ac:11:73:03:9a:a0:fe:
                    fb:d4:3d:6f:88:7c:54:a1:82:95:97:b9:f6:ca:a3:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3F:25:43:50:4D:AB:BC:CE:FF:3A:B8:91:B9:A5:87:69:19:1F:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15a122c4-488a-498d-b339-487a93248619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.114.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:d4:e7:00:de:db:80:06:50:76:6b:bb:2f:23:a1:e5:89:
         6e:97:eb:ed:c6:a1:41:f1:18:c1:05:4c:00:56:a6:b5:85:0c:
         64:79:73:aa:07:26:b8:0d:e8:0f:62:97:df:ba:51:f5:36:75:
         ba:1b:dd:9b:e8:e1:73:03:4d:20:b3:cb:66:7f:52:51:b1:e1:
         86:66:77:18:27:0e:20:2d:54:8e:5d:12:b3:91:b9:64:f7:90:
         70:2d:ff:33:cd:7e:92:a3:86:2c:57:df:2a:0b:a3:e6:6b:54:
         e0:8c:6b:9f:78:31:7f:6a:aa:e1:42:c0:b0:e9:a9:d3:c9:4d:
         20:5c:c3:41:f0:b5:60:43:f5:0b:f3:7f:5f:ee:0f:ae:3b:8b:
         b4:e0:d6:e9:29:f2:0f:41:c0:5f:18:23:1a:f0:4d:7d:00:c9:
         fd:51:f0:de:7f:5c:d8:ba:98:84:cb:ad:e1:a0:1c:d2:4e:38:
         51:b4:e1:fd:85:fc:cd:bf:d9:37:a5:4a:12:69:a4:e0:9a:1d:
         26:c3:97:bf:01:86:bf:2c:0a:0d:37:b4:02:c8:38:57:74:50:
         3a:9a:7c:d3:67:7a:e4:4a:7a:a4:c4:5c:e6:f5:f2:73:58:6a:
         4c:67:80:91:e6:ea:83:73:2c:a2:3f:18:68:99:53:26:50:2e:
         82:56:92:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----