Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1759d2c2-97ba-4469-b5be-de2697c7cb3d.roa
File:                     1759d2c2-97ba-4469-b5be-de2697c7cb3d.roa (raw, json)
Hash identifier:          xgS7xhTi8w/vZt/Ok4WtKnLYLkUf9mFUEO/1T3q+Nns=
Subject key identifier:   B8:D3:C6:05:2C:2B:A6:27:29:D7:70:16:62:2E:80:18:69:D7:9B:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       572A8B73ABA602F8D4AE30F793F1D15F97FC372C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1759d2c2-97ba-4469-b5be-de2697c7cb3d.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        206.131.128.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2a:8b:73:ab:a6:02:f8:d4:ae:30:f7:93:f1:d1:5f:97:fc:37:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=664f7126620457492a1b0a82bbc701fe51f216fa3673e77be2cb3259b3508d30, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bc:a4:30:42:d4:35:c0:2f:8b:69:09:9e:37:
                    2b:ed:44:81:8d:ba:7c:c4:d6:be:2e:54:c9:e5:e8:
                    de:0c:0e:38:81:6f:d6:6b:0c:5e:1f:2f:d5:5a:3a:
                    94:ac:1a:82:57:ef:1e:84:96:fe:f2:87:d5:25:df:
                    97:46:e5:8a:93:0e:34:f5:cf:10:a9:de:4b:5e:62:
                    4a:05:8a:d0:a4:82:9b:ad:5a:4e:34:34:ba:29:62:
                    e3:2a:d9:a3:f7:e4:7e:9f:de:19:17:26:fd:5a:79:
                    e5:4c:00:41:b2:a5:60:96:29:95:6e:38:60:9a:8b:
                    97:75:0c:f4:e9:4e:5a:14:9d:78:0a:00:5c:d3:59:
                    3a:85:ff:dc:b7:34:26:d7:8b:2d:49:c3:0f:23:c3:
                    29:a6:50:a0:e9:e5:28:76:fd:5d:4f:25:31:26:0c:
                    e1:c7:d9:f6:d8:61:85:9d:2e:f3:52:75:a2:e1:78:
                    80:42:78:0e:08:2a:44:cd:64:25:5a:5e:27:fd:f4:
                    fd:86:ff:e7:55:7a:bc:95:d2:a1:2a:49:4a:5f:16:
                    2c:55:f6:94:a2:92:a0:a1:e7:ce:ed:a7:2c:42:3e:
                    61:1d:9c:15:62:db:a3:a3:3b:80:68:b4:d7:30:03:
                    ec:e4:29:d3:b9:47:b9:3f:84:d2:a9:65:88:f6:9d:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D3:C6:05:2C:2B:A6:27:29:D7:70:16:62:2E:80:18:69:D7:9B:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1759d2c2-97ba-4469-b5be-de2697c7cb3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.131.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:b2:89:4d:cc:18:3a:c3:99:13:ae:33:c4:4a:a8:c1:32:
         ba:a1:58:14:5c:ee:d4:3e:79:1a:61:83:7c:63:95:c3:16:51:
         51:ef:08:7e:63:2b:db:a6:11:b1:d9:1d:93:9c:19:ed:df:7f:
         e1:82:17:a2:ef:e8:22:20:c7:d1:6a:39:f6:d4:b6:f9:c0:82:
         a9:79:2d:fe:24:d4:ac:a3:1e:5f:94:4d:19:4e:85:1f:78:cc:
         24:0d:bc:c8:e9:4e:2e:86:9e:fa:e6:42:e7:57:18:c8:c7:f8:
         4b:08:81:65:c4:17:76:73:61:7c:16:2c:7e:fd:f2:06:47:f4:
         8e:68:8e:75:2e:25:5e:b7:ea:bc:3e:c3:14:96:a3:ad:38:7b:
         62:4f:56:6c:52:63:8a:95:02:e5:88:39:cb:c6:1d:66:e7:13:
         d2:f8:d1:44:0a:81:64:29:68:aa:81:e1:2b:7c:1d:be:65:b0:
         e9:7a:84:72:9c:5a:8d:3c:39:3e:d4:10:78:a2:b7:85:91:cc:
         6c:7f:54:25:8f:f9:fb:5f:a6:3a:97:df:31:0e:48:55:d5:cb:
         4b:60:4d:e6:4f:cc:f7:2b:91:4f:be:e5:e3:39:d8:11:54:36:
         e0:3e:40:2c:0b:65:aa:67:ee:5c:1b:cf:4e:52:8f:38:f9:b1:
         7b:51:04:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----