Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f88f93b-b30b-4897-ad04-7a7aa273eca7.roa
File:                     1f88f93b-b30b-4897-ad04-7a7aa273eca7.roa (raw, json)
Hash identifier:          dD0u5dCZn6xZBsnnqFJeqsnG2BdZnaQROsUGuvZwhvI=
Subject key identifier:   50:D9:87:8D:1D:4F:89:D8:8B:E4:04:20:62:DC:B0:5C:0C:D8:65:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5EFF54C369179CD1FB6508B260AC8B1B83EC1026
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f88f93b-b30b-4897-ad04-7a7aa273eca7.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        163.119.128.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ff:54:c3:69:17:9c:d1:fb:65:08:b2:60:ac:8b:1b:83:ec:10:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=838008046837d75a59cb83f1db8281affe1965e8a0983ab8527e4cb679b64e06, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:4e:5a:a5:fe:92:47:51:80:49:92:fc:b0:fc:
                    3d:b3:74:d9:1b:aa:fe:ba:97:8e:2e:ef:9b:e4:fd:
                    25:c5:c5:9b:d6:f7:e1:76:38:00:9a:ac:62:01:07:
                    92:08:af:a7:be:5c:48:84:ef:82:b3:8b:11:3f:fe:
                    34:0f:62:de:84:eb:1f:9a:93:7d:cc:dd:aa:8f:31:
                    ce:8b:c1:a7:2e:29:05:82:3b:06:a3:1e:ef:f4:de:
                    28:2b:bf:46:94:6d:12:d1:82:4d:2a:12:fa:31:18:
                    ce:f0:1a:ae:67:1c:1a:de:da:eb:d4:3b:e5:22:bf:
                    37:96:19:31:b7:62:7e:97:0a:0d:19:81:64:61:81:
                    38:e3:de:06:61:db:11:ac:fb:cd:94:b4:80:d2:89:
                    33:cb:30:19:58:91:68:cb:87:eb:ae:98:30:98:fa:
                    9d:95:44:8e:60:61:83:60:4a:10:c4:84:83:fd:aa:
                    11:0b:3d:d4:17:60:82:c6:f0:66:92:5d:75:0b:d1:
                    a3:c1:48:b5:53:9c:c3:79:4f:ea:95:e8:4e:30:2a:
                    35:18:c1:2b:84:ef:24:e2:a4:48:29:35:ea:9f:5f:
                    6a:2a:38:0b:b8:9a:f6:3e:15:9e:57:44:91:de:dc:
                    df:21:ae:7d:e8:05:41:ba:d0:16:fa:0f:ae:1f:0e:
                    a1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D9:87:8D:1D:4F:89:D8:8B:E4:04:20:62:DC:B0:5C:0C:D8:65:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f88f93b-b30b-4897-ad04-7a7aa273eca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.119.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         48:4d:78:0c:bb:f0:93:c3:30:62:47:ad:df:28:ec:89:36:aa:
         77:99:30:51:a8:87:b8:52:77:a0:ba:cf:06:4d:6e:84:ff:7a:
         b2:f8:e6:d1:f9:e8:14:ff:bd:07:58:ec:e0:cd:59:40:95:a3:
         ad:b1:e9:f6:22:9e:9a:42:5a:91:a0:e3:92:2f:ad:d3:68:92:
         2d:88:6f:4a:bf:39:c7:59:94:9b:84:45:69:44:07:6b:22:91:
         9f:11:16:bc:46:ac:27:6f:a4:0a:84:df:1c:69:27:40:08:bc:
         1d:4d:b1:1a:62:03:f9:69:4b:a8:51:0b:4b:9d:2d:17:22:e2:
         c5:df:7e:20:5a:3f:1e:eb:3f:11:b7:eb:78:87:9c:35:0b:1c:
         e3:d5:84:07:c3:cb:62:44:e8:f8:18:96:9e:0c:8e:1c:e0:28:
         2e:7c:8a:61:54:6f:77:3f:d6:55:f0:43:b7:46:d6:a1:b2:9b:
         c6:9e:24:6b:f6:fe:da:5f:a9:2d:b8:45:45:95:77:eb:e5:87:
         c0:52:05:df:e1:15:8b:50:d3:e7:29:6d:28:6d:02:35:62:6f:
         dc:01:f0:ac:06:dc:cc:7a:f2:6d:14:26:44:96:d0:bd:60:90:
         28:6d:94:57:81:77:95:d0:4c:07:fd:93:82:29:8b:49:36:db:
         e0:0a:48:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----