Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2733ac92-e177-4472-afe8-4287280c0d08.roa
File:                     2733ac92-e177-4472-afe8-4287280c0d08.roa (raw, json)
Hash identifier:          FPOdeeQ9wNS0UOo9/Om96Opp6wUD0vrpDa4V6UrPkxQ=
Subject key identifier:   9B:57:ED:97:04:FC:55:FB:55:28:B8:B3:3A:32:A7:14:73:E3:EA:28
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20AB065992C3037EC251191F09E332F4A95FDCE6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2733ac92-e177-4472-afe8-4287280c0d08.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        75.22.192.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ab:06:59:92:c3:03:7e:c2:51:19:1f:09:e3:32:f4:a9:5f:dc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=3e09201a187b7700fa7ebca1cecd356b33f6bcc4f0b38b8e31a51734c2b33a02, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1b:10:dd:82:55:01:6c:9b:60:73:de:26:d9:
                    45:69:78:ec:e2:f8:8d:f8:5a:e8:05:50:79:57:41:
                    9e:8c:a5:bb:d5:f5:1c:1f:2e:09:1b:06:54:dc:61:
                    7c:b6:aa:23:af:44:0e:8f:f5:82:63:e8:23:b9:57:
                    d1:f0:3d:27:1d:96:76:64:9a:c7:5f:40:55:36:a9:
                    66:1a:73:02:58:ad:38:63:1e:03:12:0a:fb:69:61:
                    2e:d8:86:7e:48:c4:eb:d3:28:51:ed:3d:00:31:88:
                    81:89:65:56:4f:1b:e7:16:26:b3:90:f5:e7:85:20:
                    d3:da:48:a0:d9:23:be:87:86:88:7e:1d:d5:28:12:
                    18:fb:ea:eb:d3:b3:82:f4:27:90:ad:49:65:44:c5:
                    1d:c2:d6:76:a3:b0:ec:06:4d:ac:2c:ec:3a:35:1f:
                    5b:93:94:5d:b1:15:ac:e8:6d:33:c2:c0:2a:75:79:
                    9e:15:d4:36:8c:e5:c6:92:2c:fd:0e:7f:a1:3b:ab:
                    85:a4:80:58:1c:41:be:db:64:e1:eb:c9:fa:c3:d2:
                    b0:45:eb:75:c5:75:c1:b7:ae:58:8b:85:35:aa:9b:
                    8d:1b:45:1f:2f:5f:38:ed:10:80:b1:15:42:6c:31:
                    fc:ab:51:a3:3b:af:e8:bd:0c:9f:2d:6f:54:41:70:
                    ac:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:57:ED:97:04:FC:55:FB:55:28:B8:B3:3A:32:A7:14:73:E3:EA:28
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2733ac92-e177-4472-afe8-4287280c0d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.22.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         40:ab:e2:68:16:3b:62:75:37:df:b4:c5:4e:8b:5c:57:01:6c:
         b3:34:a2:fb:00:5b:bd:c9:67:44:6c:ca:fd:1a:0d:56:71:d7:
         49:b3:80:2d:54:47:ec:7b:fa:5b:89:8b:3b:ae:33:81:00:3f:
         1b:be:96:e0:d6:93:38:12:71:a8:32:42:80:a1:0f:24:3b:18:
         7e:56:56:d7:ef:ee:00:c4:87:28:46:3f:4d:27:57:ca:77:3b:
         30:72:96:fb:f9:ef:ff:b4:b1:1e:8d:d3:28:6b:57:48:76:93:
         f1:d1:e0:4e:84:40:67:c4:48:62:8e:b8:97:bc:8e:cb:7f:94:
         74:be:59:95:34:2c:3f:dd:c4:9e:bf:4f:6a:93:f2:30:f7:6b:
         be:cc:51:c8:06:c7:0d:70:a0:00:7d:b6:67:93:2d:e7:9a:53:
         9f:a5:78:51:51:33:5d:84:b1:41:a1:61:2b:7c:de:62:98:53:
         4c:57:d6:25:68:61:d8:9f:9c:f8:49:16:a7:97:35:39:11:89:
         01:ab:c0:5d:34:d5:1a:e0:95:4a:9c:bc:f6:b2:67:0e:4b:3f:
         82:b1:ea:be:2a:41:ec:c8:ab:a5:c9:17:23:f3:b0:d4:40:dd:
         0f:d9:0f:19:51:d9:88:2c:5c:11:aa:52:9d:a1:95:31:59:d1:
         c3:42:e0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----