Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28747d20-f124-4a56-a82d-ccf046cd003f.roa
File:                     28747d20-f124-4a56-a82d-ccf046cd003f.roa (raw, json)
Hash identifier:          Sztb3FD2/5jjb4kePGyNEEOHw4ExrU0WTUibKrgbyOE=
Subject key identifier:   EA:EA:5C:F1:CE:0D:CA:A1:0E:74:B3:DB:C8:8A:59:C3:E0:78:A9:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25EF45F8D5C7DE401F20365F1915E44B908F454F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28747d20-f124-4a56-a82d-ccf046cd003f.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.122.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ef:45:f8:d5:c7:de:40:1f:20:36:5f:19:15:e4:4b:90:8f:45:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:d3:99:45:35:ab:66:26:9c:98:6a:f3:2b:
                    23:f1:73:f8:4b:c0:b4:0e:20:4f:5e:e2:83:9f:18:
                    c0:bd:9e:c7:87:e9:4b:ee:4e:2b:7e:6f:df:3c:01:
                    e3:f2:88:fe:16:32:c0:7c:65:b8:bc:d4:e8:7f:19:
                    36:8a:fe:68:d7:4e:65:53:b2:4c:4c:6f:fe:a9:56:
                    15:a6:44:a5:78:90:f0:d3:c6:bd:51:07:51:9b:dc:
                    2c:42:f8:fc:dc:50:1c:f3:7c:d2:dd:0d:10:3d:48:
                    e7:3e:98:c8:3d:94:06:d4:ba:af:85:33:95:94:a4:
                    ba:b7:3b:09:59:08:74:bc:a7:be:6b:26:07:db:f8:
                    dd:da:43:bc:61:17:eb:d5:c9:c7:5b:e1:e1:ad:19:
                    c9:f6:7f:12:29:83:97:96:6a:f8:62:d2:c2:6b:12:
                    83:1a:f5:48:2e:59:49:4b:a2:92:a1:71:b3:4f:53:
                    8b:a9:de:ed:4d:72:75:26:dd:a1:d7:f2:f1:ad:8b:
                    58:07:f0:1f:41:04:58:ba:3c:c4:42:ce:01:93:d6:
                    00:ca:a3:0d:88:de:ca:34:aa:b8:c6:9d:27:ff:7e:
                    f0:9f:80:f4:02:63:0a:6d:13:e8:5c:2d:37:b9:fe:
                    e0:b5:34:db:0f:72:af:85:68:71:ab:9b:84:dd:31:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EA:5C:F1:CE:0D:CA:A1:0E:74:B3:DB:C8:8A:59:C3:E0:78:A9:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28747d20-f124-4a56-a82d-ccf046cd003f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.122.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d5:8e:bd:67:91:1f:30:ea:6c:a3:3b:8e:f9:d1:7d:7c:64:cf:
         d9:f3:a3:6c:80:72:c5:d2:df:9f:86:95:eb:e8:ad:8d:2e:9d:
         32:0f:c7:d9:65:38:6e:30:62:53:2a:e7:d4:10:74:bd:84:69:
         f4:fb:df:12:69:b5:0f:78:d6:e0:06:e0:13:70:cb:5c:1c:b0:
         f0:04:23:31:7a:c8:ce:28:21:fb:2b:fb:9d:44:cc:ad:db:2b:
         36:e4:cd:92:30:e1:91:0c:2a:b2:71:b5:7c:bb:29:22:c7:b4:
         a2:59:32:81:6c:23:ff:28:ed:b7:58:c0:5f:4d:b2:ab:55:d2:
         d9:8b:27:e6:18:cd:ba:b7:ab:66:58:eb:3b:6b:f2:c6:1c:a4:
         9e:f4:cc:9e:b5:a9:09:03:30:ec:0a:71:40:89:3f:c7:e0:9c:
         f2:93:e4:dd:2b:f6:92:39:9a:16:ca:ba:69:f6:b1:b8:45:92:
         89:d0:92:34:60:c3:95:a9:ba:e1:1f:93:fd:35:77:78:40:85:
         ef:5b:17:ed:ae:b6:16:2d:33:41:2b:6f:4a:a3:b0:da:f7:9b:
         9d:47:04:0b:f8:73:19:c5:c8:90:7f:79:a1:87:88:f8:40:3f:
         e6:cb:24:9e:67:0c:2c:a8:ad:9d:74:e0:d0:86:dd:87:b4:2b:
         09:7b:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----