Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/311760e5-8424-4bf7-9f4f-492cfdb172fb.roa
File:                     311760e5-8424-4bf7-9f4f-492cfdb172fb.roa (raw, json)
Hash identifier:          Uwd4noU30foZ3lW2kPNudlpYPAMDZEYobTSioH4LT9M=
Subject key identifier:   90:C5:EA:50:84:40:8F:91:16:DD:28:FA:21:A2:0B:94:7B:98:A5:44
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53ADBDFDD950F69E0629F20251D6804DB22D56CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/311760e5-8424-4bf7-9f4f-492cfdb172fb.roa
Signing time:             Tue 24 Dec 2024 00:00:00 +0000
ROA not before:           Tue 24 Dec 2024 00:00:00 +0000
ROA not after:            Tue 28 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        15.134.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ad:bd:fd:d9:50:f6:9e:06:29:f2:02:51:d6:80:4d:b2:2d:56:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 24 00:00:00 2024 GMT
            Not After : Jan 28 23:59:59 2025 GMT
        Subject: serialNumber=6314aa2eb0790a76d5f6cdb66f6948c7a4aacb5698cb0cab5d75f7e359b80d5a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:36:dc:45:78:a3:ea:11:86:c2:d9:41:1c:
                    82:d5:e9:1d:b4:bc:37:90:c7:b7:7c:35:65:08:51:
                    18:b8:63:73:f5:e5:44:5e:50:7d:d1:98:6d:8c:c7:
                    96:9c:32:61:4d:01:4a:10:82:90:3c:4b:52:4d:6e:
                    c8:ec:52:0a:65:6c:ea:89:ab:08:21:19:68:ab:22:
                    13:d9:98:21:d0:88:1c:9a:13:e1:a2:7f:ab:93:b6:
                    f4:b5:5d:5a:82:35:c4:e5:bc:06:92:c8:f7:ac:45:
                    fe:19:24:7a:df:8c:c0:56:1a:57:2b:c3:e7:bb:51:
                    75:7d:f1:df:5b:33:29:00:45:16:c7:e8:f9:6e:9f:
                    fb:8c:ec:27:f9:4b:80:1d:85:bd:4f:7a:0d:a1:ae:
                    8c:49:1c:39:a3:34:85:10:08:8a:7b:f9:22:10:50:
                    51:4d:d5:dc:70:db:75:22:a7:fd:de:29:a5:51:90:
                    e9:81:6f:dc:c3:60:fc:ce:31:2b:99:14:2d:e2:22:
                    91:a6:7d:82:bc:78:d4:ea:62:45:73:8a:58:61:1d:
                    db:79:91:d3:04:79:23:8e:c0:c2:e9:b5:32:41:68:
                    b5:00:7a:a8:fa:48:90:f9:0b:06:48:6c:20:76:25:
                    4f:3a:a1:9a:82:80:18:7d:c3:fd:b2:3d:4e:77:21:
                    9b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C5:EA:50:84:40:8F:91:16:DD:28:FA:21:A2:0B:94:7B:98:A5:44
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/311760e5-8424-4bf7-9f4f-492cfdb172fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:5e:30:63:99:62:20:68:b4:e5:0a:d3:d3:ad:2e:1c:b4:30:
         4b:ee:8a:fd:86:55:5e:6e:c7:49:55:82:0e:83:7b:c3:e9:28:
         f9:73:53:41:75:a8:20:a8:3a:3b:c3:df:57:26:10:1f:8f:05:
         13:8f:85:ba:13:49:29:97:8a:34:5b:6d:30:e3:00:61:98:97:
         9e:b3:05:72:d5:d4:35:e9:34:dc:0d:30:ed:ff:e4:3d:1b:fa:
         f6:25:4c:70:77:1e:48:86:10:c0:45:20:3e:82:26:71:c5:2f:
         03:88:5c:23:18:c7:a6:25:e8:94:31:dc:5a:da:cd:93:62:1c:
         64:dc:78:43:a2:c7:84:c0:13:f1:76:15:83:d9:a8:74:e5:8d:
         9a:bd:5f:9f:d2:b3:32:0b:8a:2b:7d:1b:5f:2c:5d:a6:04:35:
         50:6b:09:02:1b:a5:4a:2e:8c:b2:de:fb:59:1a:b8:e7:27:bb:
         63:6e:d0:42:5a:15:b7:f8:08:5d:06:a9:9d:c0:14:04:99:69:
         f2:8b:bf:37:2b:f0:0f:7f:98:12:0b:14:09:46:f2:da:9b:d2:
         33:a2:e7:5a:3f:29:50:fd:9c:38:35:07:ef:87:69:95:04:bb:
         82:48:ad:94:a8:6a:34:12:52:d6:a1:f2:f1:a0:96:21:9d:8a:
         cb:80:93:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----