Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33ece92b-b497-46c6-a57a-89b16d5accef.roa
File:                     33ece92b-b497-46c6-a57a-89b16d5accef.roa (raw, json)
Hash identifier:          AWNc5nn2KL34ouf60fVd4Eon3TXy11odUpaI39AJ9rQ=
Subject key identifier:   A7:B7:94:93:31:E1:76:2A:EF:49:EE:6D:AE:D8:75:F3:19:05:CC:A4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76AEC66E9D196B074EF010E2C102727C1B243D6F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33ece92b-b497-46c6-a57a-89b16d5accef.roa
Signing time:             Mon 17 Feb 2025 15:51:32 +0000
ROA not before:           Mon 17 Feb 2025 15:51:32 +0000
ROA not after:            Mon 24 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f30:4040::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ae:c6:6e:9d:19:6b:07:4e:f0:10:e2:c1:02:72:7c:1b:24:3d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 17 15:51:32 2025 GMT
            Not After : Mar 24 23:59:59 2025 GMT
        Subject: serialNumber=5577d4b509c1f8788b2cc1822367a62b510a45c873b6db05d124f031d83fd172, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:80:85:41:5d:bc:2c:e9:0d:27:fb:d9:6e:
                    7a:32:b5:84:92:91:cd:96:42:18:42:4f:7f:c5:70:
                    a2:04:82:d6:53:ba:06:71:6d:e9:d3:dc:d2:22:2b:
                    e1:1b:f5:50:9b:75:68:84:a9:87:23:6e:af:39:a8:
                    f3:30:89:58:c9:c8:5b:63:52:05:ce:91:2d:68:08:
                    90:e5:0a:09:f6:cd:fd:ef:7f:e2:cb:58:0f:a2:bf:
                    55:a6:12:0d:86:a5:91:b8:fc:1a:8c:e7:36:d0:f9:
                    46:c8:d8:49:89:68:da:ef:6f:92:c8:e5:69:d1:38:
                    b6:66:d3:b1:d6:17:77:4d:19:5c:d0:54:81:4d:3a:
                    06:a3:a5:98:ac:99:95:d2:35:a4:bf:a2:22:cc:6e:
                    b1:e2:9e:92:f9:e2:54:68:da:f7:52:3c:68:5a:24:
                    10:3a:a4:97:6d:21:f9:8e:2b:c5:af:a5:d1:9e:93:
                    0f:3a:83:10:72:d0:de:41:20:2d:9a:62:66:8d:1d:
                    fb:c1:f7:b7:56:7e:69:72:3d:21:74:87:37:32:73:
                    63:9c:71:42:ec:e6:a6:ff:f5:f5:11:8b:86:2a:88:
                    75:2d:d7:ac:93:d9:4c:0a:c6:e9:4d:c9:54:68:63:
                    9b:a9:29:2d:84:28:ca:61:dc:c9:62:f5:81:1e:aa:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B7:94:93:31:E1:76:2A:EF:49:EE:6D:AE:D8:75:F3:19:05:CC:A4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33ece92b-b497-46c6-a57a-89b16d5accef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f30:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:36:31:67:66:5c:e9:b1:58:0c:19:d7:ed:ad:13:1a:33:
         2c:e1:0c:5b:b9:f4:fd:2f:34:eb:ac:b5:d1:21:c0:8c:e9:93:
         21:49:00:87:98:6d:2e:5d:e2:09:93:9a:91:1f:2b:43:f9:0a:
         27:2b:95:91:74:e5:6c:f8:09:6e:e1:51:9b:fd:49:21:62:92:
         b4:b9:2c:b7:25:d9:42:62:22:ce:c8:50:82:c4:68:bb:1a:d8:
         a6:c4:6e:fc:a1:03:40:de:fa:ce:5d:b2:aa:a8:8d:31:f9:0a:
         78:31:2d:9c:60:40:e2:6c:d9:10:a7:1c:c7:fb:e8:70:32:b8:
         fe:22:a2:54:43:ec:c1:0d:09:64:e7:63:8f:1a:38:f0:7e:aa:
         e9:58:ba:8f:16:ad:9c:87:60:64:07:6f:f8:4d:68:13:d8:00:
         a7:18:cd:8f:fb:9a:53:f3:ba:4e:d6:6b:00:88:9d:8b:8c:35:
         5e:40:7c:e9:45:f3:7c:66:4f:ca:4a:68:22:79:f9:49:08:0b:
         cf:25:8e:d2:93:6e:96:da:ca:64:77:f6:04:49:b0:2c:12:fa:
         5a:1f:33:eb:71:95:bf:8f:2d:71:18:b6:62:6c:d0:9d:db:4f:
         39:5b:f5:ed:e8:e9:fd:ce:85:eb:c4:1f:5f:ab:55:b8:cc:2a:
         4d:51:d8:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----