Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3913274a-9452-44f0-b768-5eec4581c7ca.roa
File:                     3913274a-9452-44f0-b768-5eec4581c7ca.roa (raw, json)
Hash identifier:          8iW4RL98Man4aHqd6nAyUT4IoJgCWvDTu7a1P17f9GM=
Subject key identifier:   17:CB:56:C9:E5:8A:04:70:46:8C:69:C5:51:4D:64:2E:76:0F:62:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5B400DC65DF607E43B00204C21178E124A2465D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3913274a-9452-44f0-b768-5eec4581c7ca.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        173.83.128.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:40:0d:c6:5d:f6:07:e4:3b:00:20:4c:21:17:8e:12:4a:24:65:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:0e:29:0b:d9:bd:c6:18:f0:52:82:45:7d:
                    b4:ee:42:41:d7:3f:82:e8:16:ca:12:3a:28:1c:0d:
                    6e:31:11:f3:5e:b2:33:e6:2e:ec:0b:cb:57:e2:b4:
                    bb:c8:30:c0:d2:2e:96:d1:79:41:1a:01:20:cb:9b:
                    14:c3:8b:16:10:5a:b7:74:c4:b7:44:a5:bd:ab:36:
                    bd:38:ff:6f:45:67:4e:99:0f:21:70:93:92:3b:dd:
                    94:66:62:d8:0f:86:3d:c8:e6:41:b8:30:54:f0:54:
                    f2:e4:81:cc:07:e9:4d:ed:cd:6b:5d:5a:ee:e5:3c:
                    28:d3:d3:0f:0a:af:b8:43:96:52:03:15:d5:05:b1:
                    a7:4a:04:f7:5a:e9:3d:1a:cc:ba:32:34:f8:e7:17:
                    ac:69:88:9b:d2:26:2c:15:76:90:40:ed:69:c6:dc:
                    11:4a:88:ec:11:d2:17:d7:85:53:a8:2d:c6:e8:af:
                    55:34:a5:b5:f1:a3:4f:c9:59:3f:b8:e4:c9:b2:d1:
                    57:c7:6a:62:b4:4e:ee:75:64:a5:d2:30:0b:e1:6b:
                    6e:a6:55:5b:a7:28:02:ff:96:de:28:74:44:6b:c4:
                    ee:7e:38:53:63:18:63:9d:9e:fd:41:4c:c4:41:b8:
                    ae:9b:fd:c4:46:05:cb:ae:2f:98:18:29:5c:9b:41:
                    c0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CB:56:C9:E5:8A:04:70:46:8C:69:C5:51:4D:64:2E:76:0F:62:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3913274a-9452-44f0-b768-5eec4581c7ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:9e:49:b8:e0:d8:b6:16:40:cc:49:40:73:fa:f8:35:63:0d:
         4c:62:45:50:ce:ae:cc:3c:3c:e1:91:04:97:2a:8f:15:a8:84:
         19:62:6e:fd:d7:f0:86:d4:b4:8c:95:f8:13:bf:a8:4d:a4:34:
         5f:4d:ec:33:f0:99:11:a5:05:c4:2d:a3:4b:d2:15:81:88:2f:
         e7:7d:6e:82:eb:92:65:f2:4c:81:86:f2:a7:52:0a:d5:c6:2e:
         c7:15:5a:a1:55:1d:14:e3:ac:5a:84:13:9d:4a:fd:c6:ba:cf:
         62:2d:74:96:76:d7:62:35:5b:4f:b2:dc:fe:eb:1f:cd:fb:84:
         13:67:b8:39:0a:45:3d:af:30:36:84:82:95:6f:35:3e:fd:91:
         b5:62:0f:45:e5:5f:fa:d5:65:52:97:22:d6:f8:02:22:c2:c4:
         e5:9f:73:3e:ca:1e:4c:00:e6:f7:24:4a:30:a8:fe:ed:ef:f1:
         b6:71:24:0d:d7:f6:ad:31:10:84:93:7e:d5:bc:19:eb:30:0f:
         46:71:68:03:db:48:5f:90:92:a4:6d:c7:e5:c5:ce:38:42:7a:
         91:8c:c5:f1:dd:c2:fc:1b:e8:97:df:dc:6d:68:0e:f5:8d:d3:
         b9:52:37:ff:9a:15:e6:c3:fe:b9:9b:6c:e8:70:41:e2:d3:9f:
         81:b4:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----