Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3be90e19-0a4f-4567-9cb8-1ab2e5569608.roa
File:                     3be90e19-0a4f-4567-9cb8-1ab2e5569608.roa (raw, json)
Hash identifier:          t8eTMKyN5Mgm857gEjNQlB9VNkNm/WJYZE2mmXq2s9E=
Subject key identifier:   9C:3E:8E:62:C1:B9:97:2F:C4:EB:CD:2F:6C:E8:C1:28:63:32:D1:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64BD302B5DEB81375AC704D41821D15ABFDF6751
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3be90e19-0a4f-4567-9cb8-1ab2e5569608.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:2000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bd:30:2b:5d:eb:81:37:5a:c7:04:d4:18:21:d1:5a:bf:df:67:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=0efb9ad8f32ec907de4b74ae55cb6bf9d31994b052125c53cd7600ee59cac2d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:b8:76:b3:e5:aa:a1:b3:c7:ea:b9:82:00:
                    83:85:27:fa:26:bc:73:48:9f:f7:75:d5:5b:82:01:
                    47:ab:c2:82:0b:dd:95:1c:9e:8a:6a:84:d7:3a:c8:
                    1c:2f:55:02:06:c6:4e:22:56:c8:35:8f:1b:b5:a9:
                    8e:ca:91:4a:2e:ba:ab:36:a3:74:42:8a:c0:8e:48:
                    82:60:53:4f:d1:03:3b:91:d9:2f:0a:86:4a:3f:90:
                    bc:c2:09:e3:d5:3b:40:a9:fa:3e:31:36:d7:d5:98:
                    ba:0c:b6:24:ea:ee:0b:05:24:99:ac:66:e8:0b:00:
                    81:9e:e5:a9:5f:fa:5d:b1:15:7c:cd:c9:30:c0:e7:
                    6c:b3:19:4a:74:45:c3:b1:b9:ee:2e:0b:0b:64:a4:
                    c9:11:01:84:78:61:7a:3a:57:6a:26:b1:5d:01:0b:
                    09:68:d3:bb:b1:f8:89:28:92:e0:68:cd:e7:71:71:
                    4d:e2:da:26:dd:a4:f3:a1:5c:18:1f:7d:5f:c3:bd:
                    7d:59:6c:95:dd:88:db:d4:51:42:1f:7d:3b:9a:0d:
                    84:03:d1:bd:04:e2:83:01:39:8c:7f:26:9f:63:f5:
                    70:6a:4b:8b:6c:f6:ff:8d:88:a5:49:86:cb:16:5e:
                    4c:3f:b3:25:a1:46:8a:ef:06:ad:8d:37:54:8c:e4:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3E:8E:62:C1:B9:97:2F:C4:EB:CD:2F:6C:E8:C1:28:63:32:D1:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3be90e19-0a4f-4567-9cb8-1ab2e5569608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:c5:24:1f:2c:35:79:6f:b6:ca:bc:ea:cd:36:9f:e8:f8:74:
         3d:6a:38:1b:03:0f:e8:5b:52:5a:01:da:09:e1:7c:a0:f7:aa:
         73:f1:43:f3:93:87:32:30:90:76:77:22:8f:70:91:4f:9f:11:
         11:e8:65:47:f2:21:06:fb:8d:33:83:da:90:ac:09:67:33:b8:
         3c:a1:10:53:eb:3d:34:5d:83:ae:e6:e7:28:2d:02:58:87:7b:
         f6:f7:94:7d:67:6f:ae:76:7f:41:a1:39:aa:fd:a9:c5:22:da:
         fe:2e:be:eb:0a:95:eb:01:a3:e1:71:0b:30:1e:c1:32:09:35:
         01:4d:91:8c:d9:a8:ca:96:0e:47:33:f2:a3:b4:30:2b:ab:84:
         4a:33:da:01:41:ac:e6:09:c6:3e:d6:23:c9:01:cc:a7:cc:55:
         c6:45:84:72:f8:b9:46:25:ba:8a:10:12:4a:e4:95:6e:5e:d8:
         36:12:d2:75:a9:e3:d9:13:7f:22:8b:0b:e2:34:89:66:6d:97:
         a3:ca:68:f6:e2:37:18:95:15:66:1f:26:ae:d2:6f:21:be:1f:
         c6:a2:c4:3c:ff:ff:d2:44:3f:72:c8:58:e1:8b:b3:bd:eb:aa:
         4c:ea:a1:a9:3d:74:0e:9c:ce:cc:8c:89:53:7a:73:70:f6:0d:
         f4:1d:11:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----