Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c418592-3551-42e8-9ade-d617b97fec75.roa
File:                     3c418592-3551-42e8-9ade-d617b97fec75.roa (raw, json)
Hash identifier:          +czc7LY1i5csngHGT+piMYQYTwjhUGx7n3n2sUcbs/M=
Subject key identifier:   18:C9:8C:E9:F4:69:57:70:1C:4A:CB:BF:38:DA:04:AD:47:EB:9B:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49AD3931604163910B86963D1E2D67591EA84575
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c418592-3551-42e8-9ade-d617b97fec75.roa
Signing time:             Sat 11 Jan 2025 00:00:00 +0000
ROA not before:           Sat 11 Jan 2025 00:00:00 +0000
ROA not after:            Sat 15 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        15.227.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ad:39:31:60:41:63:91:0b:86:96:3d:1e:2d:67:59:1e:a8:45:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 11 00:00:00 2025 GMT
            Not After : Feb 15 23:59:59 2025 GMT
        Subject: serialNumber=14ceb61da6874e3c948d536e8082b6bd95b06df47e4aa6f8abd6189f4f6ba1f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fc:48:92:46:35:22:8d:e3:2e:a0:45:f8:af:
                    e1:93:67:13:7d:24:6c:6c:3e:68:14:d5:76:13:8a:
                    73:db:6b:be:c8:50:ed:f4:63:ae:e8:fd:81:d9:87:
                    84:13:64:98:fc:40:27:00:8e:f3:66:fc:08:71:4c:
                    31:b2:3b:f2:e1:08:ef:1a:c1:06:6f:b9:c8:22:47:
                    a7:77:1e:1e:6e:ef:b9:5e:00:bd:e4:76:d4:62:89:
                    2e:e0:64:15:99:99:96:22:9e:67:7c:1a:55:4c:37:
                    5b:88:3b:82:7e:7f:7d:66:de:47:2f:9b:df:e4:de:
                    ae:0b:d6:94:3d:75:8a:4c:af:d4:a8:cd:aa:80:71:
                    a7:fe:72:d8:79:46:cf:22:73:2a:6a:5a:bf:b3:3f:
                    98:ca:b9:77:a9:d5:96:c1:70:b8:8c:0e:2a:1a:61:
                    a0:46:55:28:60:e4:b2:3e:d8:d9:b5:f4:63:ed:63:
                    bf:ab:f6:a6:67:44:09:45:91:ce:57:6c:04:25:a5:
                    90:b1:34:3a:80:0e:da:94:30:d2:bb:52:11:04:6d:
                    ee:57:a9:0b:ec:ce:c2:b9:59:18:ee:58:d1:46:07:
                    c8:38:0d:29:ab:e3:6f:81:52:9e:0c:39:04:2f:96:
                    0c:0c:70:10:b2:4a:71:01:51:10:8f:f5:5d:3f:8e:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C9:8C:E9:F4:69:57:70:1C:4A:CB:BF:38:DA:04:AD:47:EB:9B:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c418592-3551-42e8-9ade-d617b97fec75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bc:68:15:11:dc:aa:da:4f:26:23:17:be:bf:2b:7b:2c:c7:c8:
         0b:eb:8c:46:27:8e:d0:2d:76:45:60:09:dc:36:04:89:74:d0:
         22:c9:af:8c:4a:d4:50:18:39:b8:0c:b6:97:a1:e8:37:ad:62:
         7d:9d:85:af:95:cd:51:6d:89:44:79:b8:1e:6d:fc:71:86:11:
         02:91:a5:d8:74:75:48:f0:16:54:22:cb:30:00:04:cd:fd:5e:
         f8:37:91:38:39:91:61:29:1d:9f:c0:f2:f8:59:70:59:0b:da:
         5f:8f:02:e9:c2:82:61:d1:39:89:88:3e:16:6c:7a:5c:74:90:
         0b:6a:21:0d:b3:6f:b6:bc:f7:d3:8a:e0:bd:3c:20:48:d2:9b:
         8b:bf:ec:f3:37:72:71:69:3a:83:68:98:71:02:88:a2:f5:2c:
         7f:10:41:19:35:76:7a:02:52:2b:62:00:7e:ef:56:08:ed:40:
         6e:fe:6a:67:30:63:b9:99:6b:2c:2a:fd:8d:22:fc:75:f7:1a:
         d9:f1:d5:dd:e0:c9:d8:63:40:03:95:6e:ad:00:15:72:eb:4a:
         f8:73:1a:04:4f:5f:32:5b:3b:94:b1:70:80:7c:bc:ef:40:64:
         3c:bd:79:fe:00:78:43:c6:b2:b5:7a:c8:30:70:d1:53:6a:e4:
         c5:f1:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----