Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c2fc053-8b27-4ea8-a665-052af899e6fe.roa
File:                     5c2fc053-8b27-4ea8-a665-052af899e6fe.roa (raw, json)
Hash identifier:          ZnwBHHhpK7fCRAZkAsKbH8HyMjeKKCoyFEOkttOIZnM=
Subject key identifier:   D3:9B:04:E8:71:5F:81:A5:4D:9C:82:AB:36:F7:E1:5C:A8:48:CC:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B41CCFDC6CE5534F56BB480E242E7DA96F20D20
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c2fc053-8b27-4ea8-a665-052af899e6fe.roa
Signing time:             Mon 23 Dec 2024 00:00:00 +0000
ROA not before:           Mon 23 Dec 2024 00:00:00 +0000
ROA not after:            Mon 27 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        99.83.128.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:41:cc:fd:c6:ce:55:34:f5:6b:b4:80:e2:42:e7:da:96:f2:0d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 23 00:00:00 2024 GMT
            Not After : Jan 27 23:59:59 2025 GMT
        Subject: serialNumber=084701d81e84c3023feb5c06313ee41bd0f4b6682b403ad1498a5a25fb60bdf2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:c1:86:03:1e:d3:8e:d2:3d:0b:92:55:bf:
                    71:53:1b:63:0e:e3:76:33:e6:c6:4c:8d:bc:0f:8b:
                    f5:b4:29:8c:13:48:ec:79:3a:9c:1a:a0:f5:df:73:
                    70:84:ec:db:2a:e7:ef:4a:9f:11:fc:02:01:fb:8a:
                    ce:dc:d0:89:14:b3:e8:18:7f:64:17:f4:78:e7:fd:
                    f4:d6:9b:77:76:c3:a3:bd:c6:91:43:1b:e0:dd:e9:
                    31:63:78:a5:32:4a:c2:d3:84:92:ae:9b:d0:2e:89:
                    dc:43:01:ce:2b:eb:1d:ec:f9:4e:f4:77:4a:cb:60:
                    46:a4:d3:f0:69:94:cc:67:d7:01:63:5b:46:9c:8b:
                    47:98:21:71:4c:92:2a:ee:73:53:dd:28:b1:92:5b:
                    17:26:c4:80:c5:32:39:97:1b:d4:21:b8:37:f3:9e:
                    17:b8:10:56:04:89:a7:cd:84:20:fb:e5:8c:c3:34:
                    c2:d5:7c:e6:f3:47:e2:2b:5d:f8:63:59:33:e4:82:
                    5b:ba:87:55:33:51:27:dd:82:c4:65:a4:4d:07:79:
                    6f:88:a4:b7:04:12:3a:18:e3:95:5a:33:79:74:35:
                    c0:a0:43:aa:0d:e3:5a:a4:00:e2:d5:3c:5c:56:d0:
                    84:f9:a3:c4:9b:5e:4b:81:a0:77:99:6e:5e:15:d4:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9B:04:E8:71:5F:81:A5:4D:9C:82:AB:36:F7:E1:5C:A8:48:CC:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c2fc053-8b27-4ea8-a665-052af899e6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         10:a1:89:97:93:8d:e4:b8:c5:1b:7c:57:c5:cc:9d:00:6a:56:
         fc:db:7b:5f:97:0f:46:5d:e9:f9:fc:f7:47:0e:ee:63:9d:27:
         91:1b:63:59:b3:3e:fb:f8:6c:11:85:37:10:1d:21:76:0f:b6:
         40:d0:d6:dd:f6:d7:f6:7c:25:fb:9e:4a:fd:a3:43:92:f3:f5:
         2e:ac:12:00:b3:5f:be:16:fa:77:5b:ec:d2:52:60:ec:12:fc:
         d9:07:1a:e4:1f:0c:ed:3d:03:c3:c8:9a:e3:ab:8d:dd:35:3c:
         91:c2:7d:18:80:eb:64:4f:2c:70:c6:23:08:c7:2d:87:1b:d6:
         cb:18:86:09:ed:e5:88:26:bc:d4:e9:35:ea:bb:c2:01:77:a7:
         5c:52:08:e1:f3:4d:5e:71:ad:a5:23:a5:d9:bc:89:cc:48:45:
         41:d4:4a:8d:6f:47:df:06:b5:74:ad:5e:fb:87:8f:36:ca:ab:
         3e:ac:76:e1:b0:20:03:a4:48:35:40:02:f8:75:0d:9d:d0:ed:
         97:3c:c9:44:c9:5e:70:d3:41:71:30:80:b3:af:a9:0d:b9:0a:
         b2:4c:c6:7c:31:a1:87:4e:d2:4f:2d:31:e6:d0:f3:cd:be:47:
         e4:11:82:21:17:1c:b8:62:d1:2b:cd:91:22:80:e7:95:7f:f9:
         35:9a:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----