Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60389050-03a6-42b1-87d7-2b323bdc89d6.roa
File:                     60389050-03a6-42b1-87d7-2b323bdc89d6.roa (raw, json)
Hash identifier:          56HR5XKbUCi5uxohntMiLCgdQbmV2O1xgw7/X1vhc3U=
Subject key identifier:   F7:AE:FD:9B:AA:DD:44:A4:65:15:28:20:A7:C6:24:6C:F5:BC:DA:96
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66EF269B7096A2228ADDFCAF8F1A2F7B11C895F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60389050-03a6-42b1-87d7-2b323bdc89d6.roa
Signing time:             Tue 24 Dec 2024 00:00:00 +0000
ROA not before:           Tue 24 Dec 2024 00:00:00 +0000
ROA not after:            Tue 28 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        35.54.16.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ef:26:9b:70:96:a2:22:8a:dd:fc:af:8f:1a:2f:7b:11:c8:95:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 24 00:00:00 2024 GMT
            Not After : Jan 28 23:59:59 2025 GMT
        Subject: serialNumber=e4bbcfd3466fbf637d66b9944a0c93ce44ddde4a0d1044940c3961aa005e268b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:20:b0:2d:12:fc:da:64:e0:92:5f:46:99:b7:
                    15:90:3f:f6:9c:c0:34:30:b0:fd:b7:d7:f0:65:27:
                    41:9b:f0:63:55:b7:d1:d3:a2:62:e9:75:d9:b6:35:
                    14:e3:d6:07:60:34:7b:03:b2:77:b6:c5:dc:55:34:
                    85:3a:d5:f8:ce:08:dd:58:ca:6f:f9:e0:d6:2c:a0:
                    9e:31:8b:07:46:98:95:64:2e:dd:2a:78:50:7f:c9:
                    21:93:b6:d7:1d:89:3e:5d:09:60:26:25:9c:c2:6d:
                    b4:7b:2f:7b:88:1f:51:44:13:8c:57:57:52:7d:6e:
                    46:56:92:36:cb:d2:88:8e:89:21:bf:ad:7e:2f:68:
                    4e:9d:80:15:8c:91:f0:8e:0a:26:44:03:d0:7e:ce:
                    b6:c2:c6:62:d5:68:a1:32:a4:ff:70:4f:61:80:11:
                    3a:c5:78:f6:83:f1:02:3f:d6:1a:4a:b5:8c:04:cf:
                    0b:6e:75:bc:96:3e:71:55:43:5b:8a:ff:3f:a0:5e:
                    c8:c1:5e:c4:3a:50:f4:4d:87:73:77:b5:c6:7d:24:
                    51:33:55:aa:11:ba:19:26:27:7f:cd:a3:c0:c6:69:
                    3e:a3:4a:de:5b:11:07:7f:bd:f7:44:56:d0:8d:18:
                    70:eb:6a:98:af:fc:f6:4b:bf:90:65:5d:98:9e:23:
                    9e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AE:FD:9B:AA:DD:44:A4:65:15:28:20:A7:C6:24:6C:F5:BC:DA:96
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60389050-03a6-42b1-87d7-2b323bdc89d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:d0:d6:10:96:93:11:95:dc:44:d7:79:ef:84:c8:52:39:bc:
         c1:f6:42:d5:57:4b:38:31:a5:59:61:26:0e:10:cc:e6:6d:e8:
         cd:05:3a:63:91:51:9d:9d:35:97:35:b3:50:e2:51:37:e3:a6:
         b6:59:0b:77:bc:ba:0b:2d:bf:83:82:d3:18:51:70:22:35:23:
         80:3c:25:40:cc:4b:68:27:bc:b9:50:e0:ab:9c:22:4b:e0:57:
         5f:27:53:09:76:65:9f:36:ee:d9:20:df:73:20:7b:9b:e5:47:
         28:49:62:e2:02:8d:e5:5f:54:31:78:63:d5:ed:79:4c:14:7f:
         b2:bf:90:c0:eb:9f:59:29:73:79:17:47:47:96:54:6c:a9:19:
         c1:09:94:f3:ca:fe:7e:e0:c1:41:69:fe:74:d4:c5:25:4e:4d:
         2f:11:ea:ad:4e:82:26:2e:d5:1f:09:3f:cc:9b:a8:e7:57:02:
         ee:ad:e7:5e:31:f1:34:dd:1c:be:4e:45:eb:8f:48:5c:c8:7c:
         fd:b6:f8:6e:40:78:3b:b5:a8:35:b8:de:92:14:9e:48:e0:e8:
         90:40:13:43:a0:f3:16:41:5c:e7:d3:1d:67:13:1a:c6:6a:af:
         31:f9:1f:f2:91:e7:86:72:9c:05:04:68:9f:90:ce:1b:4a:bf:
         eb:d0:dd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----