Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a5ba48a-0530-44fd-a08b-caaaae96c010.roa
File:                     6a5ba48a-0530-44fd-a08b-caaaae96c010.roa (raw, json)
Hash identifier:          lWeiP7Cjpy+6dh8oyVwryYuEL+v2f4veBEqcZjkkOhM=
Subject key identifier:   93:2C:95:28:3D:79:F2:99:B6:6F:E4:D8:36:BF:56:C9:DC:6B:19:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C3CD45942DE4B8E69578175672D05F2AB5806FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a5ba48a-0530-44fd-a08b-caaaae96c010.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f60:2000::/40 maxlen: 40
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3c:d4:59:42:de:4b:8e:69:57:81:75:67:2d:05:f2:ab:58:06:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=e4a7724b5311ba06f15a8f7aa56cd642ddce237a3fc375f70a0766f30b909976, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:2d:a8:47:ea:d5:ad:ee:06:82:67:ab:4a:
                    a5:e6:eb:c3:de:7a:a3:17:6e:45:e6:29:c8:1d:b7:
                    cb:04:ec:b6:1b:7e:a9:ec:a6:f4:3a:1a:d4:5c:7a:
                    df:d3:1b:27:05:71:7c:0d:3c:2d:09:3c:86:ed:7d:
                    7f:0c:aa:da:50:38:76:06:e2:b2:fa:e8:65:aa:1b:
                    97:90:62:77:dd:34:87:bb:09:a7:6f:ac:80:cf:24:
                    13:22:c2:80:01:da:23:8a:6c:25:44:93:91:90:01:
                    22:5b:f3:a2:00:66:1b:02:24:af:2c:29:34:8e:87:
                    59:3f:9e:8f:9c:79:c6:2d:74:99:04:ca:91:6a:a0:
                    6a:54:42:54:99:e9:58:eb:ce:e6:cd:a4:3a:45:1e:
                    26:d2:c1:2a:58:fb:fa:02:21:26:58:b2:3a:19:c8:
                    a5:59:3f:75:10:8e:94:19:74:ad:1e:d8:04:1b:2c:
                    24:37:90:f8:ba:bc:be:fa:b0:67:97:39:f9:31:1d:
                    ea:0e:d2:d6:17:d2:74:b4:fd:17:b5:ff:f9:56:be:
                    34:8d:cc:1a:81:e1:0d:6d:f2:ef:8c:5f:2c:5c:b1:
                    db:5d:91:f2:88:f0:a5:d5:73:2f:e0:6f:a9:a0:fb:
                    b0:ee:79:e2:67:05:84:6f:69:f2:5d:39:82:0f:32:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2C:95:28:3D:79:F2:99:B6:6F:E4:D8:36:BF:56:C9:DC:6B:19:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a5ba48a-0530-44fd-a08b-caaaae96c010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:0d:8e:6b:bd:0d:c1:fa:57:c5:9b:f3:b7:c3:d9:a7:6e:b3:
         18:ba:fc:f2:c7:81:a9:8a:28:72:dc:73:5c:41:d5:ef:37:b1:
         e1:37:2d:ad:e2:4f:35:6d:ce:9c:88:5a:48:9b:f9:6f:56:d5:
         8f:56:7d:2d:dc:f2:ca:24:b8:c7:0f:31:60:02:43:c7:d3:81:
         61:e2:d3:75:6b:71:f3:30:fd:c1:f1:3b:a0:ae:14:81:19:3f:
         b7:36:43:03:c3:33:ff:e7:a4:64:9d:6d:ed:53:cb:75:f0:7e:
         fe:83:04:d9:8b:dd:f8:90:e5:e0:70:4b:a2:a9:b8:0f:5a:1d:
         fb:80:3f:57:4e:17:0b:a7:25:f1:6b:5b:07:bf:6e:d3:58:3d:
         66:28:07:34:2c:0f:c7:e5:6e:6a:27:91:4a:d6:be:db:ec:ac:
         a0:07:e0:90:27:b7:6b:1c:13:1c:67:1b:d9:b8:31:db:6d:18:
         7e:22:9f:93:42:ae:eb:ab:23:1b:51:46:d9:53:bb:8f:b4:f3:
         7c:38:0a:fa:07:0b:14:41:d6:89:fc:50:b6:03:69:a8:c9:cf:
         72:0b:b3:f8:ef:50:ab:3a:3f:90:a7:91:61:d9:17:49:4c:fa:
         3c:96:05:8d:e9:82:98:49:37:d3:b1:10:89:21:de:4c:d5:47:
         c6:ea:1e:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----