Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/744b2b2e-b918-40f2-ab20-ed0570abb836.roa
File:                     744b2b2e-b918-40f2-ab20-ed0570abb836.roa (raw, json)
Hash identifier:          iBYhsQQ65iHiGg0wwtXzax/q8SUVp5ZaZMHArQ4f62g=
Subject key identifier:   F7:8F:05:DE:15:9C:C4:A9:7F:60:5C:D8:C2:02:72:D6:0F:51:E2:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6434EBC7DD31C35F732F6411B6993B4F3FAE3E97
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/744b2b2e-b918-40f2-ab20-ed0570abb836.roa
Signing time:             Mon 25 Nov 2024 00:00:00 +0000
ROA not before:           Mon 25 Nov 2024 00:00:00 +0000
ROA not after:            Mon 30 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        75.3.0.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:34:eb:c7:dd:31:c3:5f:73:2f:64:11:b6:99:3b:4f:3f:ae:3e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 25 00:00:00 2024 GMT
            Not After : Dec 30 23:59:59 2024 GMT
        Subject: serialNumber=a59c8f6602071dc5ee5e6adf6f2938ff88ac6dc4eec995ae8be211f25998fde2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:45:74:98:29:ce:f5:9e:e0:e0:a8:a6:6b:
                    b2:25:1d:1f:22:17:d3:29:d5:a0:63:24:e5:44:a7:
                    52:06:50:ba:5a:58:5a:ea:b2:d8:eb:48:76:04:a8:
                    64:29:de:b2:fe:7b:6a:ed:31:2f:11:9f:92:af:91:
                    18:9d:a4:60:fc:7c:ea:22:87:21:09:b9:88:1c:dc:
                    4b:22:a9:2a:94:fd:40:61:5b:db:0a:30:73:9e:02:
                    4c:e2:2f:31:f2:d9:f9:2b:49:ec:4c:99:11:56:2b:
                    5f:df:2b:46:69:a7:97:01:78:5b:14:41:89:11:4f:
                    b5:1d:10:3b:3c:88:de:9d:69:4c:6f:c7:f1:e1:b0:
                    22:f4:16:01:d9:53:4c:96:81:10:ee:1c:43:82:b0:
                    38:dc:4a:26:e4:d0:c3:dd:a1:68:cb:93:6e:7c:9e:
                    74:41:c7:a5:fc:c3:94:71:7c:a2:0e:36:b5:f4:0f:
                    e8:36:4d:46:db:1e:2c:26:d8:d0:a4:c2:8c:77:97:
                    cd:17:33:07:c9:a7:34:5f:77:f2:30:31:3d:ad:80:
                    42:29:14:42:f9:b6:3e:06:3e:c3:f6:44:2a:0f:88:
                    f0:05:b9:7f:c2:d3:60:e2:55:53:e5:6e:27:b1:bd:
                    0b:db:e1:4e:6f:c1:45:df:97:2c:9e:1e:88:40:96:
                    9d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8F:05:DE:15:9C:C4:A9:7F:60:5C:D8:C2:02:72:D6:0F:51:E2:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/744b2b2e-b918-40f2-ab20-ed0570abb836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4c:41:b9:ef:e6:60:89:6a:aa:03:29:19:af:88:7e:56:b6:82:
         f4:cf:99:3a:31:5e:24:3e:b4:23:50:55:78:bb:2b:31:d8:60:
         c4:b1:3c:d2:5d:4f:7f:0a:fa:a4:71:9d:d8:39:aa:4b:fe:ff:
         b5:cb:75:60:0e:b8:c5:61:72:39:4d:12:1d:ec:8e:86:cf:d1:
         eb:3a:32:21:10:2e:92:cb:35:a6:14:b4:9d:50:7d:fc:ef:d7:
         ce:b6:c5:c9:23:1c:a1:50:c9:ab:b9:84:5e:77:78:1e:e2:a6:
         b6:57:5d:77:c9:93:f6:8f:77:6a:dc:d0:45:9d:2e:7d:01:3f:
         dc:4e:39:91:01:96:fc:89:09:af:0d:4a:44:5b:4d:6c:66:fc:
         73:17:a0:28:7b:0b:41:5c:e7:d9:7d:bc:69:04:a4:83:8f:48:
         3f:04:7b:d6:66:59:32:f0:9f:6d:c7:29:6c:f1:89:cc:24:54:
         fe:f1:28:e3:c6:13:30:9c:13:c1:62:0a:99:7e:08:55:4f:b7:
         84:7d:59:32:5c:fb:7e:40:07:5f:f9:ac:94:cd:0d:12:80:40:
         30:55:6d:5e:83:d8:65:b5:0c:e2:39:7f:2e:73:f6:63:ae:48:
         17:2e:c2:41:31:0d:9a:34:01:75:2a:74:ca:59:61:4a:42:77:
         80:af:e2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----