Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b6335b1-b28d-43ad-986a-3d8f09097d43.roa
File:                     7b6335b1-b28d-43ad-986a-3d8f09097d43.roa (raw, json)
Hash identifier:          HcdpwOZYb3NMJXaa+SDIn2IhlVLdWu8f0nWEX5/5tbQ=
Subject key identifier:   4A:F3:9F:0B:0B:0C:9D:1D:D5:82:95:3E:EC:0E:2E:99:9C:06:C9:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39430CCA7FF3B724250057477ADAA5E301F3E4DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b6335b1-b28d-43ad-986a-3d8f09097d43.roa
Signing time:             Mon 17 Feb 2025 15:31:18 +0000
ROA not before:           Mon 17 Feb 2025 15:31:18 +0000
ROA not after:            Mon 24 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f30:8060::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:43:0c:ca:7f:f3:b7:24:25:00:57:47:7a:da:a5:e3:01:f3:e4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 17 15:31:18 2025 GMT
            Not After : Mar 24 23:59:59 2025 GMT
        Subject: serialNumber=865845d191e942625bf89ec634874ecd63c79f42160121a67a7cb955efb28241, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3e:21:f7:6e:a2:cf:bc:7f:a4:ff:b2:62:40:
                    36:b5:a2:5b:2d:f8:34:b9:17:b7:93:84:cb:81:90:
                    e1:44:ef:db:2b:da:89:6f:56:b9:93:f8:28:a1:c6:
                    e9:a4:b0:17:43:b4:60:bb:b9:c6:d9:d3:6e:da:9a:
                    72:33:d2:92:63:b3:06:8c:ce:c2:d5:62:df:a2:06:
                    22:de:6c:8a:d0:00:35:23:84:17:da:02:e0:84:e2:
                    2f:f3:86:a8:76:e8:3c:13:88:e8:81:d4:0b:9c:e5:
                    dd:d6:18:36:19:2e:81:cd:1c:c3:05:39:87:3a:cb:
                    ff:6f:bc:d0:55:15:05:89:30:ce:dd:4d:e1:0f:d8:
                    14:ad:86:e0:09:10:fa:7c:59:3b:26:1d:44:61:86:
                    df:34:cb:a9:2d:0f:bc:7c:92:14:33:34:a2:00:e7:
                    a1:02:f8:4c:2f:18:b6:09:3f:eb:0f:78:65:34:00:
                    22:4a:ed:2d:91:ac:b4:ff:2d:0f:01:92:e3:49:40:
                    ca:4d:b8:5e:5b:38:ad:30:93:13:c3:32:44:ae:fa:
                    ec:45:72:77:78:2a:33:be:78:23:2c:4b:a3:47:86:
                    79:34:39:a7:59:f2:cf:8b:a5:26:ed:95:f0:07:a7:
                    ad:91:08:b9:f9:db:d1:00:8e:e5:cc:74:5e:e2:19:
                    6a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F3:9F:0B:0B:0C:9D:1D:D5:82:95:3E:EC:0E:2E:99:9C:06:C9:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b6335b1-b28d-43ad-986a-3d8f09097d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f30:8060::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:83:75:3e:f5:48:ad:cc:0a:74:8e:ff:f8:22:46:ba:eb:61:
         9f:fd:1a:f4:27:f0:47:4f:51:54:5a:f3:59:f8:70:f7:e3:77:
         84:2a:c4:cc:47:5e:01:52:6e:99:d1:36:11:2b:72:46:c0:77:
         2a:a9:db:ed:ca:57:58:e4:f4:e6:be:9d:fa:42:3f:e4:1d:c2:
         4b:40:c3:8f:a3:39:9f:d5:83:81:6f:a4:3e:cd:a6:ff:6b:cd:
         53:14:35:35:31:b0:67:a8:a3:01:ff:d0:38:d2:f5:f8:ac:63:
         f5:cd:43:70:0e:75:a2:08:6d:16:df:f0:f5:85:4e:ba:eb:1a:
         5b:01:72:8c:01:48:d2:9d:26:89:4b:aa:7b:13:f8:1a:1d:cd:
         52:54:22:80:3a:4b:46:d7:14:13:a2:45:1b:4f:f5:b0:a8:b8:
         eb:90:30:a2:4f:a9:77:03:2a:81:4f:cf:cb:29:0a:dd:5d:66:
         f4:8e:d1:0a:c6:b5:89:23:33:96:47:13:64:1f:2b:41:9b:02:
         a0:f6:03:17:75:3d:1f:c2:99:c1:ce:f8:4a:19:ac:7c:4d:ea:
         9e:8d:fd:1b:df:f6:61:c8:2d:b8:8b:36:c9:94:26:0b:d1:e5:
         7f:6a:e3:78:aa:df:bd:3d:39:99:0f:d1:b3:e4:f6:a0:e7:84:
         52:32:a2:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----