Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c7e6b9f-a7f8-4195-a0f8-5990f563e820.roa
File:                     7c7e6b9f-a7f8-4195-a0f8-5990f563e820.roa (raw, json)
Hash identifier:          STGTZVUTncP1xGXAdS1Lni1NRlvvluRZzH/Aj5/rvhs=
Subject key identifier:   1D:C8:CF:57:B4:93:46:38:E2:B0:59:BB:74:98:5F:E0:FE:2F:6F:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       425829740FE69BBF57A791EF840AEAF24304D834
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c7e6b9f-a7f8-4195-a0f8-5990f563e820.roa
Signing time:             Tue 24 Dec 2024 00:00:00 +0000
ROA not before:           Tue 24 Dec 2024 00:00:00 +0000
ROA not after:            Tue 28 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        72.29.0.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:58:29:74:0f:e6:9b:bf:57:a7:91:ef:84:0a:ea:f2:43:04:d8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 24 00:00:00 2024 GMT
            Not After : Jan 28 23:59:59 2025 GMT
        Subject: serialNumber=38f9ae91a4056d8e2df26bf7fdbfaac4b3b896772e7474c8958ec546e82a90dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:4c:7b:e2:77:53:e9:07:00:21:4c:10:d5:
                    5c:c9:f6:47:8c:cd:aa:27:51:9b:94:30:bb:d6:8b:
                    45:db:cb:54:38:25:0b:9c:82:9d:7e:5d:f4:24:37:
                    81:fb:66:6c:b3:44:fc:52:0b:da:c8:dc:dd:cf:b3:
                    6b:99:25:3e:20:67:de:c1:e3:b2:29:9e:da:7f:6c:
                    81:ec:1d:81:cd:97:58:62:1e:cc:62:69:1d:a2:74:
                    90:f9:2e:91:88:6e:42:fe:0c:af:cc:a1:33:f3:99:
                    36:e3:52:78:5b:dc:6d:cb:8a:f8:0a:fe:44:4e:22:
                    99:8a:39:74:fd:cd:87:60:08:17:7a:af:9a:b9:41:
                    da:01:72:45:c4:31:50:83:b2:2e:97:9d:af:03:1e:
                    b9:b8:2c:21:b9:8d:7c:37:cd:f2:d7:a6:ab:8a:31:
                    01:cf:1b:bc:aa:c0:1c:3d:40:eb:01:50:c9:4c:ae:
                    cc:30:61:01:f1:af:6d:7e:35:01:73:0d:90:64:da:
                    b3:29:5d:b4:c8:3b:3f:e8:a8:92:1b:a9:42:91:40:
                    d3:34:55:34:86:a4:8b:b8:f8:28:d3:8c:fc:3c:6e:
                    5e:5b:98:dc:af:44:71:f8:18:6b:65:fb:bb:78:68:
                    a7:ff:5e:61:5a:bf:b2:1b:4c:5d:db:dc:a0:0f:6a:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C8:CF:57:B4:93:46:38:E2:B0:59:BB:74:98:5F:E0:FE:2F:6F:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c7e6b9f-a7f8-4195-a0f8-5990f563e820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:52:9b:fc:a6:09:5f:ef:5e:7f:93:11:8b:29:02:ec:f8:3e:
         3d:9e:76:ca:10:2f:bd:6d:e8:b9:d8:60:0e:ea:55:91:de:89:
         15:42:c8:46:41:02:a0:a2:49:f6:45:b5:44:d5:16:b9:ff:ab:
         93:ca:f3:56:65:a3:51:c2:21:98:65:c2:7d:bc:2e:2f:a3:d2:
         6a:75:ff:9f:cf:c9:34:91:d2:26:1b:b1:0a:a5:13:44:6c:2a:
         b0:42:8b:41:76:57:27:6c:70:9b:43:8e:fc:0e:68:3c:94:ca:
         b7:e4:a9:a8:62:c4:19:7d:0e:e8:f7:26:cd:75:d1:63:b7:2e:
         49:8e:5f:df:b1:85:61:48:4d:90:34:7e:ee:0e:4b:4c:90:2a:
         81:a0:b0:c7:d0:87:69:27:34:fa:45:5c:5d:a5:6b:8d:fe:e2:
         d2:3d:c1:e4:98:a0:73:f7:bf:e1:17:af:96:13:23:c8:9a:e4:
         9e:71:27:28:c5:56:74:b8:a8:fe:b3:89:9c:53:2c:3f:42:ef:
         b6:c8:e7:c9:ad:38:0a:07:bb:2a:46:94:69:9a:63:95:57:15:
         df:32:6f:68:2e:e6:14:2e:d4:28:d1:b9:39:7d:05:8f:3e:23:
         9d:fc:e5:1b:88:c0:b8:70:2c:31:56:1e:e7:c6:54:e9:59:43:
         d2:2d:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----