Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dfbd05f-2b87-46b6-91a5-b2cbd70b23bb.roa
File:                     7dfbd05f-2b87-46b6-91a5-b2cbd70b23bb.roa (raw, json)
Hash identifier:          gz/ciw0H4nAXsJFA9sxsFMTC2OQl5rI4zq9a+EQ7TtE=
Subject key identifier:   3E:71:C7:B6:77:6A:C1:04:5B:78:65:A1:0C:6E:73:46:11:86:2A:10
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4FE31963B76917463A72744DEAE3C86C6AD025CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dfbd05f-2b87-46b6-91a5-b2cbd70b23bb.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        99.144.192.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e3:19:63:b7:69:17:46:3a:72:74:4d:ea:e3:c8:6c:6a:d0:25:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d1:66:04:18:68:a1:d1:1e:30:e5:99:41:81:
                    32:80:38:2a:f4:05:2f:60:c4:e8:84:74:38:95:c5:
                    bf:4c:38:a2:b7:90:f7:63:b9:50:43:3c:bd:c7:d3:
                    c2:12:8b:60:43:a8:df:88:0b:2f:8d:12:4c:46:bd:
                    24:9b:a1:81:43:1b:b2:21:e5:fa:99:4b:cb:3f:dc:
                    83:3b:63:d5:11:d9:1d:27:d7:86:c9:32:41:10:9e:
                    5f:42:db:03:8a:02:a6:f5:6e:7f:12:6f:4e:1e:1a:
                    a7:5d:7d:62:70:ee:37:39:b7:46:bf:b4:f2:cd:4e:
                    9d:86:0d:6c:9f:6a:22:f7:b9:e2:fe:3b:4b:0d:74:
                    cc:cf:ea:81:7f:8c:bd:fa:64:a7:be:25:23:fe:0e:
                    70:87:86:70:c1:ef:cc:bc:2a:50:86:9c:c9:c4:51:
                    03:1c:9a:6d:a2:66:64:5e:27:43:28:6b:62:be:f4:
                    5b:b0:23:e6:a9:f2:6e:56:3e:1b:8f:57:b4:b5:2f:
                    24:20:89:41:e9:f9:b1:74:3e:fe:05:59:e4:b4:c7:
                    90:9c:3e:79:0d:6b:d1:3b:11:3b:03:d8:d6:a1:49:
                    cd:67:4a:c3:4f:a1:c2:2c:c1:c2:83:7a:53:53:87:
                    de:fb:45:02:86:d4:c1:41:43:89:c4:fd:e3:46:ec:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:71:C7:B6:77:6A:C1:04:5B:78:65:A1:0C:6E:73:46:11:86:2A:10
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dfbd05f-2b87-46b6-91a5-b2cbd70b23bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.144.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         68:0f:af:4d:a5:07:79:fe:f6:3c:a9:43:ff:d9:17:0c:43:6b:
         e5:95:04:7b:9e:46:d0:79:6f:54:87:59:25:5d:b2:1b:ab:96:
         ae:14:8e:fc:a1:4f:42:c3:4b:79:eb:e9:7b:5e:ec:30:15:58:
         c1:1d:5c:9d:55:90:7d:ab:7f:0f:6e:f4:1b:fa:ec:7f:9a:dd:
         83:72:6e:c1:ea:d8:b6:5b:cd:da:7e:b8:dc:68:f3:28:20:31:
         1b:33:72:ce:16:9d:c2:05:3d:c5:4d:3f:b1:a8:5e:3c:db:5a:
         59:02:63:aa:0c:17:ea:8e:d0:cd:38:81:60:2d:ad:2d:38:86:
         74:f9:d3:f3:76:e2:18:bc:31:fe:23:21:cc:5e:82:10:56:bb:
         ab:b9:61:dc:b2:96:ec:cf:59:3d:3c:7e:d2:0c:69:1c:58:09:
         8d:e7:dc:ca:64:49:69:f2:4b:a6:f7:ee:6a:6a:14:f0:bb:b1:
         b8:32:5b:9b:98:03:f5:69:8a:df:5f:0d:69:4c:ee:43:82:b0:
         a4:82:c5:9d:c7:d8:ae:2b:69:89:e9:ce:e6:7a:fc:b1:63:d4:
         ef:f8:7c:31:e7:6e:e0:b9:7f:80:8a:15:86:77:d5:4c:06:13:
         da:08:be:8f:ea:a5:64:7e:2d:e9:26:25:01:4d:42:0a:5f:24:
         3c:3f:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----