Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/805fe1e9-14e5-4c0f-ad3e-5a05bf7ba26b.roa
File:                     805fe1e9-14e5-4c0f-ad3e-5a05bf7ba26b.roa (raw, json)
Hash identifier:          UPK/GeN4g62XEWLIL9Q8WCWAia7GoL4K92ik2UrPYuM=
Subject key identifier:   BC:D6:E8:3A:79:A2:22:50:11:0E:0C:6A:71:5F:97:F8:84:4D:85:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DA5A860101BA46893F4E2988C50B09F7EC18C08
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/805fe1e9-14e5-4c0f-ad3e-5a05bf7ba26b.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        149.128.64.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a5:a8:60:10:1b:a4:68:93:f4:e2:98:8c:50:b0:9f:7e:c1:8c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=b4b013e57bed2a42cf8392b41dfa42507e7ef9c64b937db00b23f9de0e9b0cc2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:de:8b:29:79:db:4f:89:e9:e3:34:e8:d9:
                    41:30:23:12:04:4c:36:56:9a:d2:27:f6:b5:a7:8c:
                    39:0f:31:5d:8f:c5:8b:43:ec:cc:03:09:e6:36:15:
                    50:46:2b:d7:68:cc:ca:1b:3a:ae:f8:1b:4e:be:85:
                    57:14:0f:d3:43:1d:c8:0c:ed:c2:ef:b1:31:43:30:
                    86:84:79:76:d1:4f:de:64:9d:53:dd:97:85:16:af:
                    5a:52:e2:db:93:15:59:97:7b:44:5c:20:c6:02:ed:
                    4d:88:32:6d:8c:18:b3:f8:b2:d9:37:26:1b:0e:09:
                    75:41:c2:28:ea:34:bc:cf:43:db:80:dd:d9:30:81:
                    2e:42:b5:ad:10:1f:f5:b4:8f:78:de:5f:36:27:35:
                    40:a6:93:99:ff:10:de:ef:83:a8:67:e1:9e:f1:77:
                    74:c7:d0:ce:51:c5:30:d2:9d:07:c4:72:22:da:d3:
                    9d:d6:a8:00:52:a1:00:b5:96:70:19:21:b0:6f:19:
                    c0:08:97:52:f1:bb:aa:22:32:dd:fa:d0:a1:74:ea:
                    83:a4:91:cd:e2:33:73:30:79:b6:3c:d4:d5:d1:47:
                    23:fb:de:92:03:7b:38:be:2b:3d:04:e9:6b:af:be:
                    b0:8f:b1:db:c6:22:2a:45:06:cd:de:b2:a7:4f:0d:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D6:E8:3A:79:A2:22:50:11:0E:0C:6A:71:5F:97:F8:84:4D:85:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/805fe1e9-14e5-4c0f-ad3e-5a05bf7ba26b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.128.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:0c:92:98:61:37:2b:fd:e4:1e:58:f7:fc:b1:99:5f:c1:9f:
         85:9a:21:bb:e9:08:7a:4f:28:eb:50:5e:b8:2b:0f:ff:8a:d1:
         6b:e5:ee:86:6d:20:e8:01:28:d5:23:3a:61:9a:45:27:70:17:
         a9:4c:e7:95:b4:c0:13:31:ed:94:50:25:dc:93:f2:2f:a8:70:
         33:87:24:ea:91:f6:f7:c3:ae:38:8f:f6:63:f7:b6:be:59:b3:
         32:14:12:e3:8a:e0:e8:18:9c:d1:38:bd:21:f0:96:c8:89:77:
         ba:af:e4:d5:c1:20:ef:3c:b5:ad:35:65:5e:a6:4d:a7:68:b0:
         d0:93:2f:95:f3:c3:c0:84:38:7f:23:0e:d0:33:30:1f:07:49:
         e0:e9:d5:fa:ca:96:21:80:97:c4:06:f4:c5:5c:9a:ec:b3:5d:
         20:94:9c:b2:0a:b5:21:b7:d9:1a:73:98:c7:b1:96:9b:f8:a0:
         f3:1d:21:4c:01:3c:cb:6f:71:1b:f9:5b:f7:12:f7:c5:2a:ef:
         27:7f:04:57:bc:7f:8e:fc:80:9f:de:e9:86:65:8f:8f:95:df:
         a6:fa:4d:6a:63:47:b9:d6:14:d5:ea:de:c2:6e:30:5a:e1:72:
         4a:72:d0:17:b9:6a:84:c8:3d:c4:03:22:a4:79:77:98:ed:0b:
         3e:49:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----