Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b74e966-0168-4a63-9e48-a3b57b352717.roa
File:                     8b74e966-0168-4a63-9e48-a3b57b352717.roa (raw, json)
Hash identifier:          4LjPwZoLARECBy68DXckt1b472SlUSEnlZZlwQjDRE4=
Subject key identifier:   34:0F:C9:72:AE:85:0F:E8:B1:CD:4B:C2:16:48:BF:61:56:2A:79:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       40F40003D6773D27321FBD1600D635863F93138F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b74e966-0168-4a63-9e48-a3b57b352717.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f01:4840::/47 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f4:00:03:d6:77:3d:27:32:1f:bd:16:00:d6:35:86:3f:93:13:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=a38a48c2785d2d16e71297fdc17b47804b941c8021a74950d6a51bb85fc7eb2e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:d1:98:ba:74:bc:88:5b:c4:99:c3:db:f9:
                    c1:36:20:09:25:b2:70:99:cc:5f:8a:3d:f1:de:c8:
                    e8:7f:05:5f:95:ba:6f:0a:ad:ca:2a:64:2b:f6:88:
                    c4:4a:94:45:fc:d3:36:ad:8a:8c:a0:cc:44:85:f0:
                    19:a1:16:6b:14:25:00:4d:11:e0:dd:4f:fa:14:53:
                    98:5d:9e:e0:8b:72:52:38:2b:9d:87:0c:d2:f9:98:
                    2e:d1:b9:40:8a:df:69:c8:88:cc:96:6c:2f:cf:2c:
                    b1:73:0c:c8:62:04:4a:f6:7e:c1:ff:61:08:f7:b5:
                    73:82:0c:be:13:ca:e2:82:b4:09:b5:03:90:fe:2e:
                    0a:89:c7:0f:f2:aa:3b:9c:09:26:2f:80:49:7f:01:
                    2e:62:28:72:92:0e:7f:f8:d0:9a:f2:29:1a:f2:51:
                    49:34:1a:58:05:4f:78:4b:cf:43:9b:b3:77:b2:5d:
                    6e:71:8d:d4:76:9e:93:88:0c:06:fd:97:90:82:3a:
                    d1:4e:31:66:6f:93:39:a5:6f:ce:31:c3:20:63:f8:
                    4e:e7:90:7f:c0:77:03:06:0d:06:d1:95:31:a9:63:
                    03:81:5c:da:78:7c:8d:ad:33:7a:a7:44:ca:b5:de:
                    72:04:32:4a:0d:aa:86:8a:6b:23:99:63:7e:1b:35:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0F:C9:72:AE:85:0F:E8:B1:CD:4B:C2:16:48:BF:61:56:2A:79:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b74e966-0168-4a63-9e48-a3b57b352717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4840::/47

    Signature Algorithm: sha256WithRSAEncryption
         1b:7c:78:05:33:27:cd:f7:85:68:e9:df:28:de:dd:33:41:55:
         83:cc:e0:e4:66:7d:9d:fc:6e:ef:4a:c2:7d:18:bb:ba:5e:bc:
         18:de:5b:3e:36:9d:8b:a6:14:ff:bd:c7:74:68:94:38:38:53:
         1d:61:0f:3f:13:e9:30:8c:bf:49:05:78:30:53:f1:39:2a:fe:
         9e:b4:00:f7:2e:30:c5:97:ba:19:47:33:e2:4d:18:64:69:bc:
         7d:01:67:89:3c:40:f7:fb:c2:92:57:1b:f6:76:ce:71:19:b3:
         8c:aa:43:19:1d:38:2a:bd:4e:3b:6f:d3:b7:f8:a9:78:b1:10:
         dc:f2:66:21:52:63:cc:d4:ba:f0:c3:2a:04:0b:d8:29:3d:1c:
         76:81:20:f1:2e:8f:90:e6:d4:de:4f:fe:ad:ea:db:a1:69:94:
         5d:96:77:af:1d:4e:41:e3:81:19:af:87:22:f4:d3:13:34:20:
         ce:2a:3b:b7:15:4a:46:55:da:49:10:3b:66:47:74:73:2e:30:
         c1:16:97:64:36:70:9f:e9:34:82:fe:60:30:3a:d5:2b:2e:a1:
         91:65:3c:52:1c:8a:6e:53:06:f8:61:3b:54:73:32:48:3b:d6:
         23:92:37:1e:35:14:fe:29:12:70:84:be:71:c5:fc:f6:32:43:
         80:c4:c1:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----