Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92c36a65-3f71-46f2-8fbf-ecd1e3036307.roa
File:                     92c36a65-3f71-46f2-8fbf-ecd1e3036307.roa (raw, json)
Hash identifier:          OsoTHv13VC2SwU5etOr7I3plvtWimL0PbxJHdYsjoUo=
Subject key identifier:   5A:E5:1B:6F:6B:CA:28:49:83:C1:33:A8:DE:04:60:D3:24:2F:3F:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2007CB9FE2D5F5F89E234325E13DFF7167F54CCC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92c36a65-3f71-46f2-8fbf-ecd1e3036307.roa
Signing time:             Sat 11 Jan 2025 00:00:00 +0000
ROA not before:           Sat 11 Jan 2025 00:00:00 +0000
ROA not after:            Sat 15 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        16.196.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:07:cb:9f:e2:d5:f5:f8:9e:23:43:25:e1:3d:ff:71:67:f5:4c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 11 00:00:00 2025 GMT
            Not After : Feb 15 23:59:59 2025 GMT
        Subject: serialNumber=89cce46c472a3c250f0de70c5f53d66009c30ccc3199ae5ff4489e910781eb51, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9a:c6:ae:f2:90:76:fb:f6:9f:2a:4b:0b:18:
                    fd:b3:d7:c0:6d:ae:30:9e:41:c8:52:be:f8:49:9f:
                    80:ff:2b:77:0d:07:7d:a2:ec:12:d4:4e:78:6c:41:
                    0d:05:e0:b7:06:3f:af:99:eb:21:98:84:85:fd:57:
                    a8:e2:9d:0c:fd:0d:0e:38:df:96:9a:b5:05:46:92:
                    03:2a:4f:9c:bd:6b:65:4e:4e:bc:90:c8:d8:d0:cf:
                    42:95:f1:20:14:ee:b4:fe:a0:c5:60:4d:69:04:e9:
                    67:6f:fb:d3:a9:30:cb:ca:14:3c:24:05:00:01:89:
                    1c:dc:5a:57:99:1b:65:f8:d6:15:df:6b:88:7b:8f:
                    24:62:90:df:86:0c:c0:35:a2:98:db:d2:2b:6e:f2:
                    af:19:59:c5:ef:b5:af:bd:c4:07:72:01:2a:04:23:
                    a2:7f:85:ca:a3:93:3e:99:0f:08:58:b1:7f:df:d3:
                    13:12:1d:7d:9c:70:d7:40:a6:1a:61:94:96:cf:22:
                    9c:8f:a7:ef:7e:89:95:c8:a0:3c:1a:1e:d9:dc:25:
                    c6:fc:de:67:da:96:1a:f8:d7:1c:d5:fb:a0:58:23:
                    3b:5e:8e:21:0f:d6:c6:2d:12:93:f3:5e:ec:c1:fa:
                    2a:45:49:6d:b1:cb:0d:a0:45:6b:56:ef:b0:ae:97:
                    23:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E5:1B:6F:6B:CA:28:49:83:C1:33:A8:DE:04:60:D3:24:2F:3F:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92c36a65-3f71-46f2-8fbf-ecd1e3036307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.196.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:c7:ea:2e:ff:90:5c:1a:ae:eb:22:33:d5:02:0f:1a:4f:
         f0:a2:45:ae:1d:d1:c7:7f:7e:03:89:80:ef:33:b6:8e:8d:67:
         02:d7:43:02:64:3f:43:b0:a5:9e:11:47:fc:25:9c:76:27:24:
         c8:fd:58:54:f6:c2:a5:6a:7e:32:c2:11:74:af:d6:71:d6:2d:
         b5:d7:29:d7:bf:86:83:75:7f:74:be:b2:4a:f0:90:73:ae:04:
         37:15:fc:78:3b:39:71:99:a3:a2:ef:d9:13:01:d4:3f:61:57:
         58:ec:6d:8a:8e:0c:aa:e5:0f:4a:f5:87:0d:85:23:f6:9c:bb:
         94:1e:37:00:6a:2a:e6:df:b3:94:0b:73:e6:20:9a:62:89:27:
         9b:bd:51:e4:13:b8:7a:55:03:9d:9a:4f:60:f9:77:a6:fc:ba:
         4b:39:9d:ba:be:49:11:3a:c1:ea:6e:f3:1c:51:61:28:e4:fc:
         ca:9d:27:a8:e6:fa:6b:a1:5a:c8:3c:ec:6d:8c:1a:06:4b:3c:
         a3:91:1b:57:45:fc:70:82:9f:31:a9:ae:61:39:6a:d3:d5:61:
         d8:3c:3b:61:0d:4e:65:d6:5b:75:60:6b:95:4a:88:2d:27:32:
         3b:c0:56:a1:1a:fb:48:9a:e4:06:45:86:a6:3a:1d:2b:e9:ec:
         53:97:e1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----