Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94c28ccf-8dd7-4ece-a1c4-becd5bf5c568.roa
File:                     94c28ccf-8dd7-4ece-a1c4-becd5bf5c568.roa (raw, json)
Hash identifier:          o8iotoFnj7yPc+EmBuE8gZQ5rdU43d9gqW5XFErWn2g=
Subject key identifier:   B2:7F:1B:29:66:5B:FB:97:5C:E2:70:65:CC:96:0A:E4:52:14:63:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DBC6AD75AC634004788AFC7F44DB87BC8E3BFDC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94c28ccf-8dd7-4ece-a1c4-becd5bf5c568.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:50c0::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bc:6a:d7:5a:c6:34:00:47:88:af:c7:f4:4d:b8:7b:c8:e3:bf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=ec5e9512b9fa1546063df2a887d68fd8b8f45befb5195ada46b4b46d0feb8c8e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:10:e2:7c:6c:5f:ba:3b:a5:c5:22:cb:32:
                    96:e4:0d:d8:94:12:5f:3b:ad:c6:f8:cb:04:c1:df:
                    a5:c9:b1:bb:8e:ab:39:3e:af:eb:a5:8c:de:a5:f4:
                    30:ae:19:71:de:27:09:47:df:72:54:8a:e1:40:f4:
                    7f:5d:9c:5d:e5:61:4b:45:14:bf:2d:74:65:05:8e:
                    da:2b:28:6f:f7:6e:6a:9c:4f:33:ef:7b:c8:d7:96:
                    07:32:fa:7e:78:b5:d5:80:73:aa:ea:cf:a2:1d:f4:
                    b2:0a:44:d3:cb:94:8d:96:de:33:a6:9f:f0:dd:3f:
                    12:3b:76:0f:0a:9e:d6:48:3c:20:44:b0:84:41:f3:
                    a8:2f:e9:6f:6d:21:06:a8:24:44:4b:5d:1e:d9:b8:
                    c3:9e:89:5b:7e:54:8f:2c:94:c3:fb:d9:17:be:24:
                    2b:c1:81:1e:4b:49:b9:55:2f:c6:c6:b4:56:cb:53:
                    72:8e:5d:ad:b8:9d:aa:65:1b:f4:ff:e4:86:bc:77:
                    36:ba:5b:e5:0d:3c:b8:6f:16:a6:63:9f:3c:4a:04:
                    a3:0c:d9:f8:f4:fa:35:a5:9c:94:b4:95:a8:78:5e:
                    0f:68:c7:88:08:2c:7e:dc:ca:c6:f3:31:96:7c:d7:
                    bb:ce:c1:c5:25:53:0e:1a:91:b1:a4:75:9b:35:bb:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7F:1B:29:66:5B:FB:97:5C:E2:70:65:CC:96:0A:E4:52:14:63:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94c28ccf-8dd7-4ece-a1c4-becd5bf5c568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:50c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         68:0d:71:07:25:99:96:cf:dc:a5:a8:dc:1b:58:4d:21:b3:9a:
         fb:42:7a:ed:e8:41:f3:68:61:0e:8f:9f:aa:a0:f4:32:8f:c5:
         4d:ca:06:0e:86:78:a0:42:a0:b5:87:81:3f:e2:f5:85:c4:e4:
         a6:b4:e5:d3:06:6b:70:ef:f7:b5:5d:5b:c4:99:cf:21:5e:ea:
         46:e7:58:c1:ea:a2:b8:94:66:1c:fb:d1:2f:6e:ce:95:08:28:
         82:a3:48:23:39:91:9a:0f:a0:80:a2:87:b5:f6:c7:65:00:f5:
         6d:c6:95:26:7a:22:c3:94:7b:f2:58:14:5a:d6:15:93:cd:f5:
         1c:13:a9:c9:0c:dc:d7:e3:60:39:4c:7f:66:29:e8:e2:fb:28:
         b6:8c:57:df:cb:8c:da:a1:cb:2b:e2:07:fc:b4:48:c9:15:22:
         a0:94:b0:fa:78:46:89:2c:9b:82:15:fa:f1:d0:d4:0b:dd:43:
         fb:59:c3:5a:f4:ac:fb:ef:76:0a:4d:84:a9:ea:29:1f:21:70:
         b5:c2:51:cf:7c:4f:0a:fe:9c:ef:b9:b7:0e:a9:fa:c6:2f:ba:
         2c:1f:0a:04:fd:a5:b9:74:6c:da:71:ef:57:2b:33:12:f2:80:
         46:2f:bf:0d:0a:5e:57:6e:af:26:41:7d:b5:87:14:79:5a:93:
         7a:1c:2f:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----