Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94c9cb6d-ddb9-423c-8785-52ff56cdd946.roa
File:                     94c9cb6d-ddb9-423c-8785-52ff56cdd946.roa (raw, json)
Hash identifier:          fuw73KhrCtuo5fEMmScv+Yv4R+66u7lA0OXYJP0kcjg=
Subject key identifier:   70:02:E3:26:3D:81:22:F8:07:43:4E:D3:A5:E9:A4:3E:1D:B3:65:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E8CEA5339FF43403EB96F6F34030C2DA01F8EE5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94c9cb6d-ddb9-423c-8785-52ff56cdd946.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        16.145.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8c:ea:53:39:ff:43:40:3e:b9:6f:6f:34:03:0c:2d:a0:1f:8e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=171fc11e5e6ffe25b4f9344929f1199369f4c074c4c2f603c7ad6dd3df1e7977, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:46:67:9b:f6:0b:6b:92:e2:1c:fa:ed:0e:
                    ad:64:bb:75:1a:b4:7a:aa:d6:e4:ec:71:8c:1b:60:
                    1d:07:72:ae:b2:de:56:cb:50:85:a1:e4:88:ba:70:
                    c4:84:b1:48:ec:89:c7:2b:89:2e:d6:18:b7:1a:e4:
                    9c:d6:40:70:4e:75:5b:89:8d:f2:70:c6:34:b7:e2:
                    bc:af:0c:20:68:76:e1:ea:06:5b:91:eb:96:fa:20:
                    7b:97:9c:86:0f:c2:4d:59:62:b4:3b:7b:52:0a:a1:
                    d3:5c:f2:8f:15:21:d1:93:f1:46:c9:fe:72:b8:07:
                    ef:04:f7:cd:09:39:95:25:0c:46:32:72:cb:19:2f:
                    6b:29:ef:5d:12:3e:92:70:57:3e:ee:18:56:46:59:
                    91:3d:3a:6d:30:ab:a5:a9:e7:c9:13:61:f1:97:1a:
                    85:f4:82:08:bb:50:ea:78:4d:f7:0b:55:b2:91:81:
                    d6:a3:44:bc:39:6e:2d:5c:55:41:3e:c1:4a:57:de:
                    30:34:d1:35:f9:3b:70:bf:a5:a5:c9:f9:1a:d4:6b:
                    d4:66:f5:69:06:8d:81:6d:c6:9c:80:52:de:48:1f:
                    26:00:f6:08:43:40:bd:0c:5d:e4:43:a1:ce:94:6d:
                    9d:48:6c:e4:f1:e1:0f:47:a3:0a:5b:89:7f:75:c7:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:02:E3:26:3D:81:22:F8:07:43:4E:D3:A5:E9:A4:3E:1D:B3:65:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94c9cb6d-ddb9-423c-8785-52ff56cdd946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:7a:68:f2:90:f8:88:f1:c2:ac:71:64:0a:8c:83:c0:62:97:
         6c:76:bb:ca:db:00:44:f7:56:60:8e:40:da:af:34:42:b3:03:
         5d:d1:5b:c9:ba:cc:af:da:af:c1:82:e2:3e:8e:16:52:59:13:
         4a:3f:e7:da:cf:5e:82:88:a5:03:51:1d:b6:36:ce:09:f7:cb:
         5a:aa:b1:7f:2b:9b:ce:30:6d:7d:01:ec:57:c2:e1:d1:a2:cc:
         fe:b6:58:4d:05:40:f8:52:37:f2:9e:fc:4e:2f:32:8a:c2:62:
         c5:de:27:a4:1d:38:d8:bc:6b:f6:84:40:59:ef:17:6d:2e:1a:
         92:e0:16:5f:c0:4d:ff:a8:13:66:9c:ba:e9:41:b4:86:a7:2a:
         f4:83:64:45:9e:a2:c7:29:39:dd:d8:40:96:d9:4a:cb:cd:5c:
         17:8e:87:2f:b0:cc:36:46:03:2c:cd:9b:03:e1:4d:01:e1:84:
         47:d4:54:3a:54:ad:2d:e2:85:4c:ba:3d:b9:1d:03:04:f0:1c:
         46:3a:df:12:84:fd:34:ac:a8:f4:27:bf:56:5f:26:a2:5b:86:
         88:35:35:3e:4e:76:91:4f:2f:74:ad:b9:dd:61:e8:80:e9:bf:
         e7:d8:ef:f5:33:b7:c8:36:2d:9a:6e:f5:c6:9b:f2:26:bc:7e:
         85:26:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----