Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3bae01e-b066-4918-935e-14e437f1a498.roa
File:                     a3bae01e-b066-4918-935e-14e437f1a498.roa (raw, json)
Hash identifier:          u4lMYKdH0D3BAR4QEVtXAS3S5tucpM+vhgVzGmotVTM=
Subject key identifier:   D9:2A:F4:76:50:1D:A9:AC:D6:2D:20:7D:28:8D:CA:AA:F7:CC:35:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1EC5736D2EF633E48CBC43441F5F351670CA2231
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3bae01e-b066-4918-935e-14e437f1a498.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        99.77.128.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c5:73:6d:2e:f6:33:e4:8c:bc:43:44:1f:5f:35:16:70:ca:22:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=ab1ce9afb4715fb2744d797eee1b304f32688ad52340bbb856bca84c7e88c3f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:58:5b:1f:9b:76:fb:f2:66:c8:ed:bc:a1:29:
                    f5:96:1c:39:c1:fd:f0:75:e3:8e:bc:5e:08:bf:b0:
                    45:fc:37:19:01:fa:33:a8:da:35:4f:17:7e:a2:d1:
                    90:4b:82:f1:07:8b:c5:08:4d:2e:17:bd:75:f3:88:
                    d5:ed:b2:77:f9:00:e9:5d:11:dc:8e:74:47:54:87:
                    03:04:b9:d8:e6:f5:ab:a3:1f:b2:8b:81:8c:9c:63:
                    e1:a5:d4:53:8f:d7:aa:1d:62:9a:53:05:f6:c7:40:
                    37:28:f1:ce:68:18:da:b4:64:df:aa:c2:49:31:02:
                    3b:fc:b5:60:a4:2a:da:43:74:b3:72:2b:0c:55:85:
                    3d:24:87:4e:4c:cc:41:4b:13:54:ef:a2:92:18:92:
                    ad:c8:25:4b:e5:35:5a:84:76:10:5a:8b:16:f2:71:
                    33:7f:7c:3c:b9:77:bd:ea:01:95:36:ac:23:91:cc:
                    74:69:c6:88:ba:66:1c:86:22:ce:0a:76:4e:f9:cb:
                    79:58:b5:a4:92:a0:e4:d4:00:e2:d6:83:79:8c:d3:
                    ed:d3:cb:07:ce:66:4e:de:62:09:f7:b1:7f:01:f2:
                    79:32:2b:5b:f6:96:e8:95:74:bf:7e:b5:8d:52:62:
                    fc:98:54:a6:24:87:c6:50:82:ca:48:59:ee:4d:e6:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2A:F4:76:50:1D:A9:AC:D6:2D:20:7D:28:8D:CA:AA:F7:CC:35:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3bae01e-b066-4918-935e-14e437f1a498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         30:ad:4e:19:55:6a:4b:92:13:cf:df:0c:da:c9:84:f5:2b:99:
         82:83:d5:a6:29:c0:78:a2:75:4e:94:a1:c8:9d:fd:ab:49:46:
         0a:2c:61:f0:55:6f:7b:9c:fb:f6:13:02:33:4d:1c:19:d6:38:
         9a:2d:29:ec:3f:ad:e0:62:3e:be:f6:14:17:95:60:f7:22:37:
         bc:be:6b:bb:5c:d9:71:38:fb:5f:5e:66:73:bb:6c:52:40:1f:
         76:7b:0d:75:4f:51:33:d7:bb:82:4b:bc:3d:09:dc:2b:fa:57:
         cc:cd:73:f5:ee:6f:cc:94:a5:9e:6b:a9:b9:06:93:8f:af:19:
         a5:25:1b:76:68:35:03:33:8d:cb:55:eb:e4:93:ec:3b:db:01:
         86:e1:54:11:8e:68:e6:69:d8:e3:bb:99:ea:5e:f9:4c:8d:53:
         25:c9:54:7b:59:d1:28:b9:d9:e0:00:c8:3c:c4:07:f7:87:1b:
         c9:4a:b9:6d:0c:ee:e1:d7:71:33:4a:30:8b:e5:77:31:0c:d5:
         be:c5:09:be:18:db:55:bf:35:7a:af:1b:b5:2f:81:cb:cb:01:
         35:2d:3b:db:39:09:03:d3:a3:c1:d6:aa:01:74:f7:f2:12:f9:
         1c:6a:d9:83:99:87:51:de:bf:75:01:9e:df:b3:a8:cf:ec:c7:
         20:3e:ca:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----