Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a74040c7-a100-446a-a460-34c8441644b4.roa
File:                     a74040c7-a100-446a-a460-34c8441644b4.roa (raw, json)
Hash identifier:          ca9Hi+f7+UQ89Ovv8BczpOdr/G/jUQc/SISBLwtCk08=
Subject key identifier:   7B:D1:40:92:44:ED:B6:B6:E9:70:44:53:94:19:20:7A:F7:7C:D6:F5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0768D7F39F9FFBC8BCA01DDA26B24375EF8D46E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a74040c7-a100-446a-a460-34c8441644b4.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        149.128.64.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:68:d7:f3:9f:9f:fb:c8:bc:a0:1d:da:26:b2:43:75:ef:8d:46:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=3b97da2c0a5667875b1be2d3aacf4d45074aad70fbf08c0ab601fc22a3f23985, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:55:fd:3d:72:d2:f1:fb:4f:c5:2e:e2:a9:
                    0a:1f:1f:97:8a:49:6b:6e:26:27:cf:80:da:9c:60:
                    c8:ac:53:93:92:54:d7:32:f7:b4:d9:ec:8b:23:d7:
                    86:49:91:d6:4c:e9:9c:94:59:cc:38:12:08:02:8e:
                    cd:35:e1:61:d6:86:0d:88:cf:81:ec:bd:e3:6b:e9:
                    13:18:02:26:67:e8:2f:bf:5a:a0:1c:e0:7f:c4:b4:
                    ed:30:c1:4f:2e:05:6a:0e:b8:24:e6:f9:38:58:fe:
                    ed:d1:c2:f8:33:17:08:bb:bf:7a:1f:16:44:4f:8a:
                    87:82:19:4f:ff:3c:5d:dc:f0:0a:48:6d:1b:bd:06:
                    b3:bd:7d:90:03:77:f9:50:78:0b:c3:3a:ed:c3:8f:
                    8a:c5:e9:12:b2:4b:8a:d4:29:eb:4f:46:68:7c:3d:
                    99:9c:d8:94:49:bb:3b:c5:a5:ab:cb:5e:a1:6a:b8:
                    68:e0:e2:6b:11:2b:59:5c:bd:42:6d:c0:4b:f7:a2:
                    79:61:07:b5:05:81:b3:2b:d2:53:c3:bf:23:ce:eb:
                    b8:c9:a9:53:e1:24:66:d0:84:44:30:a3:b3:38:9f:
                    c7:78:d3:b4:03:57:a7:e6:08:50:2e:32:89:53:15:
                    67:ab:66:37:c8:45:3d:37:a7:0e:38:b1:f7:d7:fd:
                    89:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D1:40:92:44:ED:B6:B6:E9:70:44:53:94:19:20:7A:F7:7C:D6:F5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a74040c7-a100-446a-a460-34c8441644b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.128.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         47:31:4f:fe:d3:b0:0e:4c:85:57:96:36:70:eb:43:40:03:88:
         00:81:10:3d:c4:bd:0a:d5:d2:07:d0:7a:cf:44:f4:9d:7b:14:
         92:4d:ea:2a:1b:73:0b:b5:dd:3d:13:1d:a1:da:d1:ec:eb:58:
         0d:3c:b4:a7:59:3f:22:be:ec:1a:05:b9:e8:b5:df:5c:74:0d:
         a4:4b:88:a9:25:e0:55:24:39:cf:51:a2:6e:ed:96:64:03:01:
         93:76:f9:20:ef:3c:8d:80:0a:d4:fa:6f:33:8c:21:20:9e:f4:
         52:a5:df:eb:ee:19:17:ed:30:42:b2:a5:8e:d9:21:7e:9b:8e:
         ed:3b:a8:f5:15:fb:29:d7:84:b2:75:03:db:22:de:2d:55:01:
         43:74:37:b2:0e:b3:2e:ac:a3:c6:a9:f8:ba:56:2c:05:c4:e2:
         41:54:d1:0a:8a:43:6e:92:cb:2c:eb:cb:38:60:c1:6b:14:7e:
         11:13:23:40:3c:cd:4d:cd:1d:af:63:f3:d2:cc:e5:2e:58:8d:
         54:57:09:2d:d1:f9:7b:05:64:e3:6d:2f:20:bb:b7:0a:50:bc:
         32:6e:23:7d:31:6b:4d:12:a3:6c:14:97:d9:b0:82:e2:de:5f:
         c2:fa:7d:a7:11:7c:c5:80:4d:be:95:3b:c2:9b:83:3d:22:c9:
         b1:e4:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----