Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa10e99e-b251-4ef5-8380-32d45bcf8286.roa
File:                     aa10e99e-b251-4ef5-8380-32d45bcf8286.roa (raw, json)
Hash identifier:          65jDbBXtdm+LzzQ120JHzQstjWYFFw0mSqAgvET/aiQ=
Subject key identifier:   F4:F8:1B:59:A9:E6:8C:13:27:5B:AD:04:13:D3:D4:0E:1D:89:E8:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52E19CDC6F4BEF7C0AD44F5D932A7388FC69BF0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa10e99e-b251-4ef5-8380-32d45bcf8286.roa
Signing time:             Mon 23 Dec 2024 00:00:00 +0000
ROA not before:           Mon 23 Dec 2024 00:00:00 +0000
ROA not after:            Mon 27 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        35.54.32.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e1:9c:dc:6f:4b:ef:7c:0a:d4:4f:5d:93:2a:73:88:fc:69:bf:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 23 00:00:00 2024 GMT
            Not After : Jan 27 23:59:59 2025 GMT
        Subject: serialNumber=7c92f5d66f2092bb24bf62f9df3788e7c3b8edfc67dfeeb74fabd184c99fc1c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:5f:4e:48:ad:e2:9e:7e:8e:d2:d2:46:33:
                    b1:0b:90:2a:85:a5:f4:73:fc:a8:62:84:18:f1:40:
                    79:15:7d:f1:cd:ed:fd:4f:69:83:ea:09:87:85:3d:
                    51:7b:2c:48:47:60:58:c8:a1:56:a3:0e:79:bf:25:
                    09:07:af:08:29:53:7d:70:47:73:4b:ed:39:a4:ee:
                    39:29:bb:73:2a:ed:31:e5:7a:61:e1:4b:c8:92:ed:
                    f0:18:43:34:87:78:1c:48:9c:5c:49:c5:64:53:9b:
                    10:48:84:37:61:68:71:52:28:d6:c0:81:af:c5:1b:
                    95:b3:05:4a:b1:12:71:2b:bf:1a:d3:69:d2:8f:35:
                    50:92:98:c0:61:e9:1d:3f:d6:97:e7:82:64:1c:91:
                    64:9f:ac:97:53:39:97:3c:b6:5d:f2:2b:3a:25:76:
                    7f:4a:57:0e:22:87:f5:6e:82:4e:6b:47:32:a1:f0:
                    9e:2b:06:9e:7f:27:f9:81:bc:cb:c3:33:70:4b:e4:
                    ab:c3:89:48:4f:4e:23:1d:67:98:25:5d:6a:f2:eb:
                    5f:f9:90:ec:24:de:c1:c1:03:8f:0f:53:c9:d9:21:
                    96:84:43:39:cd:bf:7c:89:88:d7:e1:21:f3:e6:75:
                    54:34:07:7f:1e:44:1c:5d:17:32:5f:9b:3b:b4:cf:
                    12:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F8:1B:59:A9:E6:8C:13:27:5B:AD:04:13:D3:D4:0E:1D:89:E8:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa10e99e-b251-4ef5-8380-32d45bcf8286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:28:9b:22:12:27:73:6d:6d:bc:bc:58:4d:23:e0:31:0c:93:
         55:6d:77:40:99:c8:71:a5:7a:1c:87:a6:9b:cf:ac:ef:46:ea:
         d2:5c:99:c3:4a:cf:9c:c4:a0:78:0c:ed:a2:71:d2:9a:50:2f:
         ea:82:67:9f:63:35:99:f9:42:df:18:ac:ef:a2:7a:b3:51:18:
         5f:72:ba:9c:3f:bc:d6:09:ef:73:bf:5b:d6:77:64:44:da:bc:
         cc:cb:d3:cd:84:86:e0:9b:12:59:6f:76:11:4d:90:57:f7:40:
         29:13:5f:06:ed:8f:a8:43:8e:ad:ff:a6:4e:8b:b7:14:a4:98:
         db:a8:77:ba:49:53:44:8c:bc:dd:d7:8d:d7:da:b8:20:42:8d:
         7b:56:5c:7c:61:76:f9:1c:04:16:a5:1b:69:fa:d0:d2:34:f1:
         e1:5c:b9:5d:48:9c:57:15:78:ea:80:ba:80:50:82:61:87:d5:
         bc:09:50:aa:ef:09:c8:a4:32:5a:5d:3d:16:b4:f0:bd:49:77:
         96:15:ad:88:e6:fd:3b:a0:7c:1f:40:5e:43:95:59:84:77:81:
         08:e6:8a:bb:87:5d:da:29:5b:90:b2:50:ef:eb:fb:ec:b6:65:
         98:ac:f6:0f:21:6d:66:bc:19:5a:36:2f:0c:7f:51:97:8d:e1:
         0e:4d:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----