Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab28d653-f53d-4f35-99d1-93ac6919495d.roa
File:                     ab28d653-f53d-4f35-99d1-93ac6919495d.roa (raw, json)
Hash identifier:          RqkiB9HNhB+cUqGIZnThSMn6j05gYGvvwDnFSaPDJRY=
Subject key identifier:   F2:55:5B:A5:E4:26:1D:F2:46:E5:6D:10:59:F6:5F:2A:88:07:96:21
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E64B1D6238547BCF7F3600E1E34978ABD48546E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab28d653-f53d-4f35-99d1-93ac6919495d.roa
Signing time:             Thu 26 Dec 2024 00:00:00 +0000
ROA not before:           Thu 26 Dec 2024 00:00:00 +0000
ROA not after:            Thu 30 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        74.173.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:64:b1:d6:23:85:47:bc:f7:f3:60:0e:1e:34:97:8a:bd:48:54:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 26 00:00:00 2024 GMT
            Not After : Jan 30 23:59:59 2025 GMT
        Subject: serialNumber=5599e056613f69798a339f7c105cf6789c24f64df8c2459579312fc950456f47, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:dd:71:73:0f:f0:c8:3a:0b:5b:d9:88:86:
                    e6:1a:fb:b0:6a:5e:77:95:a3:7e:c5:67:b8:8e:6d:
                    f3:7d:4b:ce:ca:8b:3b:2a:01:ad:8a:46:0d:6b:b4:
                    e9:39:e8:f2:e3:d7:7c:26:22:68:f0:bf:51:5d:02:
                    e0:d0:5e:cc:3d:b3:0e:f7:7b:6f:77:5f:db:a5:6c:
                    39:a4:cf:3a:1d:76:68:ef:0c:f7:4c:8b:b1:61:10:
                    ac:f5:61:2b:2e:b9:0c:fc:20:2a:f9:bf:6d:d5:d8:
                    40:00:35:96:70:ce:b5:81:7d:6a:af:8b:e7:41:5e:
                    f1:d0:6c:19:99:c9:71:37:a7:98:9e:b1:2d:ca:b3:
                    75:fb:4e:bb:8f:12:81:7f:4c:31:8d:ea:b0:54:fb:
                    f1:b1:f0:69:e8:13:01:a7:a7:55:14:67:12:1c:ae:
                    90:2c:dd:c3:99:4b:33:88:0e:eb:fc:0f:69:27:97:
                    5d:ec:da:91:6f:d5:11:5f:01:53:4e:56:a6:9d:d6:
                    6a:5b:08:61:fe:18:16:c4:f1:00:d5:0a:6d:43:a4:
                    14:73:79:f8:66:3f:7e:c2:a7:71:7a:60:55:5b:ff:
                    45:22:96:e5:dd:8d:89:93:d4:5a:6e:71:ef:92:44:
                    b1:3c:99:bd:52:0a:eb:10:3a:c7:b2:8d:f0:d7:cd:
                    bf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:55:5B:A5:E4:26:1D:F2:46:E5:6D:10:59:F6:5F:2A:88:07:96:21
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab28d653-f53d-4f35-99d1-93ac6919495d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.173.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b9:55:b5:5c:1a:c9:80:18:d1:7d:d8:3a:6b:73:8b:e5:b8:81:
         74:33:a7:c3:ce:d9:c4:5c:93:ec:e4:b6:4d:99:52:0d:7b:87:
         96:33:07:26:46:01:86:1e:34:ad:9d:68:1c:3e:bc:79:8f:bc:
         a8:2b:81:68:0b:b1:d5:0e:d3:37:d4:3d:33:3e:6f:45:03:75:
         75:77:7a:83:67:f6:1c:c2:c9:33:4a:13:31:cc:ab:73:3b:c3:
         04:f7:22:cc:b3:05:af:89:cb:0d:66:34:13:34:82:6d:48:1b:
         80:17:fe:b6:20:7e:40:b4:03:96:c0:b4:b9:02:08:33:53:a2:
         5e:3d:81:06:81:b7:d2:51:21:fe:d2:35:ff:b2:3f:b9:c6:af:
         32:ec:9e:53:e4:9f:40:48:1e:39:ec:a0:41:04:81:4c:9f:63:
         25:59:f5:ce:c4:48:bb:ab:a6:8a:cc:9f:57:39:e6:62:27:0f:
         08:ce:aa:de:b6:59:fc:af:d2:f8:54:16:c4:a7:07:3e:dd:bd:
         df:34:1b:5f:11:54:65:7d:6c:22:4a:c6:12:14:67:02:e5:25:
         23:56:7e:90:c5:e7:57:d4:ce:19:58:3f:16:4d:dd:d4:0c:f4:
         08:4d:71:3e:11:0c:24:d0:e6:30:52:a3:29:f9:9d:6b:68:4a:
         eb:f1:2f:8a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUHmSx1iOFR7z382AOHjSXir1IVG4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI2MDAwMDAwWhcNMjUwMTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NTk5ZTA1NjYxM2Y2OTc5OGEzMzlmN2MxMDVjZjY3ODlj
MjRmNjRkZjhjMjQ1OTU3OTMxMmZjOTUwNDU2ZjQ3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGy91xcw/wyDoLW9mIhuYa+7BqXneVo37FZ7iObfN9S87K
izsqAa2KRg1rtOk56PLj13wmImjwv1FdAuDQXsw9sw73e293X9ulbDmkzzoddmjv
DPdMi7FhEKz1YSsuuQz8ICr5v23V2EAANZZwzrWBfWqvi+dBXvHQbBmZyXE3p5ie
sS3Ks3X7TruPEoF/TDGN6rBU+/Gx8GnoEwGnp1UUZxIcrpAs3cOZSzOIDuv8D2kn
l13s2pFv1RFfAVNOVqad1mpbCGH+GBbE8QDVCm1DpBRzefhmP37Cp3F6YFVb/0Ui
luXdjYmT1Fpuce+SRLE8mb1SCusQOseyjfDXzb+rAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU8lVbpeQmHfJG5W0QWfZfKogHliEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiMjhkNjUzLWY1M2QtNGYzNS05OWQxLTkzYWM2OTE5NDk1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBKrTANBgkqhkiG9w0BAQsFAAOCAQEAuVW1XBrJgBjRfdg6a3OL5biBdDOn
w87ZxFyT7OS2TZlSDXuHljMHJkYBhh40rZ1oHD68eY+8qCuBaAux1Q7TN9Q9Mz5v
RQN1dXd6g2f2HMLJM0oTMcyrczvDBPcizLMFr4nLDWY0EzSCbUgbgBf+tiB+QLQD
lsC0uQIIM1OiXj2BBoG30lEh/tI1/7I/ucavMuyeU+SfQEgeOeygQQSBTJ9jJVn1
zsRIu6umisyfVznmYicPCM6q3rZZ/K/S+FQWxKcHPt293zQbXxFUZX1sIkrGEhRn
AuUlI1Z+kMXnV9TOGVg/Fk3d1Az0CE1xPhEMJNDmMFKjKfmda2hK6/Evig==
-----END CERTIFICATE-----