Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b48925e8-8b89-4d77-89b0-47feda165b1e.roa
File:                     b48925e8-8b89-4d77-89b0-47feda165b1e.roa (raw, json)
Hash identifier:          f4LPC4E5zHBFsvrUS1Rg8QgtofO3Oc3hYlvZfAJSA9c=
Subject key identifier:   F2:71:D3:48:FF:43:E5:56:2F:4A:0D:C3:24:3B:19:16:D4:EA:C9:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       635CC8E988C21054CDF630E26FFE7D34F60A8E5B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b48925e8-8b89-4d77-89b0-47feda165b1e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:40c0::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5c:c8:e9:88:c2:10:54:cd:f6:30:e2:6f:fe:7d:34:f6:0a:8e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=904c12e1adae0a1ea44657d65e58b7681f71dce1be5f359c22531b2974fd936b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:18:55:13:e7:9c:85:88:ae:e1:58:ae:6c:
                    43:b5:c0:f2:8a:ea:1a:11:a0:f1:f3:f2:53:61:6c:
                    82:49:25:73:90:fc:72:ba:c4:0e:59:44:c3:af:41:
                    f4:ed:7c:0c:1c:9d:00:60:3f:a4:23:2c:9b:9f:e3:
                    76:ac:87:24:b6:81:f2:88:60:2c:b4:2a:da:2e:59:
                    71:28:52:4b:ea:d7:7d:45:57:9e:6b:60:3e:e1:c2:
                    cc:3a:31:cf:0a:84:40:e1:f4:3b:70:07:d4:a7:0d:
                    f1:97:71:42:79:de:5e:eb:92:b0:d2:93:84:21:02:
                    a6:a5:69:17:9c:09:1d:20:02:24:21:15:2e:0d:98:
                    27:26:81:b7:36:99:71:7d:c1:9b:2a:df:df:19:fa:
                    d9:57:04:c7:a6:ad:c8:d8:e0:46:09:1d:b5:52:ca:
                    5a:7a:30:69:d2:2d:8e:1f:c1:70:03:13:ac:6e:7c:
                    ea:ad:16:26:4a:b7:c6:7a:d1:1c:c1:a9:f2:1d:72:
                    61:e6:da:83:29:81:7d:f4:87:2c:12:94:1c:36:28:
                    0a:dc:03:80:c2:3c:4d:59:60:7c:ba:d3:34:77:bf:
                    59:32:5e:71:0d:c4:dc:79:2c:c0:62:a7:f9:20:8f:
                    a2:a2:c6:55:1d:93:13:cd:b6:eb:eb:52:0b:2c:dc:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:71:D3:48:FF:43:E5:56:2F:4A:0D:C3:24:3B:19:16:D4:EA:C9:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b48925e8-8b89-4d77-89b0-47feda165b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:40c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         1e:93:01:49:64:12:69:6a:70:b3:21:45:37:6d:39:e5:08:c3:
         56:a9:a6:df:36:01:bf:64:fc:eb:84:00:94:7f:5f:0c:af:fa:
         d3:c2:c7:cd:dc:bc:35:75:f1:0a:68:fc:0d:dc:c8:9f:3e:e6:
         ed:f3:7c:5a:00:1b:98:f3:7f:22:39:ee:1b:db:33:9f:99:66:
         16:65:f9:79:1d:0c:b5:2e:14:c3:fd:f4:8e:63:16:85:b6:1f:
         4e:fa:74:a4:43:34:ba:00:16:3e:cb:45:5e:a6:a6:7d:78:7c:
         63:fc:d7:5b:a2:1f:bb:bf:27:92:91:f6:cb:93:e2:2e:2c:e1:
         4e:80:d0:27:cf:8c:29:91:10:b7:56:3e:4b:05:60:0e:f6:7d:
         6a:1c:59:6b:1d:25:43:a5:1c:1c:e1:2a:e2:75:de:e2:e4:a9:
         5b:7f:15:7a:fc:af:57:41:fe:ca:9a:8f:dd:ef:c5:db:ec:8a:
         71:98:ed:77:34:f6:64:c6:4a:f9:8f:6a:33:70:aa:03:15:51:
         e2:29:8c:23:0b:e2:fc:6f:65:46:07:7f:a3:9c:2e:0a:1d:53:
         a6:6b:8a:52:65:6e:90:9d:51:a7:bb:43:07:7e:4c:f8:ca:06:
         36:50:b1:ae:58:74:91:62:26:8d:fe:59:8b:66:ed:02:5f:87:
         e3:26:0a:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----