Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9bc3d14-e919-4430-9272-d74e5838a901.roa
File:                     b9bc3d14-e919-4430-9272-d74e5838a901.roa (raw, json)
Hash identifier:          tZt7G4jMCve8weJy4WJymooREz0nbwR0aWFLhuFVeEE=
Subject key identifier:   E2:F6:54:4F:B8:BA:5E:4C:AC:AE:37:10:DC:60:92:26:BB:EC:10:D4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42CC59DF38037179B57F28B9DB796EBF234D1BE2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9bc3d14-e919-4430-9272-d74e5838a901.roa
Signing time:             Wed 05 Feb 2025 00:00:00 +0000
ROA not before:           Wed 05 Feb 2025 00:00:00 +0000
ROA not after:            Wed 12 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f30:a400::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cc:59:df:38:03:71:79:b5:7f:28:b9:db:79:6e:bf:23:4d:1b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb  5 00:00:00 2025 GMT
            Not After : Mar 12 23:59:59 2025 GMT
        Subject: serialNumber=f221deee82b1d487746962b057a90432f6bb758a82add38abf5c7a60e2baa591, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:0c:bf:bc:7c:21:75:d5:45:30:34:cd:8d:
                    0c:67:70:17:b9:ae:cd:f6:32:9f:58:ab:9e:11:4f:
                    2d:65:23:d6:6a:da:62:c0:72:41:4e:8a:65:21:37:
                    e0:18:5a:c1:4d:fe:5f:a3:77:71:73:b2:b5:d0:5f:
                    e1:ea:4e:b5:c9:6b:33:37:5f:93:dc:8f:a3:4a:3a:
                    56:d1:3e:ca:36:46:a3:49:f2:7c:5c:32:d0:a0:59:
                    7e:73:24:3a:b0:04:03:6b:03:90:e1:a7:5c:af:f2:
                    02:ab:09:7b:28:db:f7:81:cf:75:41:5c:97:43:be:
                    5a:fc:7e:4e:c5:be:cf:ee:02:cf:17:e0:23:da:f6:
                    91:5b:29:85:7a:ef:47:93:55:e6:10:15:6f:f8:f8:
                    c7:93:fd:0f:ab:c1:ce:6d:02:00:58:37:94:10:c2:
                    5d:dc:a9:d0:16:95:df:4e:fa:5e:b2:9f:46:d2:43:
                    58:a2:2a:57:96:b1:e2:29:43:aa:4c:89:0c:3d:5d:
                    85:b9:bc:8e:5e:5e:2c:1e:6c:97:8c:78:3d:3b:ac:
                    46:b2:b2:73:9a:c6:43:93:de:39:93:d1:4d:3f:0b:
                    4b:6f:50:70:18:6a:00:5e:fd:11:d3:a1:0a:8c:08:
                    17:d0:bd:85:92:da:a2:8a:41:c5:f4:2b:75:51:b9:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F6:54:4F:B8:BA:5E:4C:AC:AE:37:10:DC:60:92:26:BB:EC:10:D4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9bc3d14-e919-4430-9272-d74e5838a901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f30:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:6b:b5:5f:9e:69:80:c1:79:5e:d8:66:3f:db:de:65:ba:81:
         7f:f2:3d:6b:9d:5c:92:60:3c:d9:e8:5d:ad:10:1a:ab:e0:e7:
         9e:a1:76:fb:0e:e1:5c:33:f4:00:a5:a3:15:21:25:69:62:2f:
         ae:34:74:c2:ba:92:b9:bd:a8:81:a6:66:0d:b0:60:08:15:8a:
         61:7e:9e:24:11:5e:72:b0:8b:46:a6:cf:4e:56:cc:c6:c7:b5:
         26:d5:7d:71:28:30:cc:8e:ce:12:eb:e0:11:8f:db:eb:fd:ef:
         86:54:64:30:c3:e6:be:e7:b7:57:81:b8:ab:f3:71:a4:c0:74:
         49:f7:06:68:d7:da:3d:10:10:fc:ca:53:98:e0:40:ec:19:0b:
         5f:e3:0e:f9:8d:91:95:de:b6:db:11:00:51:38:cb:e6:65:1e:
         c4:2b:86:c1:e4:b1:ad:89:2c:ce:7b:60:a0:5b:e9:8c:97:41:
         b5:28:e4:e0:a1:47:87:57:91:af:84:db:bf:13:c8:fc:d3:50:
         7e:c7:e9:45:cc:2e:d0:16:0a:53:81:72:7f:4c:4d:c5:48:57:
         a0:fb:ef:fb:ae:00:15:8f:f0:56:ac:a4:d0:10:d4:78:52:b4:
         85:70:7a:d4:0f:e6:97:a1:81:e2:e0:15:82:58:64:80:d2:db:
         b6:34:41:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----