Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbd0dc89-d4ce-4aa0-b416-3a0833ee1c8c.roa
File:                     bbd0dc89-d4ce-4aa0-b416-3a0833ee1c8c.roa (raw, json)
Hash identifier:          W8OlZ6cxOhJbaqawlafzmjDfsGDtT5QpDJKRFx7Gfq4=
Subject key identifier:   4D:C3:DA:E3:B5:7A:18:7C:54:F3:B3:2B:A1:7A:F8:F4:AD:C8:EA:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C461BF3661164E86677CC7773E247B980280354
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbd0dc89-d4ce-4aa0-b416-3a0833ee1c8c.roa
Signing time:             Wed 15 Jan 2025 00:00:00 +0000
ROA not before:           Wed 15 Jan 2025 00:00:00 +0000
ROA not after:            Wed 19 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        16.58.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:46:1b:f3:66:11:64:e8:66:77:cc:77:73:e2:47:b9:80:28:03:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 15 00:00:00 2025 GMT
            Not After : Feb 19 23:59:59 2025 GMT
        Subject: serialNumber=dced0b3c6f02e053be75333921c75f1bedb1ade6fb8d75bf090ac83c4c7791f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:48:ab:8c:6d:89:13:00:4e:72:89:bf:b6:
                    ee:6c:17:d8:7b:89:99:38:7e:08:b3:8b:72:34:44:
                    07:21:a6:df:96:31:1d:8a:9d:f8:83:d1:d7:4a:44:
                    25:94:cf:ef:75:2b:41:41:25:18:34:df:bd:b3:69:
                    74:4d:40:ab:ff:66:c6:69:4c:37:47:01:cc:d8:71:
                    19:eb:a1:86:9e:73:ca:9b:00:66:bc:07:79:d7:12:
                    d2:f5:b4:ae:69:17:b2:92:ed:8b:a2:8f:15:35:09:
                    c5:f7:20:0f:d2:72:b6:7a:f3:12:3b:84:3e:c6:15:
                    8e:fe:bf:64:f0:e2:5a:dd:7c:dd:1a:e5:b0:6d:58:
                    a2:d8:29:ca:fa:ce:65:72:4d:14:bc:39:40:d7:35:
                    80:34:0b:cc:1b:ea:25:73:8a:3c:3a:97:d5:fa:45:
                    18:f7:f6:5e:b8:45:04:41:b1:c4:7f:7d:cf:0c:16:
                    ac:ee:2a:f8:56:73:bd:ac:8b:1c:d4:8e:61:85:67:
                    94:9d:13:45:38:33:c1:5e:c6:79:27:af:5f:42:4f:
                    2e:a0:59:26:d9:67:78:e9:4a:40:3f:2f:da:29:f0:
                    98:d6:64:e5:e9:4e:98:0f:9c:2e:0c:bc:22:a7:36:
                    a1:9e:27:5b:71:62:f2:c6:92:b4:d5:4a:52:1f:4c:
                    20:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C3:DA:E3:B5:7A:18:7C:54:F3:B3:2B:A1:7A:F8:F4:AD:C8:EA:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbd0dc89-d4ce-4aa0-b416-3a0833ee1c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.58.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:c9:33:a1:a7:9d:c5:84:08:5b:2f:c0:14:35:dc:d6:c6:96:
         8a:5f:83:48:d5:5f:bd:34:12:97:31:05:fb:d7:44:3d:95:39:
         8c:07:92:e3:41:47:4d:b0:f4:09:99:10:43:fa:8b:59:11:94:
         ed:a4:a3:fd:73:06:4d:d3:ad:ce:7f:7a:a3:e4:bb:ac:fb:4b:
         6a:7f:f8:6e:dc:29:c1:b0:d9:f1:8b:c4:c5:59:60:a6:97:f0:
         57:9e:e0:0a:3d:86:d6:d1:b1:08:bb:50:2a:36:c0:ad:91:1c:
         23:79:43:77:2c:7b:ad:be:d4:11:b0:de:c5:97:be:78:4b:71:
         9f:4e:9d:7e:a1:68:37:2e:b6:c5:46:b8:50:3f:c3:c4:dd:f7:
         1d:95:ab:f2:71:fa:9e:fb:91:26:0f:86:7c:e8:32:c1:33:47:
         18:e2:8a:3c:b8:36:a0:45:16:f7:15:a2:fb:a0:17:4e:32:5d:
         fb:56:97:3b:37:d9:3c:71:8e:ab:ce:eb:29:cf:b3:61:11:d5:
         6c:66:59:e7:50:6f:55:ca:9c:a1:93:a5:a1:7a:9b:df:d8:96:
         83:0a:8a:28:93:25:0f:39:0f:bf:6f:b2:fe:94:d5:50:aa:8c:
         13:bb:66:91:86:62:35:7d:6f:be:62:4a:8f:08:2e:47:f7:c9:
         79:47:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----