Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbbd6a42-f522-43f7-bdf5-af5971a665dd.roa
File:                     cbbd6a42-f522-43f7-bdf5-af5971a665dd.roa (raw, json)
Hash identifier:          kXt8u363a9p9rRQGqsOoKgMzByUbU5z9DMZydIDFSJY=
Subject key identifier:   2F:12:2D:CC:46:60:44:1B:5D:3F:B0:1F:0B:9A:FF:03:B9:50:D0:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D8E6D1E0B8CC91BFF61884951F6567FFEB66632
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbbd6a42-f522-43f7-bdf5-af5971a665dd.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.100.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8e:6d:1e:0b:8c:c9:1b:ff:61:88:49:51:f6:56:7f:fe:b6:66:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=90398e3c216ba2c90101db082e2abe98df4bd12582929315d19f7a4f50b990c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:86:ba:75:bd:66:7c:87:ab:b9:61:3e:a2:
                    7c:35:8e:26:d6:76:26:aa:9d:1a:f6:81:d4:6c:69:
                    bb:c7:b9:9a:3f:7e:13:32:a8:da:85:0d:28:72:50:
                    8c:97:45:18:fb:fd:ed:01:05:52:fb:c7:ce:44:f7:
                    39:5d:b2:ff:90:96:82:79:16:c7:0f:86:3d:b2:5e:
                    28:05:15:9d:9c:61:2c:ee:c3:f6:7c:4b:f5:91:dd:
                    bb:60:37:66:cc:5b:de:6b:9a:96:4a:5c:09:84:4a:
                    e6:cd:57:11:1d:6d:f6:e6:7c:26:2d:7d:87:e0:59:
                    be:81:e2:b6:49:7f:4c:16:c5:c7:33:09:20:b6:9c:
                    ae:6b:c0:d5:10:1a:1c:97:e8:c5:cc:89:b7:df:3a:
                    1a:6f:69:d6:12:a6:52:ab:a4:d5:e5:81:9e:9a:08:
                    8d:79:65:87:16:c7:b8:02:94:49:b0:bc:bd:e6:cf:
                    d6:08:74:1b:dc:f2:b3:79:a8:30:ac:10:4a:2f:f0:
                    ed:1a:7e:84:64:cb:ab:00:ec:15:90:1d:cb:c1:40:
                    0c:b3:34:ba:c7:02:f6:9a:57:30:c9:99:9b:49:df:
                    3e:dd:ff:96:7a:12:0a:72:da:45:b9:dc:87:64:13:
                    c8:b2:16:f0:d1:52:6b:56:f3:40:54:10:5f:e9:32:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:12:2D:CC:46:60:44:1B:5D:3F:B0:1F:0B:9A:FF:03:B9:50:D0:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbbd6a42-f522-43f7-bdf5-af5971a665dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.100.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:bb:d7:78:04:29:68:62:34:5e:a8:76:8e:3f:7f:2a:5b:69:
         10:cd:3c:f0:b6:66:94:7a:f5:d6:54:a6:1a:0e:fe:ab:62:cd:
         8b:e2:42:65:75:dc:0c:5d:c6:c7:76:03:15:76:c2:e6:44:88:
         24:74:c6:d2:84:5a:56:a8:75:e3:11:56:8c:e8:36:56:0c:d4:
         11:67:dd:27:54:43:2f:0c:ac:40:ad:ad:85:72:b1:4c:44:66:
         6d:1e:35:aa:e9:68:c7:10:f4:3c:9f:05:76:08:c2:51:d3:fc:
         86:c2:50:2e:c0:da:7c:9c:07:ca:c7:ce:d9:d7:a1:ec:90:32:
         95:a3:55:35:50:42:32:4a:d5:3b:6f:8a:0a:36:32:85:a2:3a:
         ba:c7:39:a2:65:44:90:16:62:73:0d:4d:58:e8:58:bc:85:e0:
         62:1a:cd:76:24:9d:6f:1d:ff:11:e4:15:4a:2a:d7:10:96:27:
         cb:66:b9:30:91:97:9d:66:2a:07:df:c5:0b:4d:6a:4f:9f:04:
         f6:03:6b:c8:b4:87:ad:f5:c2:60:04:58:61:ba:82:ef:bf:d9:
         b4:6a:e1:d4:30:af:1f:d0:f5:e8:d6:80:98:07:bf:5f:c9:86:
         3c:de:b1:68:f8:a9:a9:46:c0:4c:da:cb:6f:66:0d:6e:17:dd:
         0e:4f:30:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----