Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2b595fd-7c71-44e0-bb38-0e1d8eb65b14.roa
File:                     d2b595fd-7c71-44e0-bb38-0e1d8eb65b14.roa (raw, json)
Hash identifier:          m5Nxq5Hb2K44fk5RsVMgF7vROLvUp5dvBQ2apUQ9yG0=
Subject key identifier:   C3:7C:3F:9F:BA:E9:E4:4E:B1:0D:ED:CB:B6:26:6C:F3:81:59:55:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53D6ABD70D4BB783B06CEA3BDA4AD33987A7018F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2b595fd-7c71-44e0-bb38-0e1d8eb65b14.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.32.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d6:ab:d7:0d:4b:b7:83:b0:6c:ea:3b:da:4a:d3:39:87:a7:01:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=1773740506f3c216dd330fadc3d97e647a8f1df17bc03de938521c90d036101f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:48:ea:d6:df:26:87:3e:a6:ad:db:e0:53:
                    50:e7:a5:a8:af:f8:ad:b8:84:74:ac:8f:da:9f:0b:
                    3e:d4:f4:8e:73:12:ad:36:de:e6:ab:a4:7d:b5:68:
                    ca:a1:0b:f1:1f:c6:40:ba:36:8f:a9:f8:5e:a4:f6:
                    64:fa:11:cb:49:6a:2f:25:08:e7:13:bc:22:e4:70:
                    bd:17:3c:e6:83:28:93:bc:0a:52:31:e4:4d:c5:27:
                    04:9f:4d:7f:5a:7e:0d:21:c6:50:e6:72:4e:d7:91:
                    12:a3:58:7f:5e:6c:13:7e:47:7b:f8:80:d3:05:f4:
                    ca:60:60:d9:fc:84:b0:6d:c9:e5:06:90:f3:c6:04:
                    57:a9:85:75:59:ee:ec:bb:a2:eb:d9:34:84:9c:3d:
                    c4:7e:e0:0a:42:85:57:75:65:0f:5e:39:a7:9d:80:
                    21:dd:fb:0f:0b:6f:28:b5:05:f8:8a:e3:43:4d:7f:
                    6d:03:4a:d5:72:d0:b6:56:9f:34:78:7f:34:36:50:
                    c7:23:79:1b:71:ae:79:f9:24:88:7d:07:12:7a:fc:
                    c2:ae:2e:99:67:a0:e6:14:69:19:a9:82:6c:eb:a4:
                    eb:df:94:29:4a:4d:b9:3c:11:e3:a2:f3:a3:79:24:
                    2a:a1:c7:ad:71:29:08:2f:ec:71:90:04:dc:6d:f9:
                    cf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:3F:9F:BA:E9:E4:4E:B1:0D:ED:CB:B6:26:6C:F3:81:59:55:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2b595fd-7c71-44e0-bb38-0e1d8eb65b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:94:38:d4:00:f4:f2:99:8b:a6:6b:a1:21:3d:d5:ab:b5:4f:
         ee:40:63:48:e9:83:31:59:aa:a8:bd:8a:09:7b:02:33:13:65:
         cf:33:fa:98:5e:6c:b3:95:0f:f3:f3:33:aa:6e:99:b6:53:b6:
         60:cf:21:85:28:73:23:b8:75:08:c9:bb:3a:b3:7f:0c:26:50:
         08:46:26:25:c5:5e:76:3c:3c:a3:15:ed:ab:e8:c5:69:5b:21:
         b7:6a:90:d6:9e:49:0e:7f:ee:a3:d5:6d:3b:2b:91:d3:83:94:
         2b:3b:c5:49:e1:95:44:80:3c:18:1d:45:9d:a5:2e:96:b7:52:
         7b:42:e4:80:7f:cb:70:f1:ab:2c:a6:1f:a6:4b:da:08:89:91:
         c5:d4:97:ac:66:ba:86:e0:b5:7e:cd:94:3a:45:c2:eb:f8:05:
         38:3c:cd:80:2f:c8:00:73:2b:97:7c:64:a6:e9:50:23:9d:b7:
         38:cd:5e:d2:6b:fe:10:71:c6:aa:4a:aa:8d:46:ce:92:94:61:
         7a:66:39:b1:2d:cb:3c:37:ea:76:19:af:d5:2b:ca:a1:19:8d:
         ac:64:9f:5c:51:42:27:b5:0e:cf:bd:74:ae:e8:86:61:84:58:
         d7:03:b8:6e:ba:37:68:c8:b5:76:fb:7c:a7:80:29:94:dd:fb:
         1f:fc:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----