Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4216e17-32cc-41af-8f8b-6f8f57f1f924.roa
File:                     d4216e17-32cc-41af-8f8b-6f8f57f1f924.roa (raw, json)
Hash identifier:          KNH+vIISMOIDRUsc/wQd/UBu2VuORJDqtthEhGfx3ow=
Subject key identifier:   EE:C8:3D:36:D9:AD:AB:B1:B8:FB:0F:08:47:15:F3:46:26:19:E7:85
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11465E0856DAECA8216F97A4C8D367C642A6C6CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4216e17-32cc-41af-8f8b-6f8f57f1f924.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f32:a400::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:46:5e:08:56:da:ec:a8:21:6f:97:a4:c8:d3:67:c6:42:a6:c6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=38391fc698b0d689217af812c1cb2764bfe9f8311fb28863ee1eed4aee2d84a4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:86:65:17:fa:ac:41:36:69:f4:88:4c:75:
                    cc:ed:5b:2f:b4:11:3c:22:a6:75:0e:52:a2:bc:4b:
                    6d:9d:0d:01:82:83:03:1a:2b:35:02:26:42:48:a7:
                    96:04:bb:ce:50:40:a2:de:e5:4b:6c:ce:df:12:5a:
                    13:0c:99:82:fe:09:d1:04:14:cf:0c:a7:b2:d0:40:
                    76:c9:d7:06:08:8f:17:e6:4f:5c:99:44:9c:ed:98:
                    0a:98:c4:64:4c:79:d2:05:42:ca:c3:6f:bd:60:30:
                    7e:e5:c2:79:96:b5:cb:57:df:44:38:cc:42:46:d6:
                    15:da:51:f1:1e:93:87:c7:57:20:65:53:0c:65:3c:
                    12:46:90:98:ca:e3:4d:35:62:c6:d9:4c:3d:d5:9b:
                    18:68:15:30:eb:f5:19:87:70:f5:c2:85:c6:c0:8a:
                    99:d1:6d:5a:12:73:86:c4:af:a2:af:45:c6:94:e7:
                    94:5f:74:c0:01:4d:31:b1:1a:06:be:2f:03:95:69:
                    9d:a0:2e:1a:f6:09:a2:cf:7d:95:12:b7:2d:0d:57:
                    d5:f3:32:7a:b4:16:8b:b9:0b:db:c0:03:f5:4f:c5:
                    eb:35:55:1d:ae:b9:9a:8e:1c:e8:a5:98:29:63:21:
                    98:6f:52:52:ef:04:a3:b6:bb:45:0b:87:74:fa:fb:
                    4a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C8:3D:36:D9:AD:AB:B1:B8:FB:0F:08:47:15:F3:46:26:19:E7:85
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4216e17-32cc-41af-8f8b-6f8f57f1f924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f32:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:4d:d5:bf:1f:0a:ef:9b:e9:c0:a3:3e:a8:2d:a5:06:a3:b9:
         37:e4:f0:65:6f:31:aa:f5:15:7a:bc:56:aa:b5:3b:9c:b8:25:
         e5:72:fd:41:88:b2:9e:f5:13:f3:e9:f9:de:f2:11:82:bc:5d:
         1e:f1:66:39:1e:0e:79:aa:66:05:ec:83:4e:5f:3b:15:a6:4a:
         81:81:6b:0e:82:1b:8f:21:8f:f1:2b:66:3c:66:8c:b5:93:89:
         d6:98:fb:cc:b7:70:7e:ca:50:2a:2d:09:b5:77:43:2d:25:b4:
         bf:f3:85:ac:f3:85:9a:86:6b:d6:ed:e2:a3:94:26:bc:ef:ae:
         13:00:17:45:7f:59:81:5f:04:30:6f:44:f7:d8:1b:c3:50:9f:
         21:86:85:72:bb:2a:e2:53:dd:7c:b6:02:e0:3e:4b:22:dd:04:
         c1:48:7f:72:ea:33:2b:3c:7b:75:8f:6e:cc:e5:29:86:4b:cf:
         c4:d9:43:19:fa:f0:f5:0b:e5:51:2a:1e:7c:a6:55:a1:ac:e1:
         55:22:3d:db:65:24:c8:e0:ca:b7:01:c2:e1:ac:54:d7:52:cd:
         ea:98:6c:e8:2f:7d:8a:86:78:70:36:10:5e:29:77:f9:9f:e2:
         6a:63:13:5b:1b:ef:88:75:61:0d:e3:a8:c1:7e:e1:4e:96:2d:
         60:09:a8:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----