Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7965781-c3c5-436e-8232-7211e41cb622.roa
File:                     d7965781-c3c5-436e-8232-7211e41cb622.roa (raw, json)
Hash identifier:          rVEMzGdAn/qp9J6hvt8NUnl6405NcP6vV/JBhL+8kEA=
Subject key identifier:   DE:BE:21:AC:6A:3E:8E:AF:26:C0:33:84:56:96:A9:88:5B:46:69:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       216A0DA6DF3736C1F4D53E556A55ACE9A4B74075
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7965781-c3c5-436e-8232-7211e41cb622.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        16.102.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6a:0d:a6:df:37:36:c1:f4:d5:3e:55:6a:55:ac:e9:a4:b7:40:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=8ad393c0148c2fe28ff5f2addc69242f6ce5ea4acb27285e67bfacf545ae16e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:d3:a1:22:57:0b:e7:63:ea:c3:5a:e6:cb:
                    2a:78:c3:6e:9e:40:13:c1:1d:4e:29:46:05:b2:24:
                    56:3e:3e:7b:ad:08:2c:db:44:f6:bd:df:30:9e:e0:
                    cd:71:52:91:6b:69:d7:be:53:fa:dd:82:2e:ba:ac:
                    e1:65:a5:4b:7f:11:0c:dd:e5:b8:19:ff:0a:a7:43:
                    d0:89:92:5b:c9:28:c7:70:70:97:52:91:f6:49:2b:
                    9f:8e:50:7b:38:03:40:de:11:24:fa:8a:fa:be:e6:
                    4d:09:86:8d:35:f6:b5:c6:9b:e0:f0:1e:8b:95:5a:
                    45:89:9c:8e:f3:78:47:3e:ff:56:aa:2d:a8:51:39:
                    c3:20:82:bc:4f:cd:f1:a2:e8:b3:a6:e9:73:49:98:
                    ca:2b:ed:b1:a7:c9:92:09:93:b2:4e:f8:d0:ce:ec:
                    39:d6:92:7b:fc:f2:80:3a:25:4c:ec:5b:3b:a5:fe:
                    46:57:36:dc:b3:63:be:c2:d5:d9:c2:cf:6f:48:ee:
                    e9:09:d6:38:eb:0d:da:c1:be:0c:09:3a:08:59:6c:
                    52:01:0a:17:06:43:35:32:75:70:c3:68:ae:58:7b:
                    e2:02:6d:ec:c6:6f:84:2d:de:dc:01:bd:a7:4e:f4:
                    12:78:5f:11:64:08:d2:3e:8a:f6:f1:c6:86:e4:8d:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BE:21:AC:6A:3E:8E:AF:26:C0:33:84:56:96:A9:88:5B:46:69:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7965781-c3c5-436e-8232-7211e41cb622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d7:c0:83:ef:e6:32:38:fa:35:e9:58:0e:b5:e5:8b:29:a9:ab:
         41:8c:34:32:f1:6a:34:af:44:01:c1:f2:bc:03:41:cc:c7:e7:
         b4:c6:44:5c:05:f8:24:39:26:83:82:20:8e:88:e2:5b:33:59:
         66:f9:93:e4:fa:46:02:f5:d4:3a:3f:f0:45:0e:3e:d6:95:74:
         82:96:67:b6:e6:6c:1a:6b:a0:4a:85:02:a4:82:44:6e:f4:18:
         57:2a:bf:17:13:8d:b3:ee:c1:dd:32:53:a6:7b:35:d5:d6:6b:
         cd:0c:67:53:e9:7d:e6:1a:50:e7:61:42:d0:4a:24:88:b5:94:
         70:42:b9:cb:ab:b2:aa:33:f8:85:aa:b6:f0:6f:2e:58:42:ad:
         78:26:6b:e3:7a:f7:aa:a1:50:55:41:73:38:68:d4:f7:f8:11:
         19:80:5b:9c:cb:4d:7c:91:fe:15:1b:86:5a:0f:5d:b1:bd:f9:
         bb:cb:45:f1:58:36:35:8d:1c:01:1b:72:03:ab:c1:c3:ce:82:
         8f:7e:ec:db:f7:a1:f5:8f:f6:fd:3f:5b:db:c8:54:5a:ae:6f:
         b0:bb:c3:6c:08:f0:21:13:7e:60:f6:8c:87:f9:26:1d:7b:5e:
         59:f9:87:e8:86:87:da:f1:3a:5e:2c:41:d7:19:76:5c:e1:ac:
         d5:dd:b5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----