Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3af5292-ca62-4888-8845-ec05e4fe96d3.roa
File:                     e3af5292-ca62-4888-8845-ec05e4fe96d3.roa (raw, json)
Hash identifier:          kTWoL3MRpw8GxqVVTJQMXtJVExdDDhIR7egVFD8h1iM=
Subject key identifier:   77:E2:5F:C8:55:4B:19:15:0E:32:C7:1B:D0:AC:72:D4:0B:2E:E4:05
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       71676CC3730AA3A95A0ED23C912664E09BE293F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3af5292-ca62-4888-8845-ec05e4fe96d3.roa
Signing time:             Fri 20 Dec 2024 00:00:00 +0000
ROA not before:           Fri 20 Dec 2024 00:00:00 +0000
ROA not after:            Fri 24 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f2f:4000::/36 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:67:6c:c3:73:0a:a3:a9:5a:0e:d2:3c:91:26:64:e0:9b:e2:93:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 20 00:00:00 2024 GMT
            Not After : Jan 24 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:de:d1:f6:6b:f9:70:c0:32:34:90:af:1c:
                    d4:ac:6e:0b:e1:a9:fb:16:23:2e:ae:4a:28:c7:45:
                    ac:47:00:20:e6:84:51:a7:b6:06:b8:e4:6f:e7:76:
                    84:fc:a9:db:ee:9e:90:90:d4:6f:b3:dd:1a:a0:01:
                    31:e2:8d:4a:9c:87:31:84:89:0a:2f:9e:29:e9:80:
                    d8:35:d0:c0:a1:16:8c:66:4d:a2:e0:df:45:ae:61:
                    ae:25:eb:87:47:19:37:49:5c:5f:bd:bc:34:99:d8:
                    31:b2:01:e5:c9:d4:e0:91:fc:ba:d0:33:37:1c:1c:
                    a7:44:4c:12:82:88:47:19:3f:a2:44:6d:c1:62:0a:
                    f8:b1:dd:ab:b0:ca:8e:96:3f:3c:da:0d:6d:5b:17:
                    e8:6a:f1:71:92:54:24:7c:26:24:a4:e0:69:5b:a7:
                    d6:ad:a8:64:16:9d:db:7f:93:60:19:26:7b:63:78:
                    7c:03:92:84:61:ee:d7:5c:5f:a6:49:e7:b2:df:19:
                    7e:5f:7b:24:93:d7:05:41:fe:dc:4f:5c:f2:12:cd:
                    8a:31:60:3a:cf:99:03:c0:97:83:c2:b2:88:ec:c3:
                    c7:d0:c3:37:a6:e8:30:c2:9c:80:e0:1c:29:8c:1a:
                    0b:ef:ac:1d:28:59:ad:ec:42:54:1b:95:5e:e2:d6:
                    71:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E2:5F:C8:55:4B:19:15:0E:32:C7:1B:D0:AC:72:D4:0B:2E:E4:05
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3af5292-ca62-4888-8845-ec05e4fe96d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2f:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:9c:da:9a:d9:fb:03:a8:a6:85:05:f9:15:fd:26:be:96:8d:
         90:72:e0:c6:6e:7b:b3:fe:3f:77:6a:94:7e:1a:b6:cb:50:23:
         a9:87:66:4d:cd:64:af:a6:a1:00:ca:bc:ad:8f:e4:6e:87:4f:
         60:14:14:c2:1a:63:1f:1b:05:8e:f7:2c:20:b8:f1:45:54:5a:
         7f:87:af:23:97:45:6e:ba:a7:2d:d9:22:9f:4f:d9:ff:93:6c:
         21:90:82:a7:f0:88:84:a4:cc:fc:d3:88:3b:2a:89:fa:36:69:
         26:5c:07:ea:7c:4a:ef:2b:94:fb:81:13:0d:ad:5a:85:b1:b6:
         93:bf:db:8f:38:93:5e:8f:58:c3:04:66:52:7a:38:85:f9:bd:
         09:da:51:d5:67:66:d5:98:c9:b5:9c:e5:de:a5:29:fb:cb:6a:
         9b:d9:2b:35:83:5e:de:fc:9e:40:34:33:0f:dd:f4:e0:dd:91:
         f2:50:3c:cc:22:c0:fd:e8:b4:73:35:9f:14:b5:af:71:0d:7d:
         f7:05:ed:82:b2:90:cd:bb:dd:a5:3f:bf:8e:60:65:f7:ea:b3:
         3f:dc:38:e6:01:e5:b7:9b:a9:19:6f:95:14:de:b2:b2:c2:d7:
         f2:20:c5:52:57:ab:7c:be:c1:8f:03:8a:4a:8f:91:89:6b:96:
         b7:5b:2a:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----