Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e41ea47a-642f-4108-affa-08d36c603fb1.roa
File:                     e41ea47a-642f-4108-affa-08d36c603fb1.roa (raw, json)
Hash identifier:          2CSR9V6wDpU+cFpZlsAum12f7BZB71sz8dV11pO+Uic=
Subject key identifier:   79:EC:2E:F0:62:72:7A:2F:DE:21:80:3D:9E:1B:55:4D:E3:AE:EE:15
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44C554715575E41D94B23EFCA99CE00505693EC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e41ea47a-642f-4108-affa-08d36c603fb1.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:e0c0::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c5:54:71:55:75:e4:1d:94:b2:3e:fc:a9:9c:e0:05:05:69:3e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=6ad3c31210aecada87dc3e0bdc71621ea53247a692ef61b727f3012a5fceb42c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:85:66:08:6f:9c:aa:ac:41:67:75:86:3e:
                    25:27:b5:98:6e:1a:cd:3b:94:11:29:ce:9f:5f:af:
                    2d:85:4d:ff:26:63:8a:df:83:db:65:6b:fc:57:4d:
                    18:5c:40:35:59:27:18:c9:3d:a4:26:06:67:21:33:
                    f7:00:fe:24:c2:d3:3f:45:09:d1:79:d2:1a:79:c8:
                    3b:17:0e:a6:60:52:57:e5:2a:e5:15:32:9e:97:f4:
                    a3:8d:83:23:a1:f8:e1:4a:3f:37:d0:bf:d1:44:e7:
                    db:a1:79:ff:54:d5:92:02:f5:c3:25:e7:63:b3:04:
                    60:f8:65:f4:d6:02:40:b9:5f:ec:43:64:c2:d1:24:
                    b1:65:c1:e4:d3:19:12:f7:b3:7e:6c:2a:a6:5e:ba:
                    a2:02:a4:fa:7f:1d:c7:37:f1:07:d1:23:bc:0e:52:
                    96:23:bc:73:fe:d8:1c:ec:93:c1:48:72:80:e9:68:
                    10:fa:10:ed:39:f6:c1:13:db:b1:8e:60:08:13:97:
                    e4:76:9e:2e:ad:4b:1e:bf:e9:20:5b:97:0c:3a:67:
                    10:50:43:60:ad:48:bd:bc:28:a0:d7:48:b6:db:d6:
                    47:11:b6:11:34:44:f6:d7:de:73:56:7f:2c:e6:75:
                    14:c6:79:91:02:d3:6a:c4:65:9a:b0:28:54:6d:0e:
                    e1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EC:2E:F0:62:72:7A:2F:DE:21:80:3D:9E:1B:55:4D:E3:AE:EE:15
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e41ea47a-642f-4108-affa-08d36c603fb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:e0c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:7c:c5:d3:34:95:0a:a9:15:5b:87:d7:57:07:62:21:ef:
         29:c7:da:8b:54:dc:ab:a8:9b:b4:89:fb:89:2e:36:bc:43:da:
         db:18:c6:d0:7d:60:bf:c4:ce:81:6d:ff:de:03:b1:73:41:54:
         f4:c9:70:be:3f:bb:19:6a:19:a0:3d:ea:5a:aa:68:22:36:da:
         25:ab:cb:f1:f2:62:c7:63:82:9a:19:f3:44:f0:b7:b4:a2:8d:
         af:f5:42:b3:74:7c:2b:06:90:43:b4:f4:68:f1:6b:43:74:1a:
         16:63:7c:aa:2b:c9:5c:54:c5:bc:82:75:7b:3e:90:3a:b0:17:
         4f:aa:fa:c2:9c:d7:9c:f5:3e:be:b9:a4:bc:71:24:4c:87:be:
         03:3d:ed:25:08:2c:85:d4:61:fb:7c:ad:d6:a8:f9:22:05:c1:
         72:f9:3a:53:65:99:f6:f3:b5:5f:3e:b1:66:e1:83:6e:fb:80:
         13:2d:b2:8a:5e:70:5c:f5:8d:9c:69:7a:4d:0d:bf:04:3c:d2:
         c5:8b:1c:d1:e3:c5:a9:45:ba:ed:69:4d:06:19:8b:20:e9:32:
         9d:e2:f5:c0:c4:f5:51:b9:3c:0a:e9:d2:71:92:6a:ff:aa:23:
         96:69:e1:f0:26:43:ec:84:60:b1:f6:1e:4b:4f:71:96:6d:6c:
         40:ef:fa:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----