Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6953712-d74b-434b-bae6-3174554c77c7.roa
File:                     e6953712-d74b-434b-bae6-3174554c77c7.roa (raw, json)
Hash identifier:          ZFG2ZJ6WgMV9qSv5nMKwYTx1eR/i+va8GXb4++jTvGI=
Subject key identifier:   6E:F8:42:C2:BB:44:25:EC:28:36:77:7F:9C:44:30:18:CF:8B:7F:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       021D9353A53CF4F971CBADA7E6C446FECC485421
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6953712-d74b-434b-bae6-3174554c77c7.roa
Signing time:             Tue 24 Dec 2024 00:00:00 +0000
ROA not before:           Tue 24 Dec 2024 00:00:00 +0000
ROA not after:            Tue 28 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        99.10.0.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1d:93:53:a5:3c:f4:f9:71:cb:ad:a7:e6:c4:46:fe:cc:48:54:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 24 00:00:00 2024 GMT
            Not After : Jan 28 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a7:4f:37:ac:f2:d3:19:72:4b:ed:48:d3:f5:
                    54:61:e0:32:89:80:ce:9b:4c:83:de:7f:b4:90:09:
                    b9:46:4e:6b:ad:f6:cc:59:8e:e0:60:9d:46:c0:dd:
                    c0:54:8d:54:46:e2:58:c5:b7:0f:fa:e9:e3:ca:55:
                    97:74:f4:c2:ca:b8:aa:56:41:53:93:77:52:b9:9b:
                    75:ab:19:07:87:ae:8b:40:f3:27:e7:16:ed:68:82:
                    21:7b:ed:50:b7:1e:94:ad:d8:73:22:c1:37:74:fe:
                    03:8f:c1:6f:32:fe:d0:89:f7:a1:b4:73:e6:fa:83:
                    de:5d:a2:e7:17:6a:9d:67:8a:56:da:61:3f:21:6c:
                    1a:e6:70:4d:65:b8:4d:62:e1:00:55:0f:57:b0:a6:
                    e4:0b:2b:ec:b3:e4:97:f7:c0:6d:47:06:80:b6:be:
                    ec:63:bf:71:3c:eb:85:62:da:a1:46:76:7c:60:95:
                    8f:77:e4:ae:3b:e0:f5:41:81:84:10:e3:8a:c9:9b:
                    fd:dd:4c:69:27:ce:57:fa:43:65:26:df:09:5b:67:
                    4c:8b:5f:3a:1d:bc:2a:eb:49:f6:48:f1:3e:c3:61:
                    9a:08:e7:94:90:9c:2a:43:a5:20:5a:0b:2d:71:84:
                    40:e0:a1:f4:75:41:33:2d:91:7b:af:80:03:f6:83:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F8:42:C2:BB:44:25:EC:28:36:77:7F:9C:44:30:18:CF:8B:7F:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6953712-d74b-434b-bae6-3174554c77c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.10.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         83:8a:58:dc:79:f8:c5:3f:53:52:c7:fb:7f:39:a9:4f:ae:36:
         c9:86:66:ed:a3:f6:12:5a:7c:72:84:05:51:dc:8b:23:10:3a:
         1f:b0:83:f0:ec:bb:93:eb:32:78:32:c1:87:d2:86:78:a3:fd:
         6a:27:88:8a:63:c1:74:81:15:af:bb:fa:6f:ce:1b:d6:c9:b6:
         e9:7f:7f:89:49:6d:02:e2:87:2e:6c:65:d2:a3:6c:9a:b3:b0:
         ef:3d:f5:87:b7:2e:b0:a3:08:0c:ec:24:0a:f3:1c:0c:25:ab:
         e1:ce:31:c6:f2:2c:17:02:cc:c2:b9:39:36:53:e7:86:88:5c:
         7b:8f:eb:8c:71:26:33:f2:57:77:d2:17:c3:a1:c2:cd:c9:08:
         c5:1b:ad:a9:b0:b8:dc:8b:42:6d:c8:d6:b5:3a:8e:e9:bc:31:
         d7:a8:a3:6f:63:41:a2:91:96:12:45:cc:cc:8e:30:82:f2:97:
         72:21:8e:be:b9:69:95:3e:0d:da:2f:94:ca:62:af:be:6c:43:
         8c:87:9f:33:37:fb:19:56:be:72:5b:59:db:75:b3:f2:aa:5f:
         a9:73:b0:8e:ff:b0:0a:0c:22:53:70:04:4a:77:5e:6b:83:2d:
         b4:96:1c:5d:80:fa:d3:ea:a8:f8:66:04:c0:42:c4:b7:92:c6:
         e3:20:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----