Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6b97aef-df4f-49d3-8c08-77ba5a52f8e8.roa
File:                     e6b97aef-df4f-49d3-8c08-77ba5a52f8e8.roa (raw, json)
Hash identifier:          i6zj1yXsfPCQwwR+i2JSdas5d7dxiWbvMBC1+/Mwgcw=
Subject key identifier:   4B:C0:ED:24:7E:F8:9F:E0:B8:39:6E:A8:A1:DD:3A:63:30:4C:40:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0EE6CD211D5077FA9C95F53939C0070BA264C3AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6b97aef-df4f-49d3-8c08-77ba5a52f8e8.roa
Signing time:             Sat 11 Jan 2025 00:00:00 +0000
ROA not before:           Sat 11 Jan 2025 00:00:00 +0000
ROA not after:            Sat 15 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        212.111.160.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e6:cd:21:1d:50:77:fa:9c:95:f5:39:39:c0:07:0b:a2:64:c3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 11 00:00:00 2025 GMT
            Not After : Feb 15 23:59:59 2025 GMT
        Subject: serialNumber=088865b2f020597cdf29a79516c1caf9a860d322cbbe828823ee0ea18d1b7da4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f0:9e:4c:0b:94:e8:c9:97:59:a2:fd:0a:f1:
                    ee:de:2e:36:8e:92:7d:69:94:1c:3d:52:13:fd:99:
                    4e:ab:78:b9:55:a4:f1:52:07:20:98:a5:2d:55:69:
                    5b:c3:e4:86:22:04:7d:e6:8a:c5:77:60:69:db:44:
                    37:06:ba:b3:f8:19:0d:68:20:42:c8:ce:62:0e:f9:
                    9e:74:62:29:05:8e:9c:a2:a9:2f:01:e2:58:e0:ff:
                    e4:af:5d:e8:45:95:c6:29:20:5b:38:29:44:23:94:
                    cc:cf:20:24:ce:84:5e:be:a9:e5:e8:69:35:3d:ec:
                    dd:b7:a7:f6:7a:3e:cd:5d:f0:62:e0:e9:c2:63:f2:
                    0c:36:f7:87:04:48:f1:ae:68:32:95:f6:39:e1:e3:
                    33:66:5c:0d:1a:ba:95:fb:06:56:c7:78:e5:8e:c5:
                    5e:05:ae:b8:a9:2b:18:63:cd:5c:f5:63:24:86:63:
                    8f:26:77:eb:b3:0d:d8:0e:73:5d:b2:bb:7c:77:70:
                    b1:dd:e8:cb:47:b7:e6:7c:01:33:b8:7f:ac:ac:03:
                    16:0e:24:6a:a2:ae:37:b7:98:71:e4:aa:a2:0a:4c:
                    e4:66:60:fc:06:db:43:12:c9:1d:a3:6b:93:cb:9f:
                    af:a4:11:f3:d7:08:20:f4:e9:e8:69:16:2e:4b:5a:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C0:ED:24:7E:F8:9F:E0:B8:39:6E:A8:A1:DD:3A:63:30:4C:40:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6b97aef-df4f-49d3-8c08-77ba5a52f8e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.111.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ca:1a:05:5f:d4:35:ff:cc:a5:1a:56:6d:eb:67:58:41:d8:f4:
         e3:2c:a7:73:f7:81:63:11:19:bb:82:b4:e1:1a:cc:20:58:c9:
         52:90:06:ae:71:b1:8e:d9:00:ee:6f:fd:22:d3:82:f3:9e:ee:
         7e:b9:56:57:4c:44:3d:83:b0:84:00:b3:2f:5c:49:cc:fb:43:
         78:5b:02:89:45:38:23:8f:e7:f3:3c:7b:e7:13:c8:d0:8a:8f:
         67:37:44:11:cd:86:a9:52:fe:db:4f:d0:9d:bb:4a:5e:04:9b:
         78:df:43:1b:cf:d9:fe:e7:e3:05:0e:90:c0:e9:f6:a0:ef:b6:
         84:e8:8c:0d:39:9e:00:76:d9:0f:45:5e:63:b7:45:63:03:f1:
         cb:f9:09:e4:46:7b:e7:19:ee:df:7d:0f:3e:1e:37:e3:87:82:
         d4:1e:c6:58:dc:20:33:a8:4d:8c:b2:b0:72:44:cf:11:81:d9:
         d8:24:28:c9:ac:7b:a4:55:08:7d:fa:d7:5d:1c:36:6a:3c:cc:
         fa:6f:e5:7a:78:77:28:83:39:f9:bd:53:4c:49:20:a9:d0:fb:
         6f:38:99:2e:b2:da:7f:6a:f3:7a:82:cf:3d:36:40:bc:3c:f6:
         80:82:82:ed:b6:25:e2:91:b5:cf:15:1b:69:a0:0a:c9:35:20:
         e3:77:71:12
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDubNIR1Qd/qclfU5OcAHC6Jkw6owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTExMDAwMDAwWhcNMjUwMjE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AwODg4NjViMmYwMjA1OTdjZGYyOWE3OTUxNmMxY2FmOWE4
NjBkMzIyY2JiZTgyODgyM2VlMGVhMThkMWI3ZGE0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDh8J5MC5ToyZdZov0K8e7eLjaOkn1plBw9UhP9mU6reLlV
pPFSByCYpS1VaVvD5IYiBH3misV3YGnbRDcGurP4GQ1oIELIzmIO+Z50YikFjpyi
qS8B4ljg/+SvXehFlcYpIFs4KUQjlMzPICTOhF6+qeXoaTU97N23p/Z6Ps1d8GLg
6cJj8gw294cESPGuaDKV9jnh4zNmXA0aupX7BlbHeOWOxV4FrripKxhjzVz1YySG
Y48md+uzDdgOc12yu3x3cLHd6MtHt+Z8ATO4f6ysAxYOJGqirje3mHHkqqIKTORm
YPwG20MSyR2ja5PLn6+kEfPXCCD06ehpFi5LWoRzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUS8DtJH74n+C4OW6ood06YzBMQBMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U2Yjk3YWVmLWRmNGYtNDlkMy04YzA4LTc3YmE1YTUyZjhlOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXUb6AwDQYJKoZIhvcNAQELBQADggEBAMoaBV/UNf/MpRpWbetnWEHY9OMs
p3P3gWMRGbuCtOEazCBYyVKQBq5xsY7ZAO5v/SLTgvOe7n65VldMRD2DsIQAsy9c
Scz7Q3hbAolFOCOP5/M8e+cTyNCKj2c3RBHNhqlS/ttP0J27Sl4Em3jfQxvP2f7n
4wUOkMDp9qDvtoTojA05ngB22Q9FXmO3RWMD8cv5CeRGe+cZ7t99Dz4eN+OHgtQe
xljcIDOoTYyysHJEzxGB2dgkKMmse6RVCH36110cNmo8zPpv5Xp4dyiDOfm9U0xJ
IKnQ+284mS6y2n9q83qCzz02QLw89oCCgu22JeKRtc8VG2mgCsk1ION3cRI=
-----END CERTIFICATE-----