Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ba5cb5-e3ab-4573-a54a-7fff9cc811ac.roa
File:                     e9ba5cb5-e3ab-4573-a54a-7fff9cc811ac.roa (raw, json)
Hash identifier:          tcMbwPqzOHel4eyyW00XmgPdc8zZ845MgGjtCKK/xLs=
Subject key identifier:   5B:7C:73:B4:FE:91:8B:DB:E8:D7:89:5C:EB:C1:C4:0D:F7:AF:69:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       373AEF34FFAE229DE52208E519B62840E8BA3F76
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ba5cb5-e3ab-4573-a54a-7fff9cc811ac.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        138.70.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3a:ef:34:ff:ae:22:9d:e5:22:08:e5:19:b6:28:40:e8:ba:3f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=5a6dc988c43f20997fbd1e50884bba64affe52a9dbd50f193454de4f603b64ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:0a:a9:bb:8c:53:89:4c:37:d4:7b:a5:81:
                    24:5d:f4:33:62:7f:76:b2:19:86:71:d3:c4:82:ab:
                    bf:c1:7b:64:ac:69:7a:32:30:c1:fe:90:81:c1:b1:
                    37:10:9a:9b:fd:c5:20:ac:38:77:ef:3e:2a:97:35:
                    a9:03:38:a5:31:87:98:38:d9:7f:65:6e:9a:6a:8c:
                    41:18:68:cb:9f:a7:99:bd:c3:dc:fd:84:de:36:0e:
                    9d:22:fd:4e:37:d7:7b:7a:16:19:ba:14:8b:16:b3:
                    bf:53:b2:96:41:d9:6b:14:ae:fd:48:0e:a6:6c:b1:
                    df:1e:71:eb:b5:ce:60:1a:b9:6d:5a:32:70:00:be:
                    9a:a5:e4:20:69:99:c1:f4:b3:e7:a4:ec:c9:e7:26:
                    98:a9:f6:64:bf:71:22:34:aa:7c:cf:88:52:16:3e:
                    a1:b6:a5:fd:15:96:d3:ff:ea:bc:10:22:83:aa:9b:
                    c6:0e:2f:cd:8e:7d:97:5a:68:8e:d3:aa:b5:38:b0:
                    86:30:a9:21:96:74:21:78:21:ed:0c:66:96:67:53:
                    59:3e:cb:cd:1b:40:94:e9:da:35:6a:8b:94:1d:d3:
                    e9:3b:fe:57:63:28:89:34:11:ec:15:da:a2:5c:62:
                    32:a4:2a:e1:7e:fa:27:15:bd:ff:f8:d7:33:7f:2a:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7C:73:B4:FE:91:8B:DB:E8:D7:89:5C:EB:C1:C4:0D:F7:AF:69:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ba5cb5-e3ab-4573-a54a-7fff9cc811ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.70.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         af:8f:c9:4d:3d:a1:47:6f:55:85:ac:a5:48:da:63:8c:3d:5b:
         c0:b6:27:ed:fe:06:96:40:75:c5:8f:c4:e6:69:85:7d:87:73:
         24:52:65:c3:18:28:1d:8e:d0:13:20:8a:20:a5:53:c4:5d:2a:
         45:c9:06:38:ac:9d:6a:c5:59:e8:16:6e:17:73:40:56:e1:86:
         9d:b9:28:bd:86:d6:73:38:fc:97:15:0e:77:f1:98:86:18:51:
         f9:f6:c3:11:d9:5c:88:26:ea:22:34:a8:aa:46:56:5f:1d:97:
         4e:cb:40:9d:b4:09:6e:0e:e6:3b:27:d4:ff:68:e9:fc:2f:74:
         4f:59:f9:b3:77:82:67:8e:06:b6:ce:43:23:6b:1f:2d:ae:4d:
         8e:2b:cf:c2:50:e7:52:59:7c:4e:24:1b:0e:1b:9b:bb:99:81:
         10:d2:36:7a:c4:35:7c:dc:59:02:68:24:ef:1c:65:e0:eb:68:
         0d:a9:65:9d:1d:c8:56:07:b0:6c:3f:31:35:2f:60:ad:04:a4:
         b1:a0:45:1a:87:0e:fe:98:1f:3e:7c:a9:f4:64:13:15:4b:1e:
         ed:8b:75:5a:ed:a0:02:03:e1:0f:fb:3f:a2:e4:4f:da:e6:43:
         03:50:53:33:ce:b2:9e:3f:00:dd:c6:bb:fc:d6:d0:8d:f2:de:
         32:ab:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----