Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c6eda3-6898-4be9-8c94-a1de01a99e1d.roa
File:                     e9c6eda3-6898-4be9-8c94-a1de01a99e1d.roa (raw, json)
Hash identifier:          xvp5lIs6BZzGlrGir3uLXZV58T2WeAXJHVmVxAqY7gs=
Subject key identifier:   D2:A1:26:39:DA:6A:43:44:C6:43:22:22:B1:AD:F0:74:B5:8D:8E:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F520DB38C5BECFAC8DF3931740FED5C5868673F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c6eda3-6898-4be9-8c94-a1de01a99e1d.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        184.72.0.0/15 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:52:0d:b3:8c:5b:ec:fa:c8:df:39:31:74:0f:ed:5c:58:68:67:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=6bd4f6931fe61e7a88f476c048df5c209dd2d22089237d3328931c564ee69b99, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e0:4e:a0:27:92:9c:41:60:bd:43:47:58:22:
                    73:32:86:57:c0:5f:f6:3c:f9:93:89:b5:f0:c8:d0:
                    95:d2:64:69:59:f2:78:a7:fa:74:c3:da:18:04:df:
                    f5:77:16:e2:59:0f:98:9c:46:ff:76:17:5e:94:5b:
                    7d:bd:3d:3e:28:bc:50:0f:c6:29:c2:9d:67:f7:4b:
                    61:6e:9b:8c:ed:21:62:36:38:31:d2:32:3b:7f:30:
                    79:c4:d9:d7:43:93:63:ea:a1:51:32:9e:3b:17:80:
                    c8:45:01:27:c4:8c:46:52:24:f6:53:31:82:a7:88:
                    85:3c:a3:25:7c:14:b8:d1:8a:c6:1e:41:cc:5d:44:
                    26:ed:ab:8f:d1:1d:53:86:5a:ed:bc:21:14:d8:26:
                    ea:18:30:62:54:d7:a9:b6:59:1a:c3:d8:09:03:dc:
                    25:c1:4d:f0:68:ff:0f:f7:2d:e4:c4:98:8c:f9:fe:
                    f2:39:10:93:21:ff:fc:30:a7:0a:4e:b8:2f:05:89:
                    df:01:46:cc:a6:9d:3e:d2:e9:dc:91:3d:af:3d:b6:
                    8e:22:f1:fb:d7:43:8c:67:f8:13:b9:44:5b:17:8a:
                    4c:93:40:df:13:3b:c5:43:99:c4:cc:0a:72:96:a2:
                    06:5b:59:cc:d5:84:d6:f3:63:ec:36:1e:3d:75:03:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A1:26:39:DA:6A:43:44:C6:43:22:22:B1:AD:F0:74:B5:8D:8E:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c6eda3-6898-4be9-8c94-a1de01a99e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b3:e9:78:bb:1f:25:84:fa:51:7d:41:86:52:af:41:07:30:42:
         07:34:fb:d5:76:f3:7e:82:73:09:13:95:31:e5:08:e6:f7:41:
         67:e1:56:cf:77:f0:81:89:de:a3:a4:a4:04:d1:48:7c:3c:da:
         67:20:ef:d5:6e:68:73:c9:7b:3c:95:46:c6:d6:d5:13:dc:94:
         88:c0:01:2a:c7:83:5e:ed:67:e4:3b:e5:e0:8a:1b:36:36:8f:
         3a:fb:15:9d:b8:65:43:14:be:57:95:68:49:32:20:12:d1:41:
         e0:03:e2:5d:83:5c:79:fb:94:cb:1f:64:f6:67:38:76:e6:0a:
         7a:28:4f:c9:b6:27:b2:6d:5e:42:89:fc:98:b7:71:57:25:24:
         a1:7b:1c:ca:04:9f:42:9d:91:83:75:66:c2:44:65:79:9c:69:
         6e:c4:69:e8:88:8c:f6:c6:c2:3d:60:7f:5d:50:d2:7a:8e:16:
         ec:19:86:6d:9b:f8:1f:ad:b2:99:6b:2c:3a:2e:44:8e:bb:4a:
         95:ec:fb:dc:d0:42:95:a8:3b:25:24:96:81:3d:db:11:da:48:
         08:7b:f0:be:d7:8c:1b:d9:a5:54:c2:5e:48:95:4d:ff:ae:ba:
         b3:2b:4c:9d:84:ef:6e:2a:4b:77:b3:05:89:4c:1a:79:c5:b3:
         6c:c5:42:25
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUP1INs4xb7PrI3zkxdA/tXFhoZz8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjMwMDAwMDAwWhcNMjUwMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A2YmQ0ZjY5MzFmZTYxZTdhODhmNDc2YzA0OGRmNWMyMDlk
ZDJkMjIwODkyMzdkMzMyODkzMWM1NjRlZTY5Yjk5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCU4E6gJ5KcQWC9Q0dYInMyhlfAX/Y8+ZOJtfDI0JXSZGlZ
8nin+nTD2hgE3/V3FuJZD5icRv92F16UW329PT4ovFAPxinCnWf3S2Fum4ztIWI2
ODHSMjt/MHnE2ddDk2PqoVEynjsXgMhFASfEjEZSJPZTMYKniIU8oyV8FLjRisYe
QcxdRCbtq4/RHVOGWu28IRTYJuoYMGJU16m2WRrD2AkD3CXBTfBo/w/3LeTEmIz5
/vI5EJMh//wwpwpOuC8Fid8BRsymnT7S6dyRPa89to4i8fvXQ4xn+BO5RFsXikyT
QN8TO8VDmcTMCnKWogZbWczVhNbzY+w2Hj11AydXAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU0qEmOdpqQ0TGQyIisa3wdLWNjnkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U5YzZlZGEzLTY4OTgtNGJlOS04Yzk0LWExZGUwMWE5OWUxZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwG4SDANBgkqhkiG9w0BAQsFAAOCAQEAs+l4ux8lhPpRfUGGUq9BBzBCBzT7
1XbzfoJzCROVMeUI5vdBZ+FWz3fwgYneo6SkBNFIfDzaZyDv1W5oc8l7PJVGxtbV
E9yUiMABKseDXu1n5Dvl4IobNjaPOvsVnbhlQxS+V5VoSTIgEtFB4APiXYNcefuU
yx9k9mc4duYKeihPybYnsm1eQon8mLdxVyUkoXscygSfQp2Rg3VmwkRleZxpbsRp
6IiM9sbCPWB/XVDSeo4W7BmGbZv4H62ymWssOi5EjrtKlez73NBClag7JSSWgT3b
EdpICHvwvteMG9mlVMJeSJVN/666sytMnYTvbipLd7MFiUwaecWzbMVCJQ==
-----END CERTIFICATE-----