Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee039a15-aea5-4f01-9cb6-29d071d6e963.roa
File:                     ee039a15-aea5-4f01-9cb6-29d071d6e963.roa (raw, json)
Hash identifier:          vaYi5fNr91izbNzh4cX/cunaehdCjCs/q0c2CH9neEA=
Subject key identifier:   C9:2D:1C:C1:CC:6F:3B:EC:F7:D5:31:BE:9A:99:E3:14:39:2B:4D:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59336E43B14B1F41BDC3E8AB01C3410C7872E8AF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee039a15-aea5-4f01-9cb6-29d071d6e963.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        168.157.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:33:6e:43:b1:4b:1f:41:bd:c3:e8:ab:01:c3:41:0c:78:72:e8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=e9a1bd666fd876ce03820f39e74ab6a197f2d81aab9969af7aaff9098dd5f1c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:4d:c0:59:94:39:c7:e3:db:b6:92:e8:37:
                    75:93:8f:48:8c:f5:73:8c:e6:7c:e2:ba:b3:e9:5d:
                    a1:64:a7:ff:61:19:bf:ce:82:f2:2f:d4:bb:f5:50:
                    2b:33:13:cb:4b:87:d0:b6:d2:06:fb:af:43:0e:02:
                    28:d6:f2:44:84:62:1e:c5:ef:8b:4b:c3:47:30:59:
                    c4:fa:07:16:d2:f7:f0:36:d0:b6:be:f8:97:7e:c7:
                    dd:f2:56:97:7a:3d:09:1f:ac:84:b8:1f:18:fe:65:
                    df:5e:db:5c:ab:62:ae:c6:5d:15:8a:76:c6:ed:b6:
                    06:62:13:39:21:bc:4c:f3:59:9f:27:ba:3b:6b:d6:
                    67:00:f0:a3:65:e3:06:0a:59:2f:86:78:d3:31:96:
                    50:3c:92:75:eb:b6:3c:3f:45:1f:4c:2f:b2:76:e9:
                    0e:5e:dd:f0:c1:14:e7:c0:5d:8d:49:c3:47:ec:61:
                    71:e3:b9:bc:19:78:82:93:ed:c8:52:e9:9b:6b:73:
                    cb:ff:ab:2c:f4:63:4d:a3:8a:63:fc:37:20:6d:03:
                    76:6b:23:7c:4a:21:d3:14:72:50:ef:98:ce:dc:c1:
                    78:0f:37:ea:e2:72:a1:52:98:ec:24:33:7b:88:c0:
                    ae:65:ad:c5:ae:ca:bd:b6:7e:2a:5e:42:d2:75:03:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2D:1C:C1:CC:6F:3B:EC:F7:D5:31:BE:9A:99:E3:14:39:2B:4D:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee039a15-aea5-4f01-9cb6-29d071d6e963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         24:bc:22:9e:27:45:94:0f:33:8e:36:fb:c2:e8:12:ee:27:57:
         76:8b:c5:e0:59:f8:26:29:fe:70:ff:b1:ae:c0:54:dd:0d:e8:
         32:9b:5f:a0:da:a9:09:f0:fd:a7:d1:7f:68:a0:53:8f:a0:36:
         da:36:c8:a8:3a:ec:ca:0f:d7:b5:34:18:fe:50:bd:c5:5a:ef:
         50:79:8f:1c:4f:2a:c2:cc:90:ff:b4:45:93:f7:c2:ac:57:ff:
         48:f8:2f:e7:53:6d:c0:c7:e6:f0:4e:c1:e1:8c:5f:99:3b:37:
         a7:90:74:f4:60:45:93:97:f6:c1:1e:1e:d3:d2:32:80:f0:1d:
         8b:13:26:38:ca:31:88:5d:8d:dd:fb:3a:ca:7d:57:4a:43:bd:
         aa:9a:e7:9f:d5:ed:8d:0a:6d:0a:91:4f:1a:05:90:74:a3:54:
         54:36:41:c9:11:74:69:6c:68:46:d6:f3:2f:dc:da:34:07:3f:
         76:a7:01:40:cd:a6:3a:11:0a:b8:26:81:0a:1a:0b:b8:6b:f9:
         2d:e2:eb:e2:8a:0f:6d:0a:0b:fc:3f:3d:d9:b4:8c:74:02:2b:
         70:0f:1d:0d:45:dc:40:d0:e6:6b:2c:bd:cb:9c:26:95:fb:80:
         1c:d4:9d:8b:ea:6f:ad:dd:c1:08:8e:d9:66:97:94:7b:70:94:
         eb:90:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----