Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee051037-cc0e-4fb9-b042-3ae879b4c2f3.roa
File:                     ee051037-cc0e-4fb9-b042-3ae879b4c2f3.roa (raw, json)
Hash identifier:          ZenRqiSw8b+RL7NDOg3Vkj7ZYuv1kb/U/73nHkNmTxs=
Subject key identifier:   98:17:34:BB:43:5C:97:D6:25:24:E2:99:CB:62:0C:76:81:FA:48:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64E0F96515B9C06301DBB0ED9F72EB2AE2A47138
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee051037-cc0e-4fb9-b042-3ae879b4c2f3.roa
Signing time:             Tue 24 Dec 2024 00:00:00 +0000
ROA not before:           Tue 24 Dec 2024 00:00:00 +0000
ROA not after:            Tue 28 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.42.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e0:f9:65:15:b9:c0:63:01:db:b0:ed:9f:72:eb:2a:e2:a4:71:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 24 00:00:00 2024 GMT
            Not After : Jan 28 23:59:59 2025 GMT
        Subject: serialNumber=e5c450bca1f10b7987e9b50a896ec412b8fe1ce1cef0e72fc691aa07ddbf71f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:26:7b:d3:9d:2e:84:e2:e1:2c:df:8c:fb:
                    ed:77:a4:bf:c4:f8:81:69:32:b9:dc:95:5a:65:37:
                    54:4a:46:d1:d5:eb:5a:3f:14:22:36:fa:0c:c0:2a:
                    2e:b7:b9:1d:84:4b:4b:98:6f:d0:e8:9c:c8:64:a4:
                    41:30:e6:00:ec:1a:78:3b:8e:a6:80:8e:97:53:4c:
                    10:ff:94:38:cf:8f:91:89:20:0e:6d:dc:98:e7:27:
                    4f:5d:da:3b:bf:c4:68:d3:0e:49:74:6b:29:83:d7:
                    70:47:5d:53:2c:0d:23:63:51:03:a1:4d:20:4f:79:
                    f1:c2:d9:3a:12:a5:aa:db:4c:42:96:d0:5d:a1:f9:
                    ce:b5:18:d6:31:6e:63:99:5a:7f:0d:a9:ec:25:1f:
                    46:bb:be:ac:f3:dd:ac:d8:65:4a:6e:98:a7:54:bb:
                    fe:67:05:13:63:cd:49:05:42:95:e1:bb:bc:91:cd:
                    02:23:83:38:e1:b5:ad:a6:17:35:ad:89:21:88:dd:
                    19:d6:24:30:23:4e:a2:41:c8:ad:7a:ac:ed:7e:da:
                    f4:07:f3:69:86:04:01:57:35:af:53:9f:ea:40:2c:
                    62:e8:b0:e7:b6:1a:4e:88:a0:64:d1:60:36:df:ae:
                    ce:fc:06:2b:fc:09:4d:23:6c:ba:84:23:bb:f8:9e:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:17:34:BB:43:5C:97:D6:25:24:E2:99:CB:62:0C:76:81:FA:48:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee051037-cc0e-4fb9-b042-3ae879b4c2f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.42.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:14:c6:fd:d3:07:a1:d5:86:96:dc:77:df:97:0f:3f:80:8d:
         c1:bc:ed:5f:fa:60:6b:d6:e7:1f:c4:c4:b9:60:78:01:4d:ef:
         c1:86:94:60:f1:a1:a8:73:36:cc:b3:a7:27:96:27:cb:ee:6b:
         52:5c:5d:ee:5e:e9:40:42:b2:9f:45:3b:a0:64:3f:7c:fd:2b:
         2d:d5:23:c1:3a:06:ea:54:8a:65:fd:bc:e3:47:ac:ed:63:ab:
         bd:e2:dc:72:a0:80:fc:2a:65:5c:64:b5:7f:75:b4:9f:bb:10:
         f9:9f:7b:e4:97:52:16:f3:17:d3:fc:3e:e2:aa:d1:e3:26:d1:
         80:c0:fb:69:40:50:ab:ac:8e:59:f6:8f:94:2a:c1:77:9e:2a:
         6f:18:76:15:bb:a0:57:6a:0f:97:d7:3a:9c:ed:2a:fe:57:59:
         f5:56:9e:9d:9e:75:e0:b6:88:fa:79:6b:dc:43:88:b2:bc:a4:
         a2:94:2d:b0:9a:2b:1a:0b:74:6d:b2:5c:ab:2a:e7:d5:c3:48:
         c9:fa:09:9a:93:1f:c7:65:5b:0c:ce:64:b0:19:6b:25:b0:9f:
         90:aa:6c:33:fe:19:5a:db:4b:28:8d:2a:f4:4c:57:5a:23:8f:
         70:7d:51:0f:8a:d4:ee:e7:d4:cd:2f:a3:38:16:24:a4:66:cb:
         c3:5a:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----