Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f26bd5f0-d74c-440e-a484-24b454220c35.roa
File:                     f26bd5f0-d74c-440e-a484-24b454220c35.roa (raw, json)
Hash identifier:          /Hlbomgim8mdc09IGY7WW2Mzd4aOJu8HgphfnLAQg3M=
Subject key identifier:   D2:29:19:C3:EA:22:A5:D8:CA:96:F9:4D:FF:A6:64:BD:96:88:7B:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0516737164FFF2781557355608E75D4B785AEF2E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f26bd5f0-d74c-440e-a484-24b454220c35.roa
Signing time:             Thu 26 Dec 2024 00:00:00 +0000
ROA not before:           Thu 26 Dec 2024 00:00:00 +0000
ROA not after:            Thu 30 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        100.48.0.0/12 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:16:73:71:64:ff:f2:78:15:57:35:56:08:e7:5d:4b:78:5a:ef:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 26 00:00:00 2024 GMT
            Not After : Jan 30 23:59:59 2025 GMT
        Subject: serialNumber=2c9069fe97b13b23a653a2870db50a41a13e04b5819759ee1588c0dbf49db788, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:95:b9:ce:01:c4:22:cb:01:5a:c3:0e:0f:
                    65:48:3a:39:d1:fa:f9:af:23:31:da:5b:43:89:40:
                    41:65:a6:5d:cf:ef:15:2a:44:08:c1:ca:b3:9a:6a:
                    33:ee:27:b8:b1:a2:a2:cf:33:21:6f:73:d5:fd:cf:
                    5a:8d:ac:cd:fa:5d:46:42:d5:05:d1:48:49:cc:05:
                    8a:97:42:66:e0:35:da:7a:30:f8:32:e4:5c:e0:62:
                    7a:c7:28:a5:32:2b:c9:1a:54:4c:f1:a7:61:29:2a:
                    0e:8a:13:bd:83:39:59:b1:95:8b:e6:a1:2a:70:0b:
                    74:6c:30:2e:19:2c:73:98:d8:e2:09:be:7d:10:6a:
                    d5:2b:c9:c8:4e:db:1a:c6:11:14:91:28:45:5e:d0:
                    8f:03:28:ed:ed:c3:98:d1:d8:f9:bc:b0:ed:90:2b:
                    ef:d8:12:9e:a9:af:29:1f:c3:fe:11:5c:c6:b7:46:
                    4b:a5:2b:13:de:1d:70:79:46:e2:83:4c:f5:45:77:
                    0a:75:b3:07:51:6b:f9:66:dc:3f:08:91:10:eb:c3:
                    3a:ae:24:45:fd:26:fc:ba:a0:87:96:9d:33:2f:1e:
                    f3:fd:15:39:a7:98:91:de:ae:be:6b:d6:f2:67:1e:
                    18:62:d1:b1:50:8e:2d:80:a3:c6:48:8c:23:a5:07:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:29:19:C3:EA:22:A5:D8:CA:96:F9:4D:FF:A6:64:BD:96:88:7B:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f26bd5f0-d74c-440e-a484-24b454220c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.48.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:61:fe:83:dd:f2:dd:70:05:c0:5c:31:d3:17:b2:c3:29:
         fe:d0:2d:5b:dc:72:ee:e4:df:d3:9f:6e:c7:93:a6:a8:8a:98:
         4c:a0:50:35:7b:bb:3f:43:55:63:51:ca:e7:3a:30:32:6e:75:
         55:d1:b4:28:bc:7f:e0:d1:c1:d0:39:58:69:12:3d:c0:f4:84:
         1e:76:11:69:f1:f8:4e:3e:71:4a:97:21:dc:87:6e:69:f6:b6:
         40:56:98:53:82:53:91:29:d9:8c:19:e8:89:8f:48:7b:99:76:
         51:6c:f0:4e:98:3b:77:3f:6e:84:58:15:d2:95:83:9b:9a:bd:
         8f:e8:7f:e9:f7:f0:dd:1e:c1:38:7c:f2:b0:b1:36:18:4f:71:
         ff:f2:b3:28:06:7a:b4:76:45:f3:38:5f:bb:88:56:61:2b:96:
         a9:8f:49:d0:80:a0:34:cd:16:55:94:84:1a:f3:44:49:88:f1:
         ff:2c:f7:98:b4:0f:da:96:ce:34:2c:8a:4c:ee:92:6b:0e:87:
         32:fe:0b:36:4b:f3:56:26:f3:62:78:31:48:7f:67:5d:62:47:
         2a:c0:d5:35:f4:b6:db:a4:0e:53:52:ea:01:6a:bb:f6:2e:b3:
         21:6b:00:23:09:df:8f:5a:76:5e:da:72:96:76:de:53:14:71:
         77:d9:45:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----