Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc0716ce-dd66-4f20-97c2-a377b34deb77.roa
File:                     fc0716ce-dd66-4f20-97c2-a377b34deb77.roa (raw, json)
Hash identifier:          d3WqyOktzet2T+A4HX7pvJLWykLQPS7kjEYT5Gn7Gjc=
Subject key identifier:   3F:96:EF:7F:B6:DB:52:85:BE:44:E0:A1:5C:83:81:54:33:79:0B:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B54A8E456C6308C705A8323D8641F1562149144
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc0716ce-dd66-4f20-97c2-a377b34deb77.roa
Signing time:             Wed 05 Feb 2025 00:00:00 +0000
ROA not before:           Wed 05 Feb 2025 00:00:00 +0000
ROA not after:            Wed 12 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f30:1000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:54:a8:e4:56:c6:30:8c:70:5a:83:23:d8:64:1f:15:62:14:91:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb  5 00:00:00 2025 GMT
            Not After : Mar 12 23:59:59 2025 GMT
        Subject: serialNumber=56ec08a15560ff8046a18dcf7de19603966ab6a771c2863ce990f97c99d7d3b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c9:57:8d:9b:87:68:6b:b0:c8:70:cf:93:c4:
                    ee:bc:8f:b3:df:c2:c5:1a:fc:61:67:d3:68:e0:d1:
                    18:39:39:9c:2c:d8:39:93:38:25:59:28:d8:93:92:
                    27:7d:d0:c9:b7:d8:3d:1f:e7:31:68:e5:c6:61:48:
                    cb:fc:ec:67:fe:4e:01:c7:6b:ff:ec:39:ab:f5:73:
                    77:5a:9e:b5:b0:4b:50:7f:57:ad:13:de:23:5c:6d:
                    f2:e8:c8:86:11:c6:58:d0:b0:6e:8a:c3:2f:1e:8d:
                    94:d3:30:40:8d:c2:b7:aa:49:0d:34:98:64:96:90:
                    0e:9d:83:f9:bd:27:a4:05:2e:75:7e:e2:d9:58:12:
                    a5:98:63:96:7b:b0:df:25:76:ff:18:2d:b9:a6:79:
                    13:8f:05:64:98:bf:15:d9:7e:ac:60:4a:ab:7e:56:
                    95:b8:1f:aa:d6:91:88:0d:93:c6:62:37:fa:f6:6a:
                    0b:74:39:88:fa:50:5e:ba:4f:09:d7:af:d9:ec:30:
                    13:13:97:f9:79:fa:7d:46:c9:37:ab:41:ae:ff:9e:
                    0f:11:ae:24:2c:d6:38:04:7f:1b:28:e3:7d:25:95:
                    f9:c5:a1:c7:1b:50:23:fb:07:d1:79:09:52:0d:20:
                    c1:61:df:6b:ab:00:c6:6b:05:c1:ca:eb:0c:d7:cc:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:96:EF:7F:B6:DB:52:85:BE:44:E0:A1:5C:83:81:54:33:79:0B:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc0716ce-dd66-4f20-97c2-a377b34deb77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f30:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:37:3e:da:8c:54:5e:b1:42:fb:2f:91:61:24:db:c9:be:62:
         41:5f:d0:71:e1:f8:ee:a2:70:a3:79:73:f6:ae:55:6d:1c:52:
         61:bb:97:55:fc:23:30:17:5c:6b:42:88:e3:81:8a:35:0d:22:
         52:04:16:3a:4a:23:48:81:3f:6d:2f:fa:77:61:28:90:1f:c5:
         fa:a4:cd:f1:11:64:b1:c3:b6:4d:01:e3:a3:0b:df:eb:0b:96:
         fd:2e:ef:11:5a:d3:ae:0f:ef:4f:ee:96:cc:0c:8d:14:d0:79:
         75:0e:89:3d:c1:52:0b:04:70:50:23:69:ce:ab:51:d0:51:b0:
         e9:02:b2:4e:27:26:90:48:51:fe:51:34:04:88:7f:0b:3d:75:
         d2:f5:e6:1b:39:8f:4c:bf:dd:d2:44:41:ac:71:a1:d1:73:ab:
         b7:f0:98:af:55:5f:9d:90:62:67:ab:b7:ea:93:0a:4f:e8:dc:
         b8:13:12:77:2c:d8:e9:81:69:1c:d0:f3:77:cb:a0:cf:57:74:
         54:74:3d:eb:a2:87:2e:6b:48:a5:a2:d6:1d:73:6f:aa:fb:cd:
         8e:7c:fe:3b:03:2f:24:4f:de:5f:bb:eb:80:55:9d:79:00:75:
         d4:f1:ed:5f:e4:b6:2c:49:bf:b5:3c:a6:c2:e7:8c:f5:d7:a5:
         a9:fe:0a:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----