Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/1cc96fa0-0837-4ab8-9fd4-b91d347df4b3.roa
File:                     1cc96fa0-0837-4ab8-9fd4-b91d347df4b3.roa (raw, json)
Hash identifier:          rEsxjQwGAtN+fBQlSLpNQHzzFsPGArZUZUZzZLe58Vk=
Subject key identifier:   02:2E:F1:24:18:0E:EA:23:7A:4A:1C:75:DF:5E:33:0C:C2:7D:3E:33
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       733262AF321BE2734F4408831722D737F833EFAB
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/1cc96fa0-0837-4ab8-9fd4-b91d347df4b3.roa
Signing time:             Mon 23 Dec 2024 00:00:00 +0000
ROA not before:           Mon 23 Dec 2024 00:00:00 +0000
ROA not after:            Mon 27 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:fff8::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:32:62:af:32:1b:e2:73:4f:44:08:83:17:22:d7:37:f8:33:ef:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Dec 23 00:00:00 2024 GMT
            Not After : Jan 27 23:59:59 2025 GMT
        Subject: CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:58:4d:38:15:22:b0:99:80:13:63:48:7a:92:
                    89:14:a3:06:6c:40:58:1a:dd:9d:e8:e8:80:d0:18:
                    0f:ae:84:6f:c5:fe:67:f5:da:21:69:26:0c:34:6c:
                    dd:4a:b5:5f:41:21:32:fd:7d:b8:77:db:c8:6b:89:
                    77:d0:07:69:07:ec:3f:0e:98:96:5d:c3:09:34:7c:
                    ad:25:1a:90:eb:ff:b7:d2:80:75:bd:5f:f9:f8:c7:
                    5d:c8:b2:09:bc:b8:7d:c7:c5:08:54:c9:7c:1d:a4:
                    12:66:68:5c:a8:b2:cd:4d:31:fb:95:ee:aa:95:3f:
                    25:ed:ba:54:1e:2d:2c:ad:9f:ca:15:cc:01:b7:66:
                    1f:c6:75:f6:bd:07:fd:7b:98:ff:51:d5:64:a1:a0:
                    b7:48:eb:73:bb:74:0b:70:31:b0:38:88:7f:d3:b3:
                    71:32:8e:db:24:18:64:90:f5:3e:fd:a5:c2:11:92:
                    ca:39:93:59:e3:40:98:b6:49:ac:a3:9a:9b:8a:f0:
                    19:65:3e:ec:cb:e6:2f:83:76:1e:24:2e:38:4c:3c:
                    12:f9:ef:90:9f:d0:cc:f6:f4:68:08:9f:6f:28:76:
                    3a:e0:08:8d:db:66:6d:92:ba:fe:23:65:2e:e0:1d:
                    f8:17:07:cb:ec:d2:18:b6:a9:b5:6f:82:7e:54:2c:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2E:F1:24:18:0E:EA:23:7A:4A:1C:75:DF:5E:33:0C:C2:7D:3E:33
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/1cc96fa0-0837-4ab8-9fd4-b91d347df4b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:fff8::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:5d:72:95:b3:bf:0b:60:c7:f6:04:33:01:7e:0d:6e:f4:c4:
         eb:67:70:22:f8:10:f1:a7:29:ba:95:aa:c3:28:0e:66:09:9e:
         d8:6e:1a:38:9b:47:4c:d3:08:c0:36:f8:49:69:81:51:49:a1:
         0d:e8:a4:e5:36:dc:e3:55:3d:dc:32:13:5c:c0:70:bc:4a:a3:
         c9:45:ed:b9:6c:f0:c2:7c:4c:fa:9f:32:4a:08:10:93:e1:3b:
         fd:a7:64:2d:30:cd:6c:c3:9f:e7:1f:9b:10:40:c2:d3:b0:70:
         6e:db:b9:ba:84:71:ac:3c:3d:17:4e:5c:e7:2b:3d:3d:27:47:
         fc:33:e4:e6:95:11:46:36:3c:08:9f:a0:47:b4:80:dc:1f:19:
         b3:e9:33:71:b6:74:54:aa:1d:75:9e:59:76:1a:ea:c0:e4:68:
         7c:e4:8d:78:0f:d6:e3:ec:bd:7a:21:d1:1f:57:fc:c9:90:31:
         1e:de:07:2c:1a:2e:c7:e4:18:48:45:27:00:06:e4:07:2c:96:
         57:1b:8a:6d:b8:8c:cf:d2:35:a0:a2:88:9d:78:10:94:99:19:
         e4:ac:b7:ae:95:f7:a5:44:0b:62:30:6f:61:23:7e:a3:fc:88:
         f9:ac:ca:34:e6:68:0f:c7:91:b7:7f:ef:91:b8:7f:11:d4:b2:
         d9:27:3d:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----