Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c63ac40-3210-446e-8717-ceb2b30973fc.roa
File:                     4c63ac40-3210-446e-8717-ceb2b30973fc.roa (raw, json)
Hash identifier:          aMryvrm7ganJH59WAkfuCiQy5NYPSEyp4JyMqdykKF0=
Subject key identifier:   FF:20:B3:59:0E:08:28:AF:D4:3A:B4:20:3D:C1:BD:8E:D9:25:69:81
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7C178C2179659070C23A80BBBE1CD7750E39AB12
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c63ac40-3210-446e-8717-ceb2b30973fc.roa
Signing time:             Tue 17 Dec 2024 00:00:00 +0000
ROA not before:           Tue 17 Dec 2024 00:00:00 +0000
ROA not after:            Tue 21 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.248.80.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:17:8c:21:79:65:90:70:c2:3a:80:bb:be:1c:d7:75:0e:39:ab:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 17 00:00:00 2024 GMT
            Not After : Jan 21 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:56:0d:f8:ba:4f:64:c8:3e:65:51:62:10:94:
                    57:0d:25:e1:f3:b8:0f:7f:74:6d:0f:22:e7:91:68:
                    e6:bb:21:bc:45:c7:63:62:c7:a5:14:df:ac:6c:be:
                    56:cd:27:2a:99:e4:cb:78:50:9a:04:b9:52:db:bc:
                    d7:72:b5:92:57:98:fc:fe:90:ea:8c:e4:23:97:30:
                    15:3f:f2:f5:cb:1c:be:0d:06:fb:4f:03:8f:97:5f:
                    32:a4:48:9e:fa:5b:58:39:a5:c5:65:9a:48:19:4d:
                    cd:18:a2:1a:25:df:c0:85:f8:b6:da:b6:fa:79:2e:
                    bd:ec:11:c2:c5:fd:f5:24:09:8c:c4:32:62:e6:83:
                    6c:4a:21:b5:82:0e:f5:ea:04:b0:f5:53:8d:04:13:
                    48:42:ff:fd:11:40:7a:c9:5e:00:34:af:d5:84:6e:
                    4f:64:db:fd:b8:82:5b:00:2f:f8:6c:b9:32:59:49:
                    e8:8e:32:7f:e2:dd:db:c4:0b:71:a7:7a:2e:a7:dd:
                    6f:fe:33:21:83:80:5c:c6:07:8d:e5:4a:da:a8:10:
                    a0:a6:be:e6:11:82:c1:88:a1:79:cf:b6:75:ce:86:
                    4c:8b:1d:ff:1e:98:12:1b:d5:ff:0b:21:ce:a6:de:
                    ad:e0:16:9a:c5:2c:68:e7:04:fe:cb:79:40:ae:95:
                    99:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:20:B3:59:0E:08:28:AF:D4:3A:B4:20:3D:C1:BD:8E:D9:25:69:81
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c63ac40-3210-446e-8717-ceb2b30973fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.248.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:65:94:84:d8:65:c8:e4:00:07:a8:d0:d4:75:2f:1c:4c:34:
         c7:43:c2:85:d2:fb:33:af:b3:33:15:65:fa:a1:b7:1a:3e:8b:
         98:cd:b8:67:bd:3d:98:b5:bd:dd:68:21:a3:78:91:e8:88:be:
         26:2f:a4:d0:27:5a:70:cd:30:db:65:e3:5a:53:bd:1e:ff:c2:
         c6:97:ad:2e:91:0b:37:15:b9:2f:39:9b:82:25:9c:12:b1:db:
         93:69:42:eb:f1:08:62:91:f7:fe:20:50:df:04:d3:51:e3:4f:
         ad:1c:b6:1b:f5:dc:f8:5f:79:90:4a:6e:5c:fb:2a:f9:39:1b:
         68:e9:d8:27:d7:33:2d:1d:19:6c:d1:f3:99:78:34:cb:c6:eb:
         00:52:ea:83:90:2a:40:2e:b7:c8:70:8e:6d:27:b0:1a:82:e4:
         cc:03:2f:9f:09:b7:a1:29:96:50:bf:c4:0f:25:33:c3:12:f0:
         02:e8:cb:d0:97:10:92:53:f6:89:ba:7d:df:95:4c:a8:8c:89:
         0f:be:cc:93:4a:7c:dc:f1:5e:61:09:94:29:97:df:64:49:91:
         d4:bc:74:d6:de:af:02:08:95:7d:f9:5a:d7:53:fc:7c:a3:fa:
         df:44:28:14:ee:f1:31:f9:03:6a:5f:e4:6a:a7:13:1b:17:2c:
         80:69:c0:57
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfBeMIXllkHDCOoC7vhzXdQ45qxIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjE3MDAwMDAwWhcNMjUwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMzc3ZGZmNDhkZTI3YmIwMTQ2MmFhNzNmOWY1NTk1NzBk
MGNlMTQ0ZjRjZjhiYjljYjRiODhlZjhmYThlY2ZkMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcVg34uk9kyD5lUWIQlFcNJeHzuA9/dG0PIueRaOa7IbxF
x2Nix6UU36xsvlbNJyqZ5Mt4UJoEuVLbvNdytZJXmPz+kOqM5COXMBU/8vXLHL4N
BvtPA4+XXzKkSJ76W1g5pcVlmkgZTc0Yohol38CF+Lbatvp5Lr3sEcLF/fUkCYzE
MmLmg2xKIbWCDvXqBLD1U40EE0hC//0RQHrJXgA0r9WEbk9k2/24glsAL/hsuTJZ
SeiOMn/i3dvEC3Gnei6n3W/+MyGDgFzGB43lStqoEKCmvuYRgsGIoXnPtnXOhkyL
Hf8emBIb1f8LIc6m3q3gFprFLGjnBP7LeUCulZnLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU/yCzWQ4IKK/UOrQgPcG9jtklaYEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzRjNjNhYzQwLTMyMTAtNDQ2ZS04NzE3LWNlYjJiMzA5NzNmYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQP+FAwDQYJKoZIhvcNAQELBQADggEBAFpllITYZcjkAAeo0NR1LxxMNMdD
woXS+zOvszMVZfqhtxo+i5jNuGe9PZi1vd1oIaN4keiIviYvpNAnWnDNMNtl41pT
vR7/wsaXrS6RCzcVuS85m4IlnBKx25NpQuvxCGKR9/4gUN8E01HjT60cthv13Phf
eZBKblz7Kvk5G2jp2CfXMy0dGWzR85l4NMvG6wBS6oOQKkAut8hwjm0nsBqC5MwD
L58Jt6EpllC/xA8lM8MS8ALoy9CXEJJT9om6fd+VTKiMiQ++zJNKfNzxXmEJlCmX
32RJkdS8dNberwIIlX35WtdT/Hyj+t9EKBTu8TH5A2pf5GqnExsXLIBpwFc=
-----END CERTIFICATE-----