Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03a12bc2-29e5-4362-aba5-86f2ab1db80f.roa
File:                     03a12bc2-29e5-4362-aba5-86f2ab1db80f.roa (raw, json)
Hash identifier:          FcZULsz3DfrKOFu7qphtHeUPlqiLY0JaTh7Ln2FXAik=
Subject key identifier:   5B:A6:65:FB:52:D7:6D:38:46:68:B3:EB:E3:C1:C9:E3:4C:7C:93:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3CD327636FDC2B7DF962C0129931DDE2127761D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03a12bc2-29e5-4362-aba5-86f2ab1db80f.roa
Signing time:             Mon 17 Feb 2025 15:41:27 +0000
ROA not before:           Mon 17 Feb 2025 15:41:27 +0000
ROA not after:            Mon 24 Mar 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f30:80c0::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d3:27:63:6f:dc:2b:7d:f9:62:c0:12:99:31:dd:e2:12:77:61:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 17 15:41:27 2025 GMT
            Not After : Mar 24 23:59:59 2025 GMT
        Subject: serialNumber=e32e997d271db4162e7bda8472d3fcedd2853ddd3e906845fe71745adbf38ef1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b3:d9:d5:07:77:45:f6:ff:3f:fd:14:16:a5:
                    36:52:b8:3e:5c:9c:aa:5b:8c:50:33:ec:86:3a:fe:
                    63:d3:8e:5b:c7:27:b1:0c:ce:de:d7:d8:69:d0:e7:
                    d1:26:9c:71:2e:3d:d2:3f:10:82:66:c6:d9:38:27:
                    20:b8:4e:04:1b:ea:59:45:2a:ce:19:74:9f:1c:90:
                    15:a4:09:7e:a4:7c:af:f9:59:aa:bb:9c:14:99:a4:
                    c8:ab:f7:36:e6:28:44:d1:e7:7f:f8:13:42:84:e9:
                    11:af:2b:d4:81:0b:d2:96:4d:0e:f1:f3:63:fd:5f:
                    e7:49:eb:1b:f4:f7:e9:77:55:da:16:c4:41:01:28:
                    ac:17:5e:f5:d6:18:65:68:03:94:7b:99:95:84:38:
                    a9:79:5a:81:e4:d2:f9:ee:db:62:5a:55:95:f5:6e:
                    78:f6:3e:c8:23:93:4e:ed:07:9c:e4:dc:0e:2b:43:
                    d1:8c:07:0d:0f:cf:49:b4:b4:41:06:5d:74:2b:28:
                    ec:78:3e:80:8e:75:d4:f3:dd:5a:2c:f1:ef:ca:91:
                    c7:2b:3f:3e:d6:6e:0b:fe:eb:be:17:4e:c1:97:dc:
                    cb:74:3d:21:7e:57:8c:f8:8c:c5:cc:ab:86:4f:a7:
                    32:d2:fd:29:bc:a0:19:c0:02:37:0b:2a:8a:f6:07:
                    50:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A6:65:FB:52:D7:6D:38:46:68:B3:EB:E3:C1:C9:E3:4C:7C:93:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03a12bc2-29e5-4362-aba5-86f2ab1db80f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f30:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:35:f2:ea:c4:9c:05:b6:df:bb:75:cd:3e:b6:07:fa:6c:32:
         d8:54:f6:08:08:a6:cf:8d:98:70:8e:83:36:89:cb:f5:34:68:
         c2:c2:76:c9:5a:b6:7f:9a:b0:a2:e4:a4:f6:0c:f4:11:f5:7a:
         8a:f4:7d:bb:34:50:f7:5e:56:e0:c8:65:1c:0c:65:38:2e:0e:
         27:a8:ea:90:14:3b:5d:7b:a1:5a:02:26:7c:d8:bd:92:59:9b:
         6f:19:2e:7f:60:23:b8:ca:c0:fb:7e:f0:b2:dc:fa:18:16:04:
         51:83:a4:24:8b:9d:7f:ef:aa:bb:9a:1d:44:35:09:6c:dd:49:
         ec:28:5d:fb:9d:b3:45:c9:82:cf:68:bf:05:cd:76:4c:f9:7e:
         36:94:a3:07:2b:7c:93:1b:a3:7f:1b:26:c6:39:95:64:ab:38:
         8c:1c:1c:39:ed:a8:ac:30:13:97:3b:9e:bd:21:d5:9a:5c:a8:
         32:02:92:ff:fb:f8:7e:da:0b:97:b2:d2:98:96:13:f7:e0:dd:
         0a:66:e1:f2:cd:28:4c:d5:98:97:ea:c9:b6:1c:46:0b:6f:97:
         26:ad:b4:f4:a6:60:1e:96:62:65:21:70:b2:fd:c6:19:1e:a9:
         7e:1f:03:b6:09:ba:2e:ff:d7:36:28:11:5c:0d:97:d2:1b:12:
         1c:0d:ad:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----