Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05b73f8e-c0f8-4c8f-864d-45c7b0cf3156.roa
File:                     05b73f8e-c0f8-4c8f-864d-45c7b0cf3156.roa (raw, json)
Hash identifier:          WqcM/O83ZJNqvUwczGbN8fbtlahZJ5z9kPk8nxs6UQI=
Subject key identifier:   4D:75:B1:51:EB:68:C7:3E:91:6F:37:8E:FF:FE:D8:CE:15:78:9E:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D31FF98D41DD036924FC615A09D98ECCDAF175C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05b73f8e-c0f8-4c8f-864d-45c7b0cf3156.roa
Signing time:             Sat 28 Dec 2024 00:00:00 +0000
ROA not before:           Sat 28 Dec 2024 00:00:00 +0000
ROA not after:            Sat 01 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        16.106.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:31:ff:98:d4:1d:d0:36:92:4f:c6:15:a0:9d:98:ec:cd:af:17:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 28 00:00:00 2024 GMT
            Not After : Feb  1 23:59:59 2025 GMT
        Subject: serialNumber=8943efec8bcba8a6b1270763795bf1f30b3857ea68b5a3b4fb794295e5558966, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:89:88:f7:60:13:e1:51:9a:87:c4:ea:78:1e:
                    06:17:5f:9b:3a:3d:98:e0:1a:d9:00:bc:51:5d:9a:
                    dc:64:a3:b9:27:bc:3e:d1:87:42:d1:82:d1:da:28:
                    13:00:9e:00:81:97:b6:38:fa:a0:cd:ba:cc:15:b3:
                    69:d0:cc:0f:05:55:21:e6:55:96:70:be:93:a3:0c:
                    68:b2:94:91:4b:50:d5:0b:82:e9:67:bd:f3:b5:99:
                    41:a2:b7:4f:e7:fc:36:99:9c:8b:8d:09:16:35:b1:
                    6d:b3:4c:ed:55:ca:88:f5:e7:4e:ea:44:ae:eb:4f:
                    4e:89:74:2d:a1:d5:ed:0a:71:75:94:38:e7:a3:8c:
                    ca:cb:fe:9b:a3:7b:6b:e1:93:ea:ea:13:a5:f2:26:
                    91:9c:f6:7e:00:1b:3a:a8:71:e9:ac:27:f7:38:42:
                    23:b0:c0:8d:fe:a9:45:5f:f6:de:ab:5b:91:c8:e3:
                    d5:11:e5:a9:1d:81:8f:96:e4:d0:e6:4b:80:b7:31:
                    bb:f6:30:6e:75:55:40:45:93:4e:e9:5c:a9:43:5d:
                    a5:8d:63:73:c5:1f:7e:1d:f9:06:ac:88:d2:6a:21:
                    69:45:67:12:60:f4:39:18:05:c9:ea:93:11:b2:e7:
                    31:9a:cb:25:38:ae:6f:4f:72:23:6a:93:4a:b4:a1:
                    86:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:75:B1:51:EB:68:C7:3E:91:6F:37:8E:FF:FE:D8:CE:15:78:9E:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05b73f8e-c0f8-4c8f-864d-45c7b0cf3156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b9:0a:a4:14:cc:37:16:4e:2e:ef:9a:b9:cd:42:51:0f:17:a9:
         d8:2f:48:4d:73:3a:a5:f9:0d:cb:43:67:1b:32:3b:5b:55:3e:
         11:a6:f5:97:9e:72:e8:06:f8:f5:fa:49:39:15:f8:b0:2a:40:
         07:3c:49:fa:fb:6e:74:03:18:c1:ff:8c:53:ce:2b:73:b9:e8:
         8e:14:4f:76:02:93:88:a5:62:4f:2e:9b:4b:47:d2:b2:74:f0:
         f7:1a:a6:9c:59:9f:a0:9e:90:cb:81:b6:49:6e:7b:ce:21:5a:
         ac:b4:60:bb:08:1f:df:7d:cd:aa:94:5a:46:d1:7c:4a:2b:8b:
         28:16:20:3f:39:1b:44:52:0b:ee:f1:52:77:8c:79:10:32:03:
         e5:75:90:e0:79:e5:ba:a7:f5:eb:22:af:b0:90:41:8f:d8:e1:
         e3:f1:bf:d4:a8:e6:58:50:62:2d:77:2b:c7:8e:9e:9e:e7:5c:
         f3:c3:63:36:a8:fd:11:28:6d:cd:0c:59:33:48:65:92:b5:33:
         9c:46:6d:92:2e:f1:3d:ad:3f:cf:bf:08:03:5c:26:1c:76:a0:
         c6:44:53:a1:2c:d7:17:ff:cd:5f:cb:45:6e:ad:f5:03:d1:41:
         8b:3c:6a:74:f9:e1:56:7e:84:4f:10:fd:7c:6d:08:51:ef:af:
         b7:b7:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----