Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17da4153-7173-48e6-bd3f-f7e30fc37a90.roa
File:                     17da4153-7173-48e6-bd3f-f7e30fc37a90.roa (raw, json)
Hash identifier:          X45X2MRfHxEOSBB9IBFjopKqxrK++rnxVDerXBG8RSg=
Subject key identifier:   46:01:DB:58:E5:20:03:2F:FD:AC:7D:55:D8:DA:AD:47:64:62:54:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C645C9BAD21E4586084FCD609D858C4BC64452B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17da4153-7173-48e6-bd3f-f7e30fc37a90.roa
Signing time:             Fri 20 Dec 2024 00:00:00 +0000
ROA not before:           Fri 20 Dec 2024 00:00:00 +0000
ROA not after:            Fri 24 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        40.180.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:64:5c:9b:ad:21:e4:58:60:84:fc:d6:09:d8:58:c4:bc:64:45:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 20 00:00:00 2024 GMT
            Not After : Jan 24 23:59:59 2025 GMT
        Subject: serialNumber=ede945bb2a68c8f887e93cb29e85c2a20c5893c1de3cbf5650d562039782a2a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:bc:7f:b3:a1:eb:79:c6:1f:44:8d:5a:df:
                    20:30:54:ab:3c:5c:ee:9b:40:d4:c5:a0:7d:9e:ee:
                    d8:82:ac:44:3f:85:27:1e:a7:b6:d7:5d:c6:08:71:
                    13:e5:15:eb:2b:34:5b:b1:1e:32:f7:bb:37:a4:ed:
                    cc:48:4c:f3:77:e9:6c:2b:25:2d:dc:3a:bc:6f:ff:
                    80:b8:47:5b:f8:d0:6b:37:b7:73:90:06:a4:9e:58:
                    dd:cd:fb:74:a7:02:76:c3:e5:4c:da:14:0a:92:39:
                    c7:73:14:dd:5c:b3:fd:ed:86:19:67:d4:d0:42:07:
                    5e:bf:6f:c8:74:fc:7e:c2:8c:fe:f3:07:dd:70:12:
                    1b:ed:29:02:f8:ff:20:bb:5b:8e:7b:58:2f:8f:21:
                    cb:a0:f7:08:a4:ba:19:09:36:84:37:ea:33:ca:18:
                    fd:af:88:8a:32:a2:1b:2d:73:ed:48:3b:cb:36:a4:
                    dc:3e:27:81:fe:b9:60:38:40:7a:4e:83:a8:d7:59:
                    8e:b6:78:df:bb:fe:28:33:6c:54:f9:15:9e:10:f4:
                    af:6f:1b:73:0f:d1:ee:dd:de:79:4c:ad:58:65:90:
                    1e:47:5d:6e:07:b5:03:5d:5c:17:11:7a:4d:63:50:
                    8c:3b:40:95:f2:af:69:e1:b9:06:0b:4b:92:2d:ac:
                    ef:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:01:DB:58:E5:20:03:2F:FD:AC:7D:55:D8:DA:AD:47:64:62:54:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17da4153-7173-48e6-bd3f-f7e30fc37a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.180.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:d9:b4:47:80:4f:9d:b5:af:4e:e3:56:8c:f8:4e:fb:c6:5f:
         34:d5:bf:4f:cd:4c:ec:25:53:b2:05:da:f0:46:30:c7:68:5f:
         a3:56:cb:fd:9e:2c:b2:36:a3:ed:20:3c:ca:c1:56:1e:38:4a:
         91:a1:59:bd:ea:2a:69:e4:9e:ce:9b:42:61:e1:6a:69:d7:23:
         c1:4c:40:c6:93:e3:99:0a:37:dd:b7:86:db:87:99:ef:5c:f4:
         3b:7e:11:05:1f:b0:f9:1e:7c:07:a7:48:66:84:ef:74:4b:e3:
         74:cf:36:8a:23:07:0e:a7:bc:6f:d2:fb:ed:b2:9e:0c:0f:dd:
         15:e0:03:d0:21:95:ed:07:62:12:fb:90:73:70:53:2d:4b:45:
         b6:c5:33:a4:f9:84:76:da:ba:82:d1:62:c8:02:72:a0:61:47:
         19:17:2d:f0:d7:32:27:fe:73:80:de:12:68:59:2d:e9:37:b4:
         a4:3b:1a:e7:28:f0:0d:3e:f7:c0:72:22:0b:b7:c2:2c:64:9f:
         73:a5:71:c9:0a:76:80:a3:fb:89:7d:30:5f:4b:22:0d:16:27:
         21:f7:17:f5:ff:7e:80:1b:cc:65:1b:7d:81:5c:8d:ae:e2:2b:
         81:e2:40:97:a3:b1:d4:5e:3a:4e:0c:8f:6e:93:ff:15:7e:fd:
         a3:b4:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----