Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/351e2e4c-e16d-4cc8-b545-bfbd4e14140e.roa
File:                     351e2e4c-e16d-4cc8-b545-bfbd4e14140e.roa (raw, json)
Hash identifier:          yYghZW3QGnTq/R0vVYLMx2DuKdhi3QS2cf7ccT7CFUo=
Subject key identifier:   0F:26:D8:31:DE:3C:DB:04:77:AA:38:02:5F:FC:C6:DF:EA:7E:16:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D0669F2FF69F7D52F2C70EAB9669ABE5C72FF57
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/351e2e4c-e16d-4cc8-b545-bfbd4e14140e.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f68:4000::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:06:69:f2:ff:69:f7:d5:2f:2c:70:ea:b9:66:9a:be:5c:72:ff:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=51832ec56f71d28f1fac4714e31b22d8e59167e73eb35dfb8b630a6a6b2eb31e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:87:92:ee:5d:ed:7d:9e:ec:20:0c:a5:7e:22:
                    31:7f:d3:23:c0:d6:52:07:37:62:e5:03:83:2d:29:
                    a0:ae:a4:b4:5e:be:02:21:25:80:30:39:8e:b9:9f:
                    a0:95:c4:87:26:78:6b:ed:b4:a8:e5:1a:1b:b9:d6:
                    86:1b:65:88:97:2a:41:f4:7f:2a:43:25:c2:a5:e2:
                    60:4d:71:97:56:f2:f3:d7:60:0b:da:50:e7:1c:93:
                    80:9e:7a:2f:d2:6b:e1:3d:5c:ba:d9:d8:3d:0f:df:
                    99:95:a6:31:d2:ae:83:be:71:78:09:4f:c8:05:78:
                    32:d4:c6:20:58:31:8d:5d:fc:d6:af:4a:45:4a:10:
                    d0:d1:0a:a2:e3:3b:e7:94:8e:b6:74:e5:dd:c6:4f:
                    cf:36:84:68:88:ab:34:d6:9c:3b:68:19:31:bb:76:
                    fa:d4:e8:3f:37:26:71:18:4a:e1:83:d1:83:8e:f6:
                    48:3e:c6:ae:9e:37:4e:f4:58:c9:7b:33:e8:b0:30:
                    1c:76:40:48:8e:76:c2:64:d3:50:45:db:2c:31:e0:
                    97:7b:bb:8a:57:51:73:f0:8d:a2:1c:b0:2d:d9:18:
                    b2:04:c8:fa:63:d3:75:a9:cf:0b:19:4e:e8:09:ef:
                    42:96:9a:cb:fc:95:7a:68:07:4d:80:da:93:61:6a:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:26:D8:31:DE:3C:DB:04:77:AA:38:02:5F:FC:C6:DF:EA:7E:16:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/351e2e4c-e16d-4cc8-b545-bfbd4e14140e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f68:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:d7:d7:16:b7:1a:e0:1e:9c:20:f3:7c:bf:93:9a:7e:4f:40:
         f3:c9:d8:06:e8:3c:78:08:73:25:29:6a:7c:32:0b:4f:dd:d4:
         1c:b1:3e:85:f9:4f:ee:89:cf:42:e9:66:7b:69:a4:73:c9:c1:
         aa:f6:5f:a3:01:2d:e0:c8:1b:8f:c8:55:3b:7f:2a:5e:36:7d:
         ab:f2:c9:a9:01:be:55:05:60:a8:52:9a:ea:65:1f:cf:b8:50:
         b2:25:38:63:ee:6d:f2:19:3b:fa:a9:1f:12:86:ca:15:cf:66:
         45:f2:c0:28:c7:ec:75:3a:8c:68:66:07:1c:a2:de:8e:ac:82:
         73:c7:2a:40:97:71:7d:5a:f3:b2:08:2a:07:b2:25:eb:30:2e:
         15:8e:89:65:90:9f:88:2d:09:8c:87:05:b7:96:f7:89:1d:46:
         4c:c6:a1:42:c3:fe:9e:8a:cc:64:8d:57:f5:6f:fe:92:c2:44:
         8a:f4:35:fb:fa:5f:db:93:fd:38:4b:95:03:db:9c:75:ab:07:
         cc:fd:2c:e9:6c:7b:83:17:dd:25:67:22:5d:b3:cd:22:02:e7:
         aa:c6:fc:24:cf:51:4f:5d:d7:02:af:21:5d:80:e0:85:6d:3e:
         96:7a:5b:35:c7:7c:f0:9d:8c:0f:ba:c9:d8:ea:c1:e5:2f:63:
         9f:ae:09:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----