Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35cc6734-4f69-45c6-ac7a-055a47b4e6ae.roa
File:                     35cc6734-4f69-45c6-ac7a-055a47b4e6ae.roa (raw, json)
Hash identifier:          ZGetdUmC5nxMFIbXrT6gEFgga5jGCx2IKZDLhOD8Dog=
Subject key identifier:   8F:C9:44:37:88:EE:4A:87:7C:EC:57:ED:03:AA:4C:7D:99:8B:44:2D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       12483C8982315B6A353092426726AF50E4D0E220
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35cc6734-4f69-45c6-ac7a-055a47b4e6ae.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        16.74.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:48:3c:89:82:31:5b:6a:35:30:92:42:67:26:af:50:e4:d0:e2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=c893a04f6989fb813896ab3118ffa1e6aad6632cbcbd7bbae2cc7e57a593c443, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:df:cb:ba:fc:45:d2:5d:9f:2f:2a:19:8f:
                    99:77:ef:9f:c0:14:ad:ca:fa:ab:b3:2a:c6:ac:b1:
                    29:4f:7c:ed:ab:ba:1b:3c:f1:5d:8e:ea:b1:41:89:
                    a0:d2:04:37:38:4b:35:10:ec:a2:7f:59:9f:e7:a0:
                    a1:41:9c:81:44:40:d9:5a:72:74:5a:f1:34:b4:ac:
                    53:ce:a4:e5:32:be:3b:d3:07:ce:58:31:4c:19:c2:
                    53:c0:c9:c2:f8:50:e3:8b:e5:ed:5c:7f:8c:02:dc:
                    aa:d5:75:c3:57:76:80:d3:ff:8e:b3:3a:90:76:4f:
                    0c:50:a5:31:a6:12:5d:1d:85:18:f9:6d:0f:99:ec:
                    81:32:69:87:ad:a3:de:65:30:a3:21:b6:bb:bf:68:
                    0e:b6:f6:d4:f5:4a:34:87:ae:7f:41:c6:09:12:9a:
                    1c:18:1d:7e:58:e0:36:a4:1b:0e:4e:29:f7:9a:4f:
                    b5:31:f7:0d:e8:04:28:f2:0a:20:d6:89:3c:8b:c6:
                    65:69:e7:30:59:41:83:ec:9d:ed:1d:13:df:0d:49:
                    3c:29:91:de:45:8c:f9:8e:2d:6e:51:91:86:66:1b:
                    c7:fc:a1:08:73:64:27:70:2a:d1:81:f5:e3:15:2f:
                    14:39:5c:30:37:c0:b4:fe:58:20:79:d7:a8:2f:0d:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C9:44:37:88:EE:4A:87:7C:EC:57:ED:03:AA:4C:7D:99:8B:44:2D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35cc6734-4f69-45c6-ac7a-055a47b4e6ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.74.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:0a:0d:01:f7:86:a4:bd:fa:d9:21:cb:f7:0b:4d:ec:e0:
         23:69:80:49:d2:a2:08:49:79:c5:ca:0a:59:c2:68:fa:85:8a:
         ae:50:3c:83:e2:29:ba:11:34:40:79:f7:13:c1:39:24:8e:61:
         c2:9f:fe:be:61:72:1e:4e:40:7d:49:ff:91:4a:4b:65:65:8a:
         f1:07:87:79:1e:8e:dc:bd:85:6b:4e:15:81:49:0c:17:5f:82:
         cf:88:f5:50:0c:2f:fe:90:b7:b6:eb:6c:4f:76:38:e8:39:c4:
         6a:83:56:fd:45:c0:79:75:40:66:38:f4:ad:89:95:da:67:1e:
         e6:cb:dd:3d:d5:d9:d9:3f:a1:36:1b:4a:8f:31:ac:4e:be:76:
         bb:d2:9e:29:3e:32:ef:e2:ce:99:9b:9e:0e:16:f7:0a:b4:e7:
         f5:77:29:9a:85:a8:e8:27:91:ef:21:ba:27:17:07:fb:4a:d8:
         03:fc:b1:2e:a1:40:65:99:41:f4:e2:2d:7f:0c:ad:bd:9a:21:
         0c:c8:2f:df:a3:f4:a3:16:ab:ee:aa:cb:52:99:e0:06:db:4d:
         31:78:94:10:33:ba:91:c9:e9:08:da:03:f7:2f:9f:40:ef:0c:
         af:84:e2:be:62:96:99:3e:a2:fd:d6:21:df:d0:37:12:63:4f:
         f9:cb:7f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----