Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/371abb2d-8fc9-4ddb-8dcb-0082ee8335cd.roa
File:                     371abb2d-8fc9-4ddb-8dcb-0082ee8335cd.roa (raw, json)
Hash identifier:          hCWqnA0Z7j2tB3uL8Yl/E935HjhjpxrUM++t0Tgc5gs=
Subject key identifier:   67:8A:C6:CC:90:D2:1A:A0:D6:5E:78:E9:98:37:15:75:09:FA:B3:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59269DFAA14F61D9A25551D111BC8E22CD6C9C2A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/371abb2d-8fc9-4ddb-8dcb-0082ee8335cd.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        56.56.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:26:9d:fa:a1:4f:61:d9:a2:55:51:d1:11:bc:8e:22:cd:6c:9c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=64d9c2396c3c0c0cbffdcea342972df6a79e2b32c4680614abe08aeea0707e5b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:15:f2:bb:f5:07:fa:f3:c7:68:48:85:5c:
                    00:ac:88:80:ed:65:8a:81:56:cc:89:87:8b:2a:8d:
                    c4:88:61:0f:d3:20:dd:77:e1:56:fd:58:5d:c7:c4:
                    f2:a9:60:ea:99:51:69:21:d8:fa:70:11:54:49:dd:
                    8d:88:d4:f0:e9:58:ed:c9:20:0e:de:ce:68:92:28:
                    c9:36:a4:99:57:bb:a7:78:13:74:ee:c2:b5:b4:2f:
                    d0:ec:33:b8:1f:46:54:4c:27:54:f4:15:07:d3:91:
                    71:cd:01:87:7d:51:cb:3f:a3:39:4d:d3:f9:f2:b4:
                    ee:0d:78:2c:29:fe:24:1c:e9:0f:8f:24:de:7a:53:
                    51:c7:dd:24:89:47:77:62:d9:4f:60:03:13:fa:e5:
                    b1:23:fa:49:11:42:a1:1b:36:57:11:1e:7b:50:93:
                    e4:d9:c3:68:4d:90:15:15:98:41:78:67:0e:ad:2e:
                    bc:55:a2:d1:1c:1b:5c:fd:fe:38:16:9a:ef:3c:46:
                    ab:6d:0f:86:65:74:3d:f3:b1:71:dd:f2:2a:32:e9:
                    e9:e7:78:d3:d4:1f:ff:d4:51:f9:14:44:b0:03:f9:
                    11:11:15:4b:70:f6:4d:c4:eb:fe:af:56:4a:d3:cf:
                    23:d8:e9:a4:8c:27:b9:eb:36:db:1a:50:18:89:2d:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8A:C6:CC:90:D2:1A:A0:D6:5E:78:E9:98:37:15:75:09:FA:B3:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/371abb2d-8fc9-4ddb-8dcb-0082ee8335cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.56.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:f4:f8:e5:42:82:ee:1d:14:92:9c:93:6d:e5:80:4e:c5:c1:
         67:09:06:41:81:fd:8f:0c:4e:41:63:68:ef:73:68:cf:52:4b:
         ef:11:1c:1f:fe:16:43:82:97:d5:6a:1b:db:c1:1b:d0:6d:6a:
         8b:a8:f1:8a:7b:41:76:42:4b:a0:98:2c:e7:27:ae:a6:7f:6b:
         83:67:7c:58:93:28:bf:d0:bb:22:31:d7:a6:8e:a2:50:be:e0:
         0c:7d:f4:21:fe:8d:8c:9c:d1:72:c1:5d:03:21:7c:7e:55:2c:
         b4:53:d9:e0:98:44:f0:56:36:78:2a:10:0e:12:6c:35:f6:de:
         37:09:e0:d4:d3:3f:db:48:30:c5:9d:f9:39:2e:23:62:c2:28:
         ab:c2:d9:58:0e:86:c8:1c:3e:27:31:42:37:87:45:bc:ed:7a:
         1e:dd:f0:b8:d5:53:0b:96:39:00:42:14:38:63:e7:eb:ab:a2:
         75:33:ca:78:23:a3:8e:8c:2d:95:09:e3:d9:d9:c4:47:f5:e4:
         12:6d:c8:c2:ff:2c:5c:fd:ac:54:18:d4:ce:da:79:cc:cc:51:
         e2:c1:53:a3:0b:9c:a0:03:4a:a2:6d:d0:b8:59:96:65:7a:87:
         ee:1d:d0:a5:d0:b5:c6:02:1c:52:46:5a:f9:70:85:7b:0e:d1:
         a1:50:38:10
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUWSad+qFPYdmiVVHREbyOIs1snCowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2NGQ5YzIzOTZjM2MwYzBjYmZmZGNlYTM0Mjk3MmRmNmE3
OWUyYjMyYzQ2ODA2MTRhYmUwOGFlZWEwNzA3ZTViMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEIBXyu/UH+vPHaEiFXACsiIDtZYqBVsyJh4sqjcSIYQ/T
IN134Vb9WF3HxPKpYOqZUWkh2PpwEVRJ3Y2I1PDpWO3JIA7ezmiSKMk2pJlXu6d4
E3TuwrW0L9DsM7gfRlRMJ1T0FQfTkXHNAYd9Ucs/ozlN0/nytO4NeCwp/iQc6Q+P
JN56U1HH3SSJR3di2U9gAxP65bEj+kkRQqEbNlcRHntQk+TZw2hNkBUVmEF4Zw6t
LrxVotEcG1z9/jgWmu88RqttD4ZldD3zsXHd8ioy6enneNPUH//UUfkURLAD+RER
FUtw9k3E6/6vVkrTzyPY6aSMJ7nrNtsaUBiJLRDbAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUZ4rGzJDSGqDWXnjpmDcVdQn6s3YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM3MWFiYjJkLThmYzktNGRkYi04ZGNiLTAwODJlZTgzMzVjZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4ODANBgkqhkiG9w0BAQsFAAOCAQEAc/T45UKC7h0UkpyTbeWATsXBZwkG
QYH9jwxOQWNo73Noz1JL7xEcH/4WQ4KX1Wob28Eb0G1qi6jxintBdkJLoJgs5yeu
pn9rg2d8WJMov9C7IjHXpo6iUL7gDH30If6NjJzRcsFdAyF8flUstFPZ4JhE8FY2
eCoQDhJsNfbeNwng1NM/20gwxZ35OS4jYsIoq8LZWA6GyBw+JzFCN4dFvO16Ht3w
uNVTC5Y5AEIUOGPn66uidTPKeCOjjowtlQnj2dnER/XkEm3Iwv8sXP2sVBjUztp5
zMxR4sFTowucoANKom3QuFmWZXqH7h3QpdC1xgIcUkZa+XCFew7RoVA4EA==
-----END CERTIFICATE-----