Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40cfe69e-1046-4bff-bd97-84448fb80390.roa
File:                     40cfe69e-1046-4bff-bd97-84448fb80390.roa (raw, json)
Hash identifier:          A+DhSzRyocrpklwgHKe00cmcCcmd1jLUQLUGYMRR64E=
Subject key identifier:   F3:1C:9E:70:29:EC:D5:4E:01:53:61:C9:DF:D1:63:72:13:5F:B8:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       093845B074A2306EE8F5C96AFA95F1D0BABF4F4D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40cfe69e-1046-4bff-bd97-84448fb80390.roa
Signing time:             Mon 23 Dec 2024 00:00:00 +0000
ROA not before:           Mon 23 Dec 2024 00:00:00 +0000
ROA not after:            Mon 27 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        54.137.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:38:45:b0:74:a2:30:6e:e8:f5:c9:6a:fa:95:f1:d0:ba:bf:4f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 23 00:00:00 2024 GMT
            Not After : Jan 27 23:59:59 2025 GMT
        Subject: serialNumber=d90ad269c3707b98ca18048c89d4d2f0bc5c0e8696eacd3243a654fe9aaa4064, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:03:29:e1:c2:42:4c:a2:19:e0:93:d2:49:
                    38:b3:6e:84:75:80:dc:9c:32:72:3a:4e:26:03:4b:
                    25:5d:56:ff:f1:e6:7d:89:d8:a0:16:2b:99:24:04:
                    f5:bf:dc:e2:88:c7:57:ac:ad:1c:ba:9a:b8:fe:8a:
                    62:80:d7:af:04:7c:6c:cd:aa:47:f1:04:48:4a:b8:
                    1b:97:5f:40:bf:6e:5f:d8:dc:05:b1:d3:1a:b2:5e:
                    4b:2b:e3:25:cd:ff:bc:50:fb:f9:27:80:ea:4b:ea:
                    c8:0e:99:0d:fb:47:2c:1a:d6:69:a6:1a:d9:a0:28:
                    4b:71:eb:3e:c0:95:e9:b7:0f:36:65:74:c7:6a:c2:
                    ea:a6:36:5a:33:49:75:de:ed:b1:86:31:51:a4:08:
                    8a:06:a5:31:0e:b8:9f:ab:3a:43:6f:38:ad:f9:09:
                    1d:9f:bd:6a:bd:f4:8d:c3:73:af:a5:0b:82:46:4a:
                    4a:a9:e5:1f:fa:30:1f:26:75:1b:27:46:98:f9:c5:
                    2a:23:e9:ad:55:05:da:57:1d:1f:33:a8:a2:a3:2f:
                    a6:be:e9:cc:9a:38:bc:3b:60:98:e9:7c:32:02:98:
                    19:6d:44:e7:60:0d:3c:43:7a:24:08:65:cd:50:a8:
                    6a:ff:f4:a7:ac:9a:b1:00:cc:71:96:35:8f:98:fd:
                    13:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1C:9E:70:29:EC:D5:4E:01:53:61:C9:DF:D1:63:72:13:5F:B8:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40cfe69e-1046-4bff-bd97-84448fb80390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:bb:a5:55:6d:47:91:ff:04:1f:6b:d0:e2:74:be:d0:c9:9d:
         03:5a:d4:fe:d8:e5:78:a2:dd:aa:67:e1:db:a6:1c:70:24:c0:
         34:e7:86:2f:be:39:53:9a:43:35:06:0e:d9:04:66:0f:1a:68:
         00:f9:c4:9e:37:f9:ea:f4:73:ef:68:c5:d8:fd:d8:8b:cf:33:
         58:af:16:c6:49:78:0d:99:14:45:bf:af:03:5f:81:20:4f:c5:
         1d:fc:b3:bc:48:54:6b:ab:87:41:e6:5c:f5:55:2f:74:a2:38:
         e1:d4:31:77:74:55:fb:b6:e1:4f:c7:36:d3:e8:f7:9a:86:6f:
         52:03:88:29:6a:f4:a5:36:8b:db:d2:8d:86:95:59:38:31:29:
         d0:d7:f9:dd:37:8a:e5:e1:4b:7b:4a:c7:cf:c0:1f:cd:97:7a:
         85:e7:cb:fa:96:08:c6:a4:81:ad:6d:44:34:0a:bd:b9:fc:b7:
         76:3c:48:4f:32:de:6c:dd:c3:62:b8:70:d6:97:f7:56:79:4b:
         a3:d1:a1:df:47:50:b8:87:40:c6:87:4d:85:01:c1:8c:d9:84:
         5f:89:c4:0e:ed:08:d0:1c:96:31:28:fc:ea:c6:1e:a6:da:44:
         2a:b8:cf:c0:78:fe:09:c1:55:63:a5:46:f9:79:cf:4a:99:16:
         67:11:14:97
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUCThFsHSiMG7o9clq+pXx0Lq/T00wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjIzMDAwMDAwWhcNMjUwMTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTBhZDI2OWMzNzA3Yjk4Y2ExODA0OGM4OWQ0ZDJmMGJj
NWMwZTg2OTZlYWNkMzI0M2E2NTRmZTlhYWE0MDY0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6LwMp4cJCTKIZ4JPSSTizboR1gNycMnI6TiYDSyVdVv/x
5n2J2KAWK5kkBPW/3OKIx1esrRy6mrj+imKA168EfGzNqkfxBEhKuBuXX0C/bl/Y
3AWx0xqyXksr4yXN/7xQ+/kngOpL6sgOmQ37Rywa1mmmGtmgKEtx6z7Alem3DzZl
dMdqwuqmNlozSXXe7bGGMVGkCIoGpTEOuJ+rOkNvOK35CR2fvWq99I3Dc6+lC4JG
Skqp5R/6MB8mdRsnRpj5xSoj6a1VBdpXHR8zqKKjL6a+6cyaOLw7YJjpfDICmBlt
ROdgDTxDeiQIZc1QqGr/9KesmrEAzHGWNY+Y/ROJAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU8xyecCns1U4BU2HJ39FjchNfuNgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQwY2ZlNjllLTEwNDYtNGJmZi1iZDk3LTg0NDQ4ZmI4MDM5MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2iTANBgkqhkiG9w0BAQsFAAOCAQEAALulVW1Hkf8EH2vQ4nS+0MmdA1rU
/tjleKLdqmfh26YccCTANOeGL745U5pDNQYO2QRmDxpoAPnEnjf56vRz72jF2P3Y
i88zWK8Wxkl4DZkURb+vA1+BIE/FHfyzvEhUa6uHQeZc9VUvdKI44dQxd3RV+7bh
T8c20+j3moZvUgOIKWr0pTaL29KNhpVZODEp0Nf53TeK5eFLe0rHz8AfzZd6hefL
+pYIxqSBrW1ENAq9ufy3djxITzLebN3DYrhw1pf3VnlLo9Gh30dQuIdAxodNhQHB
jNmEX4nEDu0I0ByWMSj86sYeptpEKrjPwHj+CcFVY6VG+XnPSpkWZxEUlw==
-----END CERTIFICATE-----