Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44d84e76-eaa5-443c-a974-424c96b51ff4.roa
File:                     44d84e76-eaa5-443c-a974-424c96b51ff4.roa (raw, json)
Hash identifier:          KQsFxF3lmx5E4zCq1eFz7NKKxYTnhVyMJ9w3HKjC2cg=
Subject key identifier:   41:D3:9D:1C:79:2A:A3:CD:8B:D5:A3:D1:3F:4E:27:A6:17:95:8F:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       698FD5A10687FBDB211D21B2B8A270BD463633D4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44d84e76-eaa5-443c-a974-424c96b51ff4.roa
Signing time:             Sat 15 Mar 2025 00:30:26 +0000
ROA not before:           Sat 15 Mar 2025 00:30:26 +0000
ROA not after:            Sat 19 Apr 2025 23:59:59 +0000
asID:                     19047
IP address blocks:        70.130.193.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8f:d5:a1:06:87:fb:db:21:1d:21:b2:b8:a2:70:bd:46:36:33:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 15 00:30:26 2025 GMT
            Not After : Apr 19 23:59:59 2025 GMT
        Subject: serialNumber=1cd0f4f082b0381f521893ac6dbea1432fcabbb2e2941ee85457eaf043b1d7aa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:30:4c:44:96:86:79:16:4c:fc:18:01:78:ae:
                    cc:ad:16:73:c3:49:4c:62:5f:38:c3:8f:29:3b:e3:
                    33:72:69:4c:68:a5:06:ce:b9:34:81:af:74:42:57:
                    06:f0:b9:4f:ea:21:77:95:a3:63:76:ca:9c:7f:35:
                    fa:85:d6:31:eb:de:d1:2e:f9:41:92:ce:33:14:08:
                    5e:06:38:34:57:52:17:f1:14:4b:b3:34:cd:20:e7:
                    8c:1d:c6:eb:64:1e:50:3a:92:73:64:8e:7f:82:e3:
                    e8:8d:28:f6:a4:60:93:1c:fb:67:ca:ec:0f:73:73:
                    8b:61:1a:e3:23:75:0a:fd:47:62:3c:b2:5a:04:00:
                    06:9e:73:ef:9a:3c:fb:9b:68:54:68:9d:ff:e1:79:
                    19:f6:d4:7c:b6:a9:da:ce:e2:73:9d:c4:ff:da:9b:
                    bc:63:39:a3:e5:8d:1f:c8:21:e0:b7:54:57:e3:33:
                    33:60:7d:df:df:2e:a8:9e:c9:29:72:c9:01:9f:a5:
                    12:d6:ae:f7:0f:c1:4b:82:81:15:04:bd:95:d7:8e:
                    54:c0:11:5f:4a:4b:8d:c1:fd:4a:4f:d5:30:c4:52:
                    c8:b9:63:70:7c:d3:14:a6:66:4b:5c:37:be:b6:fb:
                    d1:8d:ab:8c:aa:b9:25:4e:62:07:30:c2:3d:96:f8:
                    97:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D3:9D:1C:79:2A:A3:CD:8B:D5:A3:D1:3F:4E:27:A6:17:95:8F:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44d84e76-eaa5-443c-a974-424c96b51ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:cf:b4:1a:ec:24:de:20:06:6a:66:ad:5a:21:5b:55:42:5a:
         bc:81:9f:42:86:13:83:37:cf:f8:2b:16:c8:1c:54:49:a4:e2:
         6b:6f:85:8d:58:31:4b:c5:51:55:01:17:b5:65:aa:b5:f9:a8:
         d0:03:a0:66:bc:6e:70:93:65:a6:bc:a6:99:7e:36:04:52:97:
         df:62:6f:ee:2d:dc:6c:e3:0d:87:36:21:c3:19:37:bc:53:56:
         c2:31:2e:f2:22:9c:38:13:65:9e:73:1b:62:0f:a5:4e:bf:9d:
         15:22:bd:aa:90:4d:f5:16:88:d3:0f:73:8b:44:3a:0d:74:5a:
         9b:b2:c5:25:aa:cc:eb:55:26:d2:5e:cb:51:04:61:07:b0:5f:
         58:20:88:0e:30:10:08:1b:c4:10:9c:68:71:7d:18:64:0f:ee:
         c3:a5:4c:ad:da:14:e6:e7:ba:f7:99:b3:2f:78:5e:62:a5:4a:
         14:53:f0:9d:a0:fd:50:74:3b:c1:79:a7:47:a5:cc:3c:66:c8:
         61:09:18:a2:68:9a:c6:76:7d:dc:94:a3:a0:72:fb:16:1a:0e:
         c9:f5:7b:9b:b0:06:cf:c7:70:39:40:07:10:5d:7f:ce:b3:f8:
         bf:f4:78:51:2b:6e:bf:68:c3:e6:8c:d3:23:81:ea:db:45:53:
         19:83:b9:10
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaY/VoQaH+9shHSGyuKJwvUY2M9QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE1MDAzMDI2WhcNMjUwNDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0AxY2QwZjRmMDgyYjAzODFmNTIxODkzYWM2ZGJlYTE0MzJm
Y2FiYmIyZTI5NDFlZTg1NDU3ZWFmMDQzYjFkN2FhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNMExEloZ5Fkz8GAF4rsytFnPDSUxiXzjDjyk74zNyaUxo
pQbOuTSBr3RCVwbwuU/qIXeVo2N2ypx/NfqF1jHr3tEu+UGSzjMUCF4GODRXUhfx
FEuzNM0g54wdxutkHlA6knNkjn+C4+iNKPakYJMc+2fK7A9zc4thGuMjdQr9R2I8
sloEAAaec++aPPubaFRonf/heRn21Hy2qdrO4nOdxP/am7xjOaPljR/IIeC3VFfj
MzNgfd/fLqieySlyyQGfpRLWrvcPwUuCgRUEvZXXjlTAEV9KS43B/UpP1TDEUsi5
Y3B80xSmZktcN762+9GNq4yquSVOYgcwwj2W+JfnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQdOdHHkqo82L1aPRP04npheVj3kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ0ZDg0ZTc2LWVhYTUtNDQzYy1hOTc0LTQyNGM5NmI1MWZmNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABGgsEwDQYJKoZIhvcNAQELBQADggEBAFLPtBrsJN4gBmpmrVohW1VCWryB
n0KGE4M3z/grFsgcVEmk4mtvhY1YMUvFUVUBF7VlqrX5qNADoGa8bnCTZaa8ppl+
NgRSl99ib+4t3GzjDYc2IcMZN7xTVsIxLvIinDgTZZ5zG2IPpU6/nRUivaqQTfUW
iNMPc4tEOg10WpuyxSWqzOtVJtJey1EEYQewX1ggiA4wEAgbxBCcaHF9GGQP7sOl
TK3aFObnuveZsy94XmKlShRT8J2g/VB0O8F5p0elzDxmyGEJGKJomsZ2fdyUo6By
+xYaDsn1e5uwBs/HcDlABxBdf86z+L/0eFErbr9ow+aM0yOB6ttFUxmDuRA=
-----END CERTIFICATE-----