Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/554ccddb-9ac3-44a6-a405-9ece986d4737.roa
File:                     554ccddb-9ac3-44a6-a405-9ece986d4737.roa (raw, json)
Hash identifier:          81vfoNLYA9WSIIsrNOkzgpn0305VJRO7mNQu5/1THoo=
Subject key identifier:   64:C8:00:BB:1E:9F:B8:ED:33:8D:9B:EA:8F:80:42:E7:86:68:7E:59
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5C39833235D5EFA980E93C83DE636B4E8365F37E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/554ccddb-9ac3-44a6-a405-9ece986d4737.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        57.198.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:39:83:32:35:d5:ef:a9:80:e9:3c:83:de:63:6b:4e:83:65:f3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=2573be7986d180333bea2fd949a8cb8aedd0994e198ac9c5209fc4a5cecd1980, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:6b:af:10:52:63:85:1c:04:49:00:a8:7e:
                    7f:aa:95:65:d6:92:a7:1e:3a:7a:f7:86:12:09:86:
                    6c:aa:b0:3c:22:88:37:0b:66:f7:06:c6:08:9a:11:
                    78:26:0b:c1:72:11:18:40:40:c0:9f:cd:28:f5:08:
                    7b:d4:8a:c4:75:66:98:22:29:4e:f2:1d:d3:57:0a:
                    8c:f7:9a:89:48:82:b9:35:99:f9:5b:42:fb:41:bd:
                    2a:d9:e3:d5:39:f8:9f:a3:03:f2:b9:36:62:8f:cd:
                    80:8e:a9:34:ab:7f:c6:40:21:fd:b3:6b:52:92:f4:
                    d5:62:39:b0:18:6b:fd:26:5a:3f:cc:d7:f7:68:6a:
                    ae:07:fa:87:b5:0d:2a:ae:58:16:a1:36:08:7e:be:
                    0f:35:41:12:43:0e:3d:76:e7:66:ce:e2:18:b3:c6:
                    23:d9:dd:88:f5:e1:6e:39:d1:bd:1d:dc:d2:e5:2a:
                    58:fe:2d:ee:18:db:b8:df:25:87:99:a4:34:38:73:
                    cc:47:00:b7:7b:24:33:0a:40:a9:7c:fe:5b:5d:48:
                    d1:4d:26:74:2f:69:f8:71:3a:68:cd:59:74:c0:a1:
                    5c:64:c5:da:6a:b1:95:7c:2b:c6:3f:e0:ec:25:22:
                    3a:9a:fa:69:50:1e:02:2e:05:3c:b7:2e:0c:4c:f8:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C8:00:BB:1E:9F:B8:ED:33:8D:9B:EA:8F:80:42:E7:86:68:7E:59
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/554ccddb-9ac3-44a6-a405-9ece986d4737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.198.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:04:31:69:3a:cb:e5:59:9c:e9:04:74:c0:25:83:aa:26:6c:
         44:f3:5e:15:1f:ae:d8:5b:67:eb:df:2d:ed:27:b3:3b:24:94:
         98:39:58:d3:03:53:df:2b:16:b2:1e:88:02:40:88:cb:e6:0c:
         9b:93:5e:4d:bd:e2:a6:8e:70:d0:a6:51:ce:9d:4d:35:47:67:
         cc:57:f0:21:4f:36:bc:01:86:cb:27:6e:3e:a9:03:f0:3f:cc:
         d0:2b:93:b6:c1:68:a3:b6:4d:93:63:08:65:50:be:3f:a9:84:
         8d:29:ed:61:c3:31:64:84:08:8b:78:4a:99:3f:90:dc:04:86:
         93:db:4c:ab:29:46:61:5c:1d:1d:e6:62:72:60:f1:ef:1b:3e:
         00:78:f7:cd:a5:f5:9e:f9:eb:4f:31:77:fc:42:c0:25:44:2c:
         ad:4e:5f:60:f7:28:0c:31:97:c1:3a:82:31:cb:cf:d7:17:b6:
         38:97:b6:06:a9:53:57:6d:c7:3c:7d:09:cf:f5:a1:63:65:a5:
         6b:c9:f2:34:c0:83:ca:5e:fa:2d:4e:fc:ef:df:75:d6:5c:d8:
         96:69:2d:70:2a:60:9d:73:2e:7a:e4:1b:5d:26:89:f3:22:f4:
         69:7c:2a:b0:75:bf:e7:e1:a8:90:c2:7f:d9:e8:73:55:8c:cf:
         09:55:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----