Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/558bdad0-3fa8-4e76-b839-054648de25fd.roa
File:                     558bdad0-3fa8-4e76-b839-054648de25fd.roa (raw, json)
Hash identifier:          c//tRN0yDqqK5g8tPTgh1zbQ6q3gF8zOslW7hqsGuHc=
Subject key identifier:   B1:BD:9E:C7:0F:5B:AD:80:B8:10:C6:E3:68:02:80:53:E3:73:A4:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F15B76CDDDADA68FD397CA5060275EBA75DE740
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/558bdad0-3fa8-4e76-b839-054648de25fd.roa
Signing time:             Tue 24 Dec 2024 00:00:00 +0000
ROA not before:           Tue 24 Dec 2024 00:00:00 +0000
ROA not after:            Tue 28 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.156.0.0/15 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:15:b7:6c:dd:da:da:68:fd:39:7c:a5:06:02:75:eb:a7:5d:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 24 00:00:00 2024 GMT
            Not After : Jan 28 23:59:59 2025 GMT
        Subject: serialNumber=b4ce1ed2b751b1dc9a75f210c92d908b565091f4955cbd76d5e7470faeb03e72, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:86:98:ad:45:24:3f:7f:4b:3a:4d:f5:b8:
                    80:bd:18:86:a6:20:86:fe:4a:63:6a:18:5e:6f:af:
                    51:56:8a:7a:4a:e1:15:0c:d9:35:d7:6d:d6:e2:dd:
                    4e:ef:eb:19:2d:63:40:7b:0f:c7:9a:7c:35:d9:b7:
                    e1:03:88:6f:3e:eb:7e:6a:f3:43:e8:f6:44:eb:2e:
                    9b:a6:f5:a7:fd:65:08:42:9b:3a:ee:e3:ec:2c:04:
                    b8:f8:de:85:b3:b0:6f:b0:11:f4:c2:6e:32:95:8f:
                    52:fc:41:2b:9b:7f:a2:af:6b:93:8e:b1:67:81:fb:
                    7b:dc:74:0f:0e:21:64:b4:01:3f:b4:63:52:6e:cd:
                    73:88:fe:b8:45:f5:65:22:c0:9c:b8:e1:a2:b4:f0:
                    e2:d8:97:01:b1:43:ae:7f:99:d5:c4:4d:7e:b6:1a:
                    61:31:2b:6d:5d:65:b1:67:eb:59:24:f8:8b:1f:c7:
                    7d:e1:29:e3:c1:97:cf:a2:2d:9b:00:df:a3:66:58:
                    10:78:9e:63:d5:07:81:60:b6:35:f0:78:9e:21:3d:
                    22:5f:9f:15:97:4b:da:42:02:3d:8e:22:f0:11:ef:
                    04:d1:66:da:41:5f:86:dc:37:fc:de:10:0c:d1:ed:
                    26:a4:55:c6:9f:2b:f0:db:95:16:eb:32:4f:1f:b6:
                    84:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BD:9E:C7:0F:5B:AD:80:B8:10:C6:E3:68:02:80:53:E3:73:A4:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/558bdad0-3fa8-4e76-b839-054648de25fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.156.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c8:e8:b8:c9:36:55:7a:e6:da:23:02:ce:c5:3c:b9:28:d5:9b:
         79:4f:fd:d3:6f:6c:5b:4a:a9:ce:74:5f:cf:f8:ca:0e:cd:8b:
         aa:67:00:25:c8:49:e0:1c:c3:d8:df:a7:cc:b1:74:4a:8a:8d:
         9e:a7:30:2c:e2:a8:b8:3c:0c:af:09:a2:ea:e1:b8:e5:85:e3:
         f7:36:d4:da:81:47:43:8d:89:da:f7:55:57:b9:d4:ec:9e:23:
         1e:f4:58:7c:85:9b:c7:7b:c1:80:5a:18:86:f6:42:f9:47:54:
         cf:07:21:9d:6e:79:40:42:d7:c2:d4:95:ff:e4:ce:a4:bd:3a:
         bb:53:5c:63:1d:5f:8b:f6:36:9f:7a:6d:b7:4b:99:0e:70:5d:
         92:3a:a6:20:08:8d:d5:d5:5d:7b:57:91:3e:4d:c1:43:36:ac:
         5d:c0:b6:eb:0d:eb:76:13:a4:96:95:a7:25:8c:61:84:2a:84:
         fc:dc:40:e5:bf:dc:31:65:e1:78:25:eb:b3:7d:95:bc:ae:fe:
         de:ac:ad:78:16:9a:73:0d:cc:a7:fd:08:f5:d5:60:af:ba:d7:
         d8:01:92:fe:21:b1:c9:28:ae:36:6a:04:00:40:3d:9c:b1:97:
         e7:df:8f:6b:c3:ec:06:1f:35:96:e8:61:e5:df:e5:a6:a4:0b:
         2e:66:02:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----