Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/570c62d2-d6de-46f4-bb70-e5512ff89837.roa
File:                     570c62d2-d6de-46f4-bb70-e5512ff89837.roa (raw, json)
Hash identifier:          ESGP8h0GY+lCJrKrMKC/P7GYXXc8JULMhqp4p3pTO8I=
Subject key identifier:   E2:67:7B:A1:1E:A3:F9:68:26:DC:96:ED:CA:78:C9:13:96:9A:28:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DC76CA67B1F41036E0DE59311D3CD7706512D19
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/570c62d2-d6de-46f4-bb70-e5512ff89837.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        168.192.0.0/15 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c7:6c:a6:7b:1f:41:03:6e:0d:e5:93:11:d3:cd:77:06:51:2d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=d78c27b48f71aca8bafea4c7eada4342fec1b1754ce7a9db27603cc867d122b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:bc:84:a3:1a:bb:b2:bd:b5:e1:ba:cf:cf:
                    52:f3:cd:f8:9c:21:32:33:db:63:f6:c6:a4:73:6c:
                    80:3e:92:c1:8f:f4:33:9d:cd:9e:b5:36:04:04:65:
                    4a:07:aa:dd:da:81:97:91:be:b7:95:f9:0b:bd:15:
                    30:4e:85:a4:70:1a:43:fe:a5:66:bc:dc:50:e9:d3:
                    59:dd:a8:d0:d4:cc:ef:84:ed:3c:78:a3:20:5d:38:
                    05:d4:8b:b9:ec:5a:64:80:66:44:23:57:68:30:c2:
                    40:8b:73:7a:7e:f9:3b:31:ab:c1:4b:66:75:ec:e9:
                    10:04:f4:c6:99:98:12:70:10:d2:0e:a3:9c:bc:76:
                    4b:27:ab:4c:43:71:cf:f8:bd:c8:21:55:f0:50:e2:
                    5e:53:d6:f6:3c:d1:cd:c3:54:11:32:ce:68:cc:28:
                    88:0f:21:90:c8:1f:56:76:36:1e:cf:2b:01:c0:31:
                    94:58:01:81:82:6a:41:0f:9c:9c:85:d3:1c:9f:32:
                    1f:de:d2:7f:9b:3c:44:03:79:b3:0c:07:97:d9:07:
                    3f:ac:c6:10:36:22:cc:74:cb:7a:7c:a5:1f:3d:63:
                    04:1e:d1:03:e3:2e:89:76:c4:04:27:e0:f9:b1:e5:
                    b9:b2:13:8c:75:5a:84:dd:38:9c:f8:1f:f2:30:eb:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:67:7B:A1:1E:A3:F9:68:26:DC:96:ED:CA:78:C9:13:96:9A:28:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/570c62d2-d6de-46f4-bb70-e5512ff89837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.192.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:74:a2:9d:2d:58:11:6e:27:1f:b4:87:6d:8a:38:27:68:
         16:25:f1:50:41:ae:99:d6:de:fa:cd:40:ce:d7:89:bd:cd:ee:
         66:05:00:5f:fe:37:c1:44:5e:a4:49:07:8e:b8:ee:70:9f:b9:
         1d:c0:bc:ea:25:44:d1:a0:b7:84:b6:6b:34:df:1a:22:5d:b9:
         76:ee:9c:f4:18:d7:17:86:c0:b7:f5:15:af:10:f6:8a:42:7e:
         d7:b0:56:af:12:8f:55:73:cb:db:21:4a:64:bb:82:62:75:09:
         a9:67:45:31:6c:65:2a:eb:bf:da:24:14:2f:aa:c6:30:b5:58:
         99:fd:8c:b8:3e:7d:af:52:16:dd:61:01:1a:ee:d4:8a:57:0a:
         cf:08:43:d7:94:23:3f:a3:a0:78:f0:ea:97:f2:e8:65:6b:e6:
         82:e9:2b:77:bf:7f:58:67:95:97:e4:0f:86:b6:7e:d7:91:b7:
         0c:74:52:4b:46:60:0b:f2:7d:2b:d7:13:18:27:3b:ae:99:f2:
         01:d9:32:4b:aa:c3:f8:60:66:62:c2:7c:69:01:ac:a8:00:2a:
         92:0e:b7:7f:67:a8:19:da:d1:43:4d:8e:21:f8:22:74:5d:13:
         b9:a0:a3:26:0c:11:2f:48:e7:f1:a6:a7:71:86:68:40:84:fd:
         79:dc:14:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----