Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a5539df-8bfa-4705-854f-260cc9bd67ed.roa
File:                     5a5539df-8bfa-4705-854f-260cc9bd67ed.roa (raw, json)
Hash identifier:          mLVTdLx/sLEnB1VdSPGprydJCDDsk/hNtcmcZtqo3fA=
Subject key identifier:   15:8D:F8:45:7F:BD:68:F8:B0:0F:43:65:F5:8B:B4:00:92:FE:23:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       455953B9CAE16499C58278C7D521F418F22BA2B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a5539df-8bfa-4705-854f-260cc9bd67ed.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff0:4000::/39 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:59:53:b9:ca:e1:64:99:c5:82:78:c7:d5:21:f4:18:f2:2b:a2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=fc56bf782779ede6f33fa441618aef0d9355fb38b14cf69edefef6f6c1a9e75a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3c:df:61:0a:20:c2:f2:17:ce:22:4b:7d:c4:
                    5f:69:6c:c3:bd:79:9b:99:c2:1c:91:72:29:68:b4:
                    89:36:51:2f:a6:f7:6a:5e:71:04:a4:6f:9a:ed:e5:
                    fb:a8:c4:89:d8:b9:f4:e0:a5:15:9d:d8:ac:1c:73:
                    94:96:77:ea:ea:3e:de:dc:d4:be:40:29:67:c5:4c:
                    5a:6b:43:70:3f:e6:07:f4:98:13:27:19:a3:fb:1a:
                    53:86:d3:16:ca:3c:40:49:b8:45:86:48:00:4a:52:
                    a7:b9:72:68:43:12:a8:03:0c:16:7d:64:88:fe:40:
                    04:6d:fa:6a:aa:49:46:a5:cd:a0:58:f9:5e:b9:5e:
                    a0:44:c2:71:a3:52:31:09:27:d9:d2:3a:58:02:1b:
                    0a:b4:67:67:c5:68:49:2c:8c:aa:cd:54:c8:19:25:
                    d8:14:9d:7a:80:11:02:2c:ee:19:82:71:69:98:55:
                    3a:28:52:9b:c4:72:44:bf:94:3e:89:d5:3b:ca:ec:
                    12:2e:11:c5:84:90:c2:40:d1:ee:d2:11:4b:04:f7:
                    4a:5a:99:e0:fb:e3:df:35:3c:0d:97:21:31:f9:ab:
                    f7:7d:f3:53:b1:af:8b:cb:82:4d:11:91:99:b3:20:
                    67:da:e6:40:2e:3b:43:3c:60:92:0a:e6:9c:56:b2:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8D:F8:45:7F:BD:68:F8:B0:0F:43:65:F5:8B:B4:00:92:FE:23:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a5539df-8bfa-4705-854f-260cc9bd67ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff0:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         12:20:1b:e6:73:7b:e7:02:47:e4:db:4a:24:dd:a5:55:07:2d:
         4b:31:a0:4f:0b:68:d6:92:ba:9c:9f:ea:7b:28:cb:1f:93:a4:
         65:a7:ea:29:ee:66:9b:60:7a:3c:35:92:37:03:c1:fe:c8:83:
         31:72:96:1d:62:52:15:f0:53:ae:10:1d:70:cb:6e:3d:d3:67:
         7c:4e:03:57:f1:ef:e2:4a:29:be:2a:89:b6:40:6f:2a:ea:3d:
         db:ef:bf:0f:32:62:21:87:31:81:30:6a:98:e2:29:30:86:8b:
         6e:26:1e:44:66:5c:64:1b:4f:05:1f:b7:5a:5f:f2:a0:f7:e3:
         e6:da:a8:3f:d6:67:1e:7e:e5:e1:c9:c1:93:97:f0:f0:40:49:
         13:6d:e8:dc:a9:86:b4:36:a9:71:2a:21:61:37:59:64:0c:76:
         95:a4:4b:6d:4f:ae:92:7a:4f:db:80:f9:37:ef:c5:78:09:b1:
         a0:8b:fa:43:90:48:e5:ba:a9:f3:45:a4:bc:0d:89:96:d0:d1:
         c9:8a:00:72:29:13:f1:a5:ca:dd:14:d3:1f:bc:46:66:7f:6e:
         75:99:21:68:14:9d:63:91:b2:dc:76:c5:61:b4:65:0d:45:d4:
         16:33:81:e8:08:fc:4d:dd:c7:ac:24:c3:af:7e:b7:4e:28:a2:
         26:14:e1:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----