Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b0c8cef-cfcf-4ed1-bd4a-120d9b14f1a8.roa
File:                     5b0c8cef-cfcf-4ed1-bd4a-120d9b14f1a8.roa (raw, json)
Hash identifier:          m+KbiKk7ZTLaApRkLbtC6wOEGQ39PMjUJcDfKkmUXj4=
Subject key identifier:   65:B5:DC:18:CB:CB:D4:70:0C:62:31:77:36:86:E4:8D:7A:71:C9:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5ECFC8B411CCB3046F3C83DBA6618E95AE02F674
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b0c8cef-cfcf-4ed1-bd4a-120d9b14f1a8.roa
Signing time:             Wed 27 Nov 2024 00:00:00 +0000
ROA not before:           Wed 27 Nov 2024 00:00:00 +0000
ROA not after:            Wed 01 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        157.175.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cf:c8:b4:11:cc:b3:04:6f:3c:83:db:a6:61:8e:95:ae:02:f6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 27 00:00:00 2024 GMT
            Not After : Jan  1 23:59:59 2025 GMT
        Subject: serialNumber=02f632a47e2fee01087d19cfbb4cf09e4360427cdf392d0c0f3eefa109000bc9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:11:0f:33:0e:89:0c:af:ce:fe:bd:de:a7:
                    62:10:53:23:ce:1b:05:79:d0:66:bf:e9:e5:97:29:
                    62:c7:d9:d9:ed:6a:1f:a0:03:e9:61:b4:e2:a9:d8:
                    5c:ec:f6:11:84:9d:91:07:5a:8b:49:f5:3b:43:66:
                    ff:c6:72:ea:94:25:2b:36:c5:35:20:23:8b:57:fc:
                    19:da:da:71:28:be:7c:9a:13:f7:b2:18:11:d7:1b:
                    1b:24:7a:a3:6f:57:e0:74:a7:ad:79:40:d0:0b:70:
                    f5:06:60:e9:44:d1:c4:d4:a3:83:02:34:67:47:c7:
                    8f:9b:0a:ed:9f:95:b8:ee:09:17:fc:11:5d:75:eb:
                    16:02:8b:40:9e:30:30:96:ff:c2:4c:91:0b:07:84:
                    12:63:18:10:2e:fe:2c:39:b2:42:7f:d8:66:ff:01:
                    ea:9a:8a:04:40:9d:fa:0a:ba:f2:87:c9:7d:6f:4e:
                    28:6b:38:40:99:1b:36:bd:2a:7b:31:ae:14:b7:e6:
                    30:21:d1:6b:d2:ed:53:12:53:cf:99:5b:52:73:e9:
                    fa:3b:f5:02:5e:66:42:1d:63:b0:14:b8:17:3e:9c:
                    8b:da:61:2d:0b:dc:d8:2e:3e:ba:30:98:72:d2:0d:
                    95:72:38:1b:d7:ee:88:75:fb:51:c8:53:3a:21:b5:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B5:DC:18:CB:CB:D4:70:0C:62:31:77:36:86:E4:8D:7A:71:C9:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b0c8cef-cfcf-4ed1-bd4a-120d9b14f1a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:59:f6:d7:1a:f1:ff:dc:dd:73:75:9a:8d:20:6a:bf:99:9d:
         f1:f6:2b:04:fc:ba:55:e5:a3:66:fe:dc:e2:ef:d1:66:f4:28:
         56:6c:c9:10:3f:4e:30:ed:0a:ee:38:58:bd:51:e4:fe:95:fa:
         44:33:a1:12:23:8f:96:9f:1a:6f:34:96:40:71:c2:61:7a:04:
         a6:09:48:a2:b0:e7:3b:cc:fa:73:ee:46:fc:d3:5d:67:33:97:
         f1:3a:00:3b:d5:ce:af:44:0b:db:d8:37:8a:bc:28:95:4d:df:
         5f:89:1b:ae:5c:23:a7:0f:e5:c2:94:52:6e:10:ea:9f:ef:52:
         40:93:fd:66:fd:16:54:55:af:51:81:a3:7f:30:f7:51:99:50:
         ed:0e:5f:dc:6e:2c:81:9d:3d:a5:65:59:41:88:d9:d7:b1:a0:
         77:05:ca:56:fc:eb:b6:fc:3c:db:4f:f9:25:b4:cc:b9:03:23:
         c1:93:92:ea:ef:d7:a9:f3:99:a2:98:f3:df:27:df:47:41:69:
         a4:46:e9:48:0c:1c:6e:5b:52:4d:99:dd:e0:f1:d7:cd:4e:c5:
         5e:23:d8:35:b0:27:ba:68:05:ff:35:e9:6e:4f:80:c7:16:a7:
         55:94:54:be:4c:72:70:d3:92:01:3b:9f:48:2c:a8:75:8f:9a:
         05:a2:61:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----