Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bf283e3-a480-4026-b547-3893488eb829.roa
File:                     5bf283e3-a480-4026-b547-3893488eb829.roa (raw, json)
Hash identifier:          rJKAjFnMfJYD24i8yefwTnUF4hZffFpT3jq7WVFD+fI=
Subject key identifier:   50:B2:F7:8C:F3:C6:90:30:DD:E0:36:1D:14:71:03:22:53:B6:D3:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B809C74452DFA24A31DABC9D9A9958AA79FB51E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bf283e3-a480-4026-b547-3893488eb829.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        98.74.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:80:9c:74:45:2d:fa:24:a3:1d:ab:c9:d9:a9:95:8a:a7:9f:b5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=8838ce20501d655b3c99fc4c221fcb2dc82648378eb3a44b3317e35039cf5543, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:57:19:5e:04:69:34:6d:5f:b3:b8:0f:a3:
                    cd:4a:28:fd:73:75:81:47:b9:67:ab:c3:f0:4c:99:
                    b1:eb:f4:4d:54:6b:85:ef:58:79:82:91:b0:c8:ea:
                    aa:ff:9f:e1:dc:58:24:4b:5d:43:97:3f:b2:8c:43:
                    4d:e7:51:a3:a6:6c:c0:3d:07:10:0b:4d:47:1a:49:
                    5e:6d:06:3c:22:dc:ae:0a:93:23:6d:a9:17:54:3e:
                    8a:dc:91:62:71:b1:9f:ce:93:3d:fc:f0:08:9a:8a:
                    77:8d:e2:78:03:27:c6:ca:bf:62:47:99:41:da:d6:
                    b2:0c:f3:3c:6c:26:fc:eb:c7:ed:f0:fc:93:fb:bf:
                    cc:af:e1:c8:07:bb:c5:85:62:3a:b9:f4:a7:b8:56:
                    6e:01:56:bc:22:75:2e:00:cb:43:89:f3:13:26:2f:
                    7a:1c:de:83:09:8c:45:98:43:2d:a7:01:e1:cf:b2:
                    fd:7b:df:6a:a8:a6:80:73:47:71:bb:d6:38:ad:2f:
                    28:53:57:7b:64:77:46:03:c9:ee:77:85:75:43:85:
                    1e:27:08:5e:f9:24:cd:6d:07:dc:0d:9e:a7:2a:9b:
                    6f:6f:93:39:e1:6e:b9:28:79:a2:bf:a3:05:40:23:
                    e5:2e:2f:1f:17:0a:bb:73:77:d4:79:1f:ff:39:fa:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B2:F7:8C:F3:C6:90:30:DD:E0:36:1D:14:71:03:22:53:B6:D3:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bf283e3-a480-4026-b547-3893488eb829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.74.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:0e:7e:ce:e2:f7:d9:8b:22:a2:c9:3f:13:50:fa:9e:15:
         f7:77:a0:0a:a9:d7:46:7d:7b:1a:b2:5d:55:8f:bf:2d:2d:80:
         15:7a:fb:7c:20:9d:71:25:df:72:50:25:fe:ef:bb:a2:d9:25:
         ca:75:a7:fd:d1:cf:16:65:4d:06:d7:c6:1e:e8:ca:9e:0e:e6:
         7d:20:6c:86:84:87:57:d9:e0:03:bc:78:0e:d1:c8:0e:06:7d:
         eb:0e:12:04:70:31:30:6e:2e:4c:9e:69:80:54:7b:c4:a8:a6:
         26:3f:05:44:ca:73:9c:a5:54:6b:61:43:f0:62:16:39:2f:bf:
         72:de:f3:1c:ba:b7:fc:d6:10:24:0a:bc:80:62:7c:8d:43:97:
         39:9a:47:7c:35:1e:62:8c:94:b9:ee:99:eb:16:ca:96:6f:ad:
         9c:b3:19:10:41:96:80:75:5e:2f:e9:9c:24:0e:7b:de:8d:cd:
         9c:ba:88:26:ab:53:77:ba:57:d5:c7:3f:1b:a6:c2:13:21:28:
         7e:25:3a:be:89:4b:6b:3b:54:5d:ca:9b:a4:de:1e:c6:23:9d:
         7c:df:5a:57:ce:86:20:6c:ef:f5:01:b4:5b:be:d2:c9:3b:b2:
         f3:c1:e6:b1:a5:db:33:30:99:6d:ae:4a:6b:a0:62:38:43:0f:
         02:b2:b5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----