Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/618f902c-fc69-42ce-8940-445cf07120ee.roa
File:                     618f902c-fc69-42ce-8940-445cf07120ee.roa (raw, json)
Hash identifier:          cuVRLs/k6hMHlWnqI22DgRPJQ8vfkDiZkNXIMm1vw8I=
Subject key identifier:   F6:75:37:5F:5B:E8:AC:07:57:71:B6:CC:3B:34:00:2A:16:7F:2E:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3973728EA9D5971476F0994608ECC40A83A4F87E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/618f902c-fc69-42ce-8940-445cf07120ee.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        208.115.0.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:73:72:8e:a9:d5:97:14:76:f0:99:46:08:ec:c4:0a:83:a4:f8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=0be8aa1599a071d7a4f168bc2c4d80c2d82b55b2eaca09718a9e0e6d5e7fbce9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ac:54:6f:ba:e7:a5:3f:7f:b4:4a:e7:f5:62:
                    77:c9:9d:f7:56:00:d2:e1:d1:c5:99:c6:07:70:2b:
                    70:2a:a7:e8:8a:e7:e2:2a:f6:2f:00:25:f3:c0:7b:
                    40:0f:d1:c6:37:ab:c6:13:73:13:36:39:0a:f4:b3:
                    21:82:8f:49:1b:84:72:fb:b9:89:1f:4c:8d:d1:8e:
                    74:bc:2e:f8:a2:03:80:73:82:3e:3c:08:76:d7:94:
                    b6:a3:ac:1a:9e:2f:3d:03:ad:1c:e6:1d:23:cd:4a:
                    fb:47:2d:df:69:c3:82:a4:3e:46:21:49:9c:8a:39:
                    e2:69:9d:3b:fc:71:28:99:05:9a:c3:92:6c:16:e0:
                    a6:d2:dd:5c:91:e1:05:9d:5e:8e:fd:95:a7:30:59:
                    5c:55:bb:f3:2f:ec:6a:7f:21:18:f2:c8:ac:30:16:
                    0a:ff:57:99:3e:91:cd:1f:49:3b:35:4c:de:21:ad:
                    aa:b5:ba:5f:05:4a:8f:61:1e:15:b0:01:85:99:6b:
                    d4:d0:a3:f5:a1:db:a3:69:d1:4c:6b:51:72:8d:14:
                    f8:1f:bb:96:a2:7a:ea:56:7e:ed:89:79:84:75:96:
                    14:15:e6:c7:96:c4:63:05:e8:d9:b3:56:ad:23:9b:
                    b7:86:bc:d8:eb:b6:5a:cb:48:81:c6:eb:4a:e6:2d:
                    4c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:75:37:5F:5B:E8:AC:07:57:71:B6:CC:3B:34:00:2A:16:7F:2E:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/618f902c-fc69-42ce-8940-445cf07120ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.115.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:7e:54:f6:89:10:25:2f:20:7e:23:8c:25:41:c7:50:a4:c5:
         3a:b1:e0:41:60:89:2f:19:88:24:50:9a:6e:4b:c8:17:46:84:
         4f:86:05:2b:6a:4d:ab:b5:7a:31:be:4a:d6:f8:49:ce:0f:d9:
         e8:db:d9:9b:2c:5c:96:e8:bf:8a:84:bf:81:dc:0f:66:a4:d1:
         f9:bb:9e:41:40:87:ee:9c:c8:04:43:a7:42:22:f9:88:78:2b:
         4a:6c:49:e3:58:8d:88:0a:fb:21:21:28:98:51:67:f2:e4:e6:
         44:a5:58:68:a8:a4:c7:01:f6:93:a5:36:f5:dc:f6:b4:c2:9e:
         1c:5c:51:44:fc:a2:b9:17:90:78:a6:71:65:dd:f5:68:8b:4a:
         f0:4f:a1:3d:8c:1e:da:4e:7a:84:4e:f7:64:62:b9:68:70:c9:
         a5:3a:9f:16:b8:df:f4:ba:84:1f:9f:e6:a4:35:29:63:7f:d5:
         87:77:10:87:02:fa:64:e2:c0:f0:84:1a:9f:c7:0a:8f:98:d5:
         3a:c8:90:fe:aa:2b:b7:2c:6e:66:2a:e2:05:4e:d1:d4:0d:01:
         ca:26:a0:46:35:20:b5:c3:ef:79:c5:d9:6e:bc:93:f6:1e:11:
         c1:0a:30:16:0f:49:46:f5:10:0e:70:d0:47:2c:1d:1a:51:7c:
         8d:22:eb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----