Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6302a5ad-7203-4a28-9edc-aef0cebf8d18.roa
File:                     6302a5ad-7203-4a28-9edc-aef0cebf8d18.roa (raw, json)
Hash identifier:          CgMdr6pZXkpv+2U2bIVyuv/c9vISdkJRKoCI2XabJwc=
Subject key identifier:   1A:6E:71:6A:F6:B4:34:90:48:F2:F4:49:91:68:50:60:B9:27:F4:C5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BBE27865872CC1D185B777F1538E62FBA7084EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6302a5ad-7203-4a28-9edc-aef0cebf8d18.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        139.96.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:be:27:86:58:72:cc:1d:18:5b:77:7f:15:38:e6:2f:ba:70:84:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=77aa588b797dc7615cdc5c8fd5aa91ebac671a29dc5878ae33b064f3ada909ff, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:56:57:4a:74:64:7a:d4:e3:4c:82:58:83:
                    2d:8a:25:32:02:dd:35:23:05:d5:4a:50:93:35:19:
                    9d:4a:d7:d7:0d:ec:09:d1:00:62:af:f9:6a:2a:71:
                    57:4d:a1:b0:cf:75:e3:ac:39:4c:c7:7c:f3:dc:4c:
                    63:28:e9:df:51:1e:70:68:b3:f9:c2:65:22:5e:77:
                    95:21:c4:d4:26:35:64:f1:3a:fa:a3:8a:2a:29:f5:
                    a6:a3:d7:bc:b2:f6:ba:44:90:f2:d3:8d:1d:76:0c:
                    a0:a6:42:49:81:fb:7b:ef:4e:ee:30:79:e8:4b:c8:
                    05:d4:0a:79:0d:08:ae:df:59:ce:fc:06:3f:7e:2c:
                    af:2f:75:3e:42:ed:8d:0d:bf:fd:94:60:6b:44:ba:
                    f9:74:4e:5d:75:41:ed:86:7f:b4:07:f1:de:f6:18:
                    50:fb:81:8b:ad:df:39:89:49:7b:e3:b6:64:f6:ef:
                    af:e1:3d:af:d3:81:81:f6:80:67:c1:6b:97:7a:5e:
                    31:73:1f:24:ef:11:4a:6b:8c:5f:66:01:aa:25:84:
                    2a:5d:af:b3:39:60:96:96:41:b7:79:47:50:0a:47:
                    e2:f8:ef:bb:8e:ef:62:28:61:3b:cb:f5:d3:42:69:
                    25:7f:64:6c:fb:62:6e:41:b2:a8:ea:a0:9e:e0:27:
                    77:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6E:71:6A:F6:B4:34:90:48:F2:F4:49:91:68:50:60:B9:27:F4:C5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6302a5ad-7203-4a28-9edc-aef0cebf8d18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.96.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bc:f6:cc:b7:a9:7d:13:e3:c5:b8:49:f4:68:05:32:4d:fa:b7:
         44:fa:6f:45:9c:42:9a:86:d8:da:4e:8f:02:df:25:40:ef:b1:
         9f:c8:d1:fe:f3:49:5d:40:27:85:00:fd:92:f2:2b:a6:86:da:
         ce:49:ac:9b:8f:94:e9:b7:10:58:5a:c6:20:61:77:81:50:a8:
         bf:7e:22:b8:6d:73:13:7f:dc:ca:ae:bc:4e:68:a2:25:d0:0b:
         d6:e1:c0:f9:2f:a4:83:1c:bf:97:5e:4c:4c:91:f7:ee:01:7b:
         cc:44:82:06:4e:c2:a9:0d:f5:74:b4:5f:0a:a3:68:b6:81:54:
         1e:81:06:91:0f:9a:6c:0a:05:b3:0a:17:37:0c:75:5b:98:31:
         aa:8c:74:f9:d0:77:a7:ec:79:c6:05:b8:6f:d5:1f:43:2c:fa:
         a0:62:70:f1:a7:d7:83:fa:19:46:37:6d:e0:59:01:2c:1d:f0:
         4d:e2:3b:26:3d:57:40:b5:18:08:89:11:b7:90:2d:cf:de:de:
         8c:84:55:d5:3c:4a:a6:9b:43:71:6f:b2:86:00:de:fb:5e:2f:
         79:c9:d1:f2:65:2c:e7:cb:4d:7c:65:12:18:c4:d8:45:f1:b0:
         e0:59:70:bc:e7:df:d6:9a:c4:34:bf:01:23:7e:1c:86:29:98:
         23:24:f1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----