Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634ae3e8-3a12-418e-8f26-32626202a1cd.roa
File:                     634ae3e8-3a12-418e-8f26-32626202a1cd.roa (raw, json)
Hash identifier:          ZAyFqEbJ4cKzN3hRBIDmq7mbfaQh3OPL26OG+O6W+Co=
Subject key identifier:   90:17:C9:1F:BB:F0:E8:61:18:D6:47:E3:B7:ED:4D:B2:69:37:4F:C3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       069389CAE61F098FD2F4528153CB686580225582
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634ae3e8-3a12-418e-8f26-32626202a1cd.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        64.247.224.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:93:89:ca:e6:1f:09:8f:d2:f4:52:81:53:cb:68:65:80:22:55:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=993a902a75cc9e0461f07b871b86957af69aefb75e1a0a90049a3044659db8c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ca:05:15:36:4f:81:3b:c7:e8:5a:43:7c:f9:
                    33:b2:86:11:1d:b6:ae:27:c7:77:b0:c7:b1:d0:8a:
                    df:94:ae:38:46:2e:b5:b7:98:59:17:88:9f:0c:7c:
                    a0:b0:58:a0:9d:fb:17:a0:69:00:03:72:e0:cb:95:
                    32:ce:30:6a:96:ca:e1:4a:07:de:c7:80:e5:99:67:
                    14:5b:e5:07:0e:49:a2:c9:51:54:23:32:be:bc:ce:
                    a9:26:ba:1b:3a:ee:1e:a9:cf:64:1c:a7:f7:ff:e8:
                    56:5c:30:ae:bd:40:1f:8d:50:34:b2:46:fc:87:b4:
                    41:cc:32:3b:1b:70:49:74:47:8a:8c:a6:2f:50:bc:
                    70:61:b1:5b:47:b5:33:31:d9:90:e2:78:3f:9b:3e:
                    57:1e:0f:23:10:41:37:d4:2c:a0:43:e0:86:f5:bd:
                    f0:27:3c:55:51:ad:1c:60:90:76:b8:95:fc:aa:93:
                    94:64:2c:b6:bc:4e:0b:43:ff:7a:c8:f2:54:f4:5e:
                    bf:8e:b6:09:f8:d8:93:05:b8:b0:0a:ff:c6:1c:8d:
                    d6:3a:3d:72:d3:5d:a4:a5:b6:0e:fc:b9:4c:76:1f:
                    98:0d:42:a9:b4:e9:84:a8:0f:f1:cc:c7:99:9b:fd:
                    3d:44:6c:a6:c4:bc:c2:6c:02:79:a0:07:06:bc:36:
                    ea:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:17:C9:1F:BB:F0:E8:61:18:D6:47:E3:B7:ED:4D:B2:69:37:4F:C3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634ae3e8-3a12-418e-8f26-32626202a1cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.247.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:d2:8e:07:17:05:82:ea:0c:19:c9:35:84:4b:c7:9c:0d:88:
         46:29:73:82:3a:48:a2:ce:c4:a4:8d:7d:c5:76:62:c4:16:0a:
         52:65:f2:4d:87:08:4a:bd:ab:46:51:b7:93:f6:53:24:74:fc:
         82:ae:3d:21:09:a5:70:11:c3:b0:f5:e2:de:f0:5d:c7:27:44:
         49:fe:41:24:e6:ad:cb:53:bb:28:bc:db:ba:b1:0f:d4:9d:cf:
         a3:f0:b8:35:7d:2b:a6:61:10:f8:88:96:74:74:99:fa:19:6d:
         dc:8c:1c:82:de:22:b4:8c:e7:5f:27:0f:72:9d:2b:6a:cf:d3:
         41:df:ff:bf:2c:5c:47:a7:7c:f1:ba:a5:e8:5a:29:1d:3a:c1:
         64:cb:2e:30:d1:15:b9:57:5b:16:05:00:44:44:ad:bf:55:9a:
         47:6c:f4:46:2f:27:33:43:12:6a:81:ae:c2:e4:ba:39:d4:a1:
         a7:ed:85:9a:13:a3:b1:f5:9c:88:3f:86:94:7f:c5:60:d9:17:
         36:23:f0:59:93:d2:ab:48:d0:79:34:77:9c:b7:1e:a2:12:c7:
         5a:97:14:58:f2:fe:e7:a4:0b:dc:f9:9f:05:dd:d8:9e:f6:6c:
         38:f4:94:f3:2b:82:1b:f2:c1:6f:67:54:e1:81:06:44:9e:1d:
         ea:3b:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----