Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6367bbef-d25e-4a13-b6f4-83701ed5ba4e.roa
File:                     6367bbef-d25e-4a13-b6f4-83701ed5ba4e.roa (raw, json)
Hash identifier:          v6yGG1s2itjv1v4JsrXf3UDqydC6Uy1Ph98XaS2TH+o=
Subject key identifier:   A2:C5:71:A0:50:F6:04:35:CD:08:78:BF:C7:81:5F:22:20:1D:62:86
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B2C38B6C4C42DF54B3D98064E8CDECD01DD93A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6367bbef-d25e-4a13-b6f4-83701ed5ba4e.roa
Signing time:             Thu 26 Dec 2024 00:00:00 +0000
ROA not before:           Thu 26 Dec 2024 00:00:00 +0000
ROA not after:            Thu 30 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        65.6.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2c:38:b6:c4:c4:2d:f5:4b:3d:98:06:4e:8c:de:cd:01:dd:93:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 26 00:00:00 2024 GMT
            Not After : Jan 30 23:59:59 2025 GMT
        Subject: serialNumber=cc072f468f0c221c0a827fe81d1a5ba1fcf6564d844c410c62d67fbda6fc40f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:2c:69:d9:f1:8e:10:45:51:31:96:bd:01:
                    53:f9:98:f2:6b:59:7f:d0:6f:a6:7d:d8:35:c6:22:
                    8d:bb:76:24:bd:7e:3f:a3:ad:5a:23:36:06:eb:da:
                    8d:80:d1:bd:2e:b7:60:ef:22:79:ae:65:52:e5:95:
                    2b:0e:d0:f9:fa:42:eb:12:64:45:34:76:8c:cf:48:
                    d5:cb:76:cb:52:a6:2f:46:34:e0:19:81:9d:26:b0:
                    58:7b:6e:2e:57:aa:b7:6c:7e:2d:c3:73:2e:43:44:
                    e9:7e:e0:e4:bb:8a:82:3d:ba:b1:bb:f8:4b:e6:6b:
                    1f:f8:fd:20:57:ff:55:29:a9:4e:31:20:d3:31:dd:
                    f0:75:1f:13:08:02:69:b2:6b:cc:20:fc:f5:dd:1c:
                    95:7f:3a:62:1c:1a:0f:d5:b8:69:a9:c6:29:4a:3e:
                    1b:9b:44:c3:ee:64:bd:69:15:ab:c6:31:35:f1:2f:
                    05:9d:58:42:7b:6e:3d:d3:fa:75:e8:44:34:52:a9:
                    e0:a7:02:a4:7c:85:01:eb:5a:0c:6a:1b:1b:59:a5:
                    9e:ef:c3:a1:77:c9:fb:a2:0a:2d:cb:a5:fc:70:ff:
                    fb:2b:47:3d:65:d7:66:11:e1:07:a7:72:a0:6b:a4:
                    ff:69:a3:74:9d:0e:f6:5b:21:3c:fc:87:1f:73:dd:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C5:71:A0:50:F6:04:35:CD:08:78:BF:C7:81:5F:22:20:1D:62:86
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6367bbef-d25e-4a13-b6f4-83701ed5ba4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         21:6a:90:e6:32:a6:c0:f7:b2:12:09:52:c7:ca:fb:93:9d:43:
         0c:e4:ca:9b:d8:20:db:99:d2:58:e1:a0:c4:94:be:ad:ee:ae:
         c1:8c:0d:02:4f:64:93:70:06:04:eb:08:6d:a2:fe:e6:97:ff:
         ea:67:08:a0:23:93:50:be:1a:b3:02:0b:96:2a:5c:bb:b3:7c:
         e7:37:ad:94:70:6d:da:d3:e7:f6:30:85:5b:8b:af:92:b7:23:
         7b:1d:44:8d:d9:03:31:a1:52:f9:52:2d:01:e9:c3:38:f3:77:
         9e:95:49:3c:d7:99:1f:83:2a:94:03:39:26:1a:5a:78:54:c3:
         3f:1f:e7:dd:91:32:c5:0f:c8:43:f3:dd:20:a7:81:2d:12:d2:
         46:f3:02:1f:16:54:41:ea:f9:47:1d:b6:c6:d9:d7:9b:88:bb:
         52:76:4f:d5:21:67:05:66:2f:37:4e:42:58:55:cf:c1:c4:46:
         c1:54:92:bd:dc:fd:9e:f8:f2:4c:1f:0c:54:d8:c8:e8:6c:b4:
         8d:ab:4b:cb:c5:3c:b6:e0:03:b5:02:e4:a0:ea:2f:fc:bd:f7:
         a9:f9:d6:b1:e0:a8:81:7f:f4:50:5d:5c:9c:41:a2:9d:30:6b:
         1a:fc:4e:44:72:df:d9:9d:a6:66:c0:d4:81:8e:b9:3e:23:53:
         72:ec:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----