Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bcbc780-2809-4081-9d7f-718071a8c1f2.roa
File:                     6bcbc780-2809-4081-9d7f-718071a8c1f2.roa (raw, json)
Hash identifier:          gZfdRO+/9UoMFEveSTMwtDcUc5O96Lga61icqEVEEnc=
Subject key identifier:   78:02:EE:9E:2B:E1:40:74:BA:C7:95:FD:29:CF:B8:64:15:D6:BA:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       71F8CA782F9036D0ADF17429702539A500D1B117
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bcbc780-2809-4081-9d7f-718071a8c1f2.roa
Signing time:             Fri 07 Feb 2025 00:00:00 +0000
ROA not before:           Fri 07 Feb 2025 00:00:00 +0000
ROA not after:            Fri 14 Mar 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        5.60.120.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f8:ca:78:2f:90:36:d0:ad:f1:74:29:70:25:39:a5:00:d1:b1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb  7 00:00:00 2025 GMT
            Not After : Mar 14 23:59:59 2025 GMT
        Subject: serialNumber=bed86fa139859e8cae0c8ab774f870ca16a07f4e0ea0365eacc37e1f609d80a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:bc:a2:42:35:c1:20:87:0f:c5:be:13:e0:
                    4c:e1:9c:8c:e8:44:68:43:3e:ca:93:06:4b:55:81:
                    ee:8c:9b:d8:27:f7:55:f2:e7:a5:b7:d4:8a:5e:dc:
                    93:2a:d7:0d:ef:45:0a:26:6a:4c:e8:6e:18:99:33:
                    b0:3f:91:c8:57:60:49:6d:ef:b5:3e:3d:63:72:bb:
                    d8:7e:dd:e0:97:17:fd:54:cd:fb:9e:c8:2d:98:a1:
                    f3:d7:95:f9:66:46:55:6f:60:14:b1:34:a2:6a:e7:
                    46:cf:63:82:0d:44:0e:f3:12:99:9b:e3:60:f4:cb:
                    86:1e:6e:06:67:ae:b5:4c:44:cd:00:c4:4b:11:16:
                    73:35:2e:97:c5:40:a0:47:90:b0:e7:73:9f:f0:31:
                    5d:9f:1a:12:90:84:95:4a:a4:88:93:43:33:ad:a7:
                    bb:b2:8d:dd:97:e8:31:2d:1f:1e:24:d1:de:61:a5:
                    b7:5d:1a:72:12:d7:58:f7:1c:2b:53:ef:62:5b:db:
                    6c:86:29:83:b6:bf:0f:44:29:0c:7a:ba:a3:a5:5a:
                    17:03:62:1a:c8:0a:df:16:6e:9e:2a:2b:0e:da:2b:
                    6a:d8:e3:52:bc:14:d8:d2:64:ba:f0:90:bf:a9:15:
                    56:82:b7:b0:9e:38:1c:3c:f5:fb:44:6e:66:b8:ec:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:EE:9E:2B:E1:40:74:BA:C7:95:FD:29:CF:B8:64:15:D6:BA:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bcbc780-2809-4081-9d7f-718071a8c1f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.60.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:62:c8:5f:78:c1:c5:3e:6a:59:12:da:1b:1f:6a:81:66:b4:
         b9:e8:cb:f1:30:f2:95:92:25:40:4a:07:c6:89:98:95:a7:a1:
         13:81:a9:e2:bb:13:dc:29:b1:9a:f1:81:75:5a:e0:af:02:07:
         9b:b9:23:05:bb:70:32:2e:d0:9b:82:0f:bb:db:2e:f7:c3:bd:
         c1:fa:5c:4a:4a:c7:ae:a0:84:60:7a:40:71:87:f1:82:81:4d:
         82:35:65:1a:76:ac:a6:c3:30:ad:da:da:7f:01:19:06:86:55:
         b9:78:b2:c7:e6:b6:ba:9b:82:d4:50:fd:ad:9b:de:5e:d2:6d:
         f4:fc:24:29:bc:d5:83:2e:a7:23:30:e1:19:72:04:eb:66:99:
         87:f4:1e:2b:9e:15:60:24:0e:3d:16:ac:87:49:09:f6:a9:73:
         e6:a0:e6:22:51:99:c7:10:bb:92:37:fd:41:3b:d4:00:66:52:
         3e:c9:b4:91:82:f1:1b:a0:16:e1:c9:0a:a8:12:09:18:02:a3:
         36:c6:2b:b2:d4:34:cf:62:3f:de:79:2c:e3:ba:20:7c:27:88:
         f3:c0:5e:b7:6a:cd:68:31:e9:cd:e7:61:4a:67:9e:27:a3:47:
         70:a0:35:4f:a0:1a:9a:5c:7d:b4:73:8d:25:9c:5c:ec:68:79:
         5e:7e:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----