Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ccb8223-d7b6-4d19-9b2e-99dfdff66afb.roa
File:                     7ccb8223-d7b6-4d19-9b2e-99dfdff66afb.roa (raw, json)
Hash identifier:          3F81FD9jSbWpd9rA2oP7Ri1AtiyEPZ3htZM/wRIvklQ=
Subject key identifier:   8A:97:63:EE:62:D0:D5:62:B6:23:33:A0:63:D4:2C:65:A2:7D:44:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E95AB592B382889E98807F1CA2B9CD6EBFA0906
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ccb8223-d7b6-4d19-9b2e-99dfdff66afb.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.79.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:95:ab:59:2b:38:28:89:e9:88:07:f1:ca:2b:9c:d6:eb:fa:09:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=6bb743aa4e14e552298fee70bf83d1ce458f0532544ded09361299d01fa02c80, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:3e:17:e8:c7:8f:dd:55:92:c4:47:a4:13:
                    88:76:58:e7:0c:15:68:c4:89:af:16:10:6f:bb:fb:
                    79:9b:3d:bf:7e:06:5b:09:b8:2d:47:35:b1:84:49:
                    df:a5:3f:d6:a6:b8:27:15:16:2f:97:17:6b:ce:64:
                    b5:e2:2d:a9:c0:ae:da:65:28:74:b0:70:9e:d2:f7:
                    16:fc:83:a3:8c:e7:11:9d:b2:47:ba:00:8d:4d:a6:
                    83:a5:95:1d:44:f0:7f:58:13:a7:5a:df:54:e3:42:
                    e2:66:b0:a6:e3:48:d0:b7:81:10:5d:e4:72:ed:6b:
                    bb:f8:72:05:99:36:f5:7b:01:38:4d:51:b4:ca:cd:
                    74:eb:d2:00:d2:e1:e8:34:fc:2e:7a:46:8d:69:97:
                    8b:fb:2d:c8:75:6c:66:35:bb:c1:a8:df:ce:09:02:
                    17:55:63:c0:7f:1a:5c:17:97:2e:54:5b:be:7c:46:
                    43:c8:c6:ca:84:7e:c7:6d:fd:66:6e:a1:eb:9d:e5:
                    3d:89:8f:2b:e4:d0:dd:07:5e:4b:50:e6:ab:59:99:
                    3f:74:02:b5:59:df:19:72:1b:68:12:05:eb:2f:80:
                    91:c3:5b:a8:97:ac:bb:44:b7:b5:36:72:d2:7b:26:
                    5b:e0:23:89:9a:9c:16:05:a2:5c:89:77:40:f7:e8:
                    72:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:97:63:EE:62:D0:D5:62:B6:23:33:A0:63:D4:2C:65:A2:7D:44:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ccb8223-d7b6-4d19-9b2e-99dfdff66afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.79.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:f0:d9:c9:d7:ed:9a:96:b5:67:bb:a2:2a:30:b0:3c:c1:c6:
         4a:00:97:ba:53:58:e7:b5:8d:ce:99:57:8d:a3:22:64:47:3d:
         7e:ef:74:30:e4:b1:2f:94:3d:07:67:85:fd:f6:1b:87:48:3c:
         b3:12:f5:8e:3a:c8:3a:20:48:0d:f7:30:e0:f5:0f:c2:86:6a:
         c7:10:42:bb:6c:54:d1:4b:db:5d:ef:a3:8d:94:02:94:74:6c:
         29:20:1c:3e:18:7a:5c:1c:3e:ad:f9:cc:02:54:ed:b2:e6:00:
         f6:39:2e:80:b6:c6:95:5a:32:76:22:3a:8d:2e:f1:75:78:45:
         36:23:73:8a:ce:73:93:d2:ec:2d:98:2b:e1:8c:1d:37:14:a1:
         8c:cd:99:aa:ac:2a:a9:03:d8:0c:ed:77:1b:7f:b2:4d:fb:9c:
         b4:ab:ef:43:1a:d4:9c:81:53:53:3a:69:b8:31:aa:33:96:07:
         8e:df:d9:0b:7b:95:3e:f5:f1:ec:34:9e:7c:4b:a5:8f:a3:63:
         c4:a0:71:1d:3a:1e:10:33:b5:f4:51:2b:a8:7e:39:db:83:8d:
         0e:e1:54:ed:6a:d2:e4:d0:e8:2b:2c:aa:63:e3:ee:85:d2:59:
         c2:c3:52:34:0c:29:4a:05:ed:ca:01:8c:d2:94:53:47:c2:bf:
         04:bb:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----