Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/853df1db-a09d-4f3c-ba4e-0e4495cf5b9b.roa
File:                     853df1db-a09d-4f3c-ba4e-0e4495cf5b9b.roa (raw, json)
Hash identifier:          aUzz7TOP3Eokm9K82XrErDI4Ra14voD+SyOWNyp8kF0=
Subject key identifier:   36:83:52:5A:E5:05:2D:6E:3E:48:E8:6E:B6:D4:F9:71:ED:07:98:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29619D9990F06D59D6E3DEAE3FE758C99DAC2FB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/853df1db-a09d-4f3c-ba4e-0e4495cf5b9b.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        141.230.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:61:9d:99:90:f0:6d:59:d6:e3:de:ae:3f:e7:58:c9:9d:ac:2f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=6f8ea32cee16d88c1349d743c774e239cc4fb4a542c12ddc83d3176c4db083d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:4f:8e:4c:da:9d:e5:f4:fc:8a:f7:14:88:
                    c8:30:86:4d:19:8c:0e:50:a4:b4:33:ca:ce:b5:5c:
                    54:e1:9a:d3:32:07:c5:db:ee:d1:ea:b9:55:4f:34:
                    1b:79:03:3d:69:76:0a:c8:9a:b3:a8:06:d5:8e:3a:
                    b2:9c:5a:0c:a8:68:38:51:4f:b7:af:bf:08:e9:de:
                    20:2c:62:33:28:65:ca:89:e3:50:69:45:54:ed:5e:
                    d4:94:82:4e:01:2c:2f:8b:68:71:e3:17:e6:7e:3e:
                    11:6b:9c:51:a8:60:da:05:53:eb:1d:db:10:11:51:
                    ca:1d:9f:1a:8f:1f:02:0b:03:67:66:db:fe:95:52:
                    a3:de:c8:27:c7:a5:b4:03:9d:cc:3b:be:8d:54:ae:
                    30:2a:ff:9f:6c:09:5f:c7:43:75:c8:52:d1:49:cb:
                    d6:b2:d4:9b:70:5b:48:29:0d:01:e7:55:23:da:b9:
                    f5:c0:df:33:53:fb:bd:93:3e:76:c4:6e:7d:50:6f:
                    2b:71:a1:ab:a1:b1:c6:00:01:2d:d9:42:e4:e9:ee:
                    92:d5:e3:32:59:32:4c:bd:a1:8f:1f:40:2a:5f:34:
                    58:f5:68:d7:4b:36:52:cd:c3:a9:8a:16:20:7c:0a:
                    5e:c3:57:c9:35:4a:b1:13:2f:c2:c8:5c:a3:3f:32:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:83:52:5A:E5:05:2D:6E:3E:48:E8:6E:B6:D4:F9:71:ED:07:98:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/853df1db-a09d-4f3c-ba4e-0e4495cf5b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cb:cf:67:d5:9d:f7:d4:1f:5b:30:f5:c8:86:f5:89:bc:54:56:
         bb:30:74:40:ac:8c:8d:e4:e5:94:45:14:98:42:c6:d4:6c:f4:
         4f:13:a0:a3:1b:41:28:bc:39:c3:b8:d1:8c:a9:d4:50:cf:4d:
         4f:a8:3b:dc:77:18:c2:0f:91:b2:3f:99:f7:ac:bb:af:ff:78:
         96:75:3b:dd:3e:07:94:18:d9:51:7e:07:3d:b0:2b:0c:0f:fb:
         2f:77:0e:39:4e:44:a8:4b:6a:76:47:ef:96:52:d5:d1:98:65:
         98:40:e1:e3:a5:05:90:80:00:7b:96:ef:cc:07:90:22:11:3c:
         69:bd:ba:06:b2:00:50:65:65:ab:e1:83:6e:17:b2:5b:af:d5:
         ad:3a:02:23:66:65:a4:25:de:76:36:bd:5a:f1:b7:64:a8:5f:
         04:80:a7:83:05:17:b4:f9:ca:1f:0a:43:58:39:e4:27:a8:b8:
         6c:41:79:8a:67:a2:34:b7:24:33:76:9d:f8:b7:bf:f9:c4:3d:
         8a:92:a0:5e:9a:f8:5b:5b:fe:92:a3:df:d2:f8:78:8e:55:a1:
         ef:aa:40:ae:55:d7:48:ae:18:c0:27:98:02:8d:5f:95:14:3a:
         b9:66:8f:cb:fb:2a:ed:4f:e6:eb:ed:6e:dc:23:e1:1b:bd:af:
         03:48:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----