Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ab2a1ba-e615-48eb-99b0-d03a95c7bd77.roa
File:                     8ab2a1ba-e615-48eb-99b0-d03a95c7bd77.roa (raw, json)
Hash identifier:          mGqQODD40XRWi+2G8J5178infqdoyY87/NeGpZGN+xA=
Subject key identifier:   81:DD:C6:3A:CF:D4:88:C4:1E:5B:88:00:C8:12:20:9D:44:C4:B1:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E9F2A35F317D69D068FA69E015475BF9F5FB9F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ab2a1ba-e615-48eb-99b0-d03a95c7bd77.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        99.76.64.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9f:2a:35:f3:17:d6:9d:06:8f:a6:9e:01:54:75:bf:9f:5f:b9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=c6e2e9c79b69e332f5ada8f2a0881e94ff19bc5f7c57c54c4a09e2224537a4d6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:c4:2f:01:c3:f9:2e:a1:5e:17:63:20:18:
                    ba:3b:60:9c:f6:5e:23:07:25:77:33:81:26:4d:de:
                    44:d1:6e:db:27:05:c6:49:79:46:65:35:a1:d4:07:
                    94:ae:d5:63:d1:6f:b1:7f:43:c7:4b:3e:d9:1b:84:
                    01:d0:c6:9d:7c:ff:11:ee:91:2c:8c:b2:7f:e3:6a:
                    b4:6c:69:f5:7e:1d:f5:75:37:9a:26:d6:6b:18:93:
                    06:fe:aa:fb:2f:1c:63:65:6e:1a:5c:9b:06:ac:2e:
                    8f:31:a6:1b:8a:b7:65:e1:fa:bd:0b:85:7a:9b:1c:
                    cc:71:3b:59:55:c4:2e:e5:f6:85:bd:05:50:ea:7d:
                    34:42:e4:00:46:6f:60:94:af:06:9b:08:0b:e9:a0:
                    8a:5b:e8:de:2e:33:f6:b4:19:fc:85:65:8f:21:0d:
                    3a:92:96:41:8f:10:fd:90:58:e2:7f:0c:77:a7:8c:
                    07:dc:21:8e:c5:69:b8:f7:a7:81:1f:bf:15:2f:e4:
                    08:ab:15:8d:87:37:40:f1:1d:a4:31:80:dc:32:ef:
                    c8:47:cb:0f:d9:88:84:bc:d6:fd:b2:03:77:d9:09:
                    fd:4c:a4:56:a1:86:77:91:e1:d5:16:8e:4c:21:72:
                    01:bb:c7:a8:b4:4f:8c:18:9b:7a:d4:4c:d9:9a:86:
                    1d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DD:C6:3A:CF:D4:88:C4:1E:5B:88:00:C8:12:20:9D:44:C4:B1:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ab2a1ba-e615-48eb-99b0-d03a95c7bd77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.76.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0b:67:ff:3e:00:34:15:be:26:6b:e0:6d:46:cc:f4:65:2a:50:
         05:ed:66:20:d6:cb:ca:c5:40:5e:ba:91:5a:04:2c:0c:72:d0:
         62:35:62:fc:a9:e3:07:37:97:15:41:6b:db:0a:c6:66:ef:f0:
         63:86:9e:40:88:4c:72:dc:6c:d9:62:ca:c2:93:c8:65:84:09:
         8f:c8:76:a1:36:c5:b6:c4:3a:2f:3e:34:6f:bf:db:b4:ac:fd:
         0b:6f:07:23:ce:c8:62:3e:2f:08:24:65:f1:df:a8:bd:39:1c:
         32:bf:66:2a:4a:cb:4d:be:86:15:c8:31:ee:fe:a5:b5:9a:10:
         45:29:82:30:30:06:d3:a1:cb:c4:98:fc:73:76:37:7a:56:4d:
         8b:27:5f:39:de:c3:b5:45:d9:f2:0c:45:c2:c1:8e:d2:2c:e0:
         30:0b:73:ba:f1:6f:f0:fb:da:9d:3e:78:05:ba:4b:4d:32:39:
         8c:f6:d6:03:cc:f4:c0:d8:b3:f4:3e:3f:df:cd:a5:11:eb:69:
         53:a3:6e:ba:41:aa:c2:c7:3c:3d:72:4c:e0:a6:e3:55:09:b8:
         ce:5a:0b:1f:5d:04:df:52:dc:d6:c2:e3:b6:cf:11:18:3b:41:
         1e:68:b6:c3:77:d4:5c:92:b0:a4:fd:b7:83:fd:fd:f7:fc:a0:
         31:05:46:a0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHp8qNfMX1p0Gj6aeAVR1v59fufIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNmUyZTljNzliNjllMzMyZjVhZGE4ZjJhMDg4MWU5NGZm
MTliYzVmN2M1N2M1NGM0YTA5ZTIyMjQ1MzdhNGQ2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5t8QvAcP5LqFeF2MgGLo7YJz2XiMHJXczgSZN3kTRbtsn
BcZJeUZlNaHUB5Su1WPRb7F/Q8dLPtkbhAHQxp18/xHukSyMsn/jarRsafV+HfV1
N5om1msYkwb+qvsvHGNlbhpcmwasLo8xphuKt2Xh+r0LhXqbHMxxO1lVxC7l9oW9
BVDqfTRC5ABGb2CUrwabCAvpoIpb6N4uM/a0GfyFZY8hDTqSlkGPEP2QWOJ/DHen
jAfcIY7Fabj3p4EfvxUv5AirFY2HN0DxHaQxgNwy78hHyw/ZiIS81v2yA3fZCf1M
pFahhneR4dUWjkwhcgG7x6i0T4wYm3rUTNmahh0tAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUgd3GOs/UiMQeW4gAyBIgnUTEsT8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhhYjJhMWJhLWU2MTUtNDhlYi05OWIwLWQwM2E5NWM3YmQ3Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZjTEAwDQYJKoZIhvcNAQELBQADggEBAAtn/z4ANBW+JmvgbUbM9GUqUAXt
ZiDWy8rFQF66kVoELAxy0GI1Yvyp4wc3lxVBa9sKxmbv8GOGnkCITHLcbNliysKT
yGWECY/IdqE2xbbEOi8+NG+/27Ss/QtvByPOyGI+LwgkZfHfqL05HDK/ZipKy02+
hhXIMe7+pbWaEEUpgjAwBtOhy8SY/HN2N3pWTYsnXznew7VF2fIMRcLBjtIs4DAL
c7rxb/D72p0+eAW6S00yOYz21gPM9MDYs/Q+P9/NpRHraVOjbrpBqsLHPD1yTOCm
41UJuM5aCx9dBN9S3NbC47bPERg7QR5otsN31FySsKT9t4P9/ff8oDEFRqA=
-----END CERTIFICATE-----