Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9373fbdc-d64f-41a3-8c80-eea0234a86a8.roa
File:                     9373fbdc-d64f-41a3-8c80-eea0234a86a8.roa (raw, json)
Hash identifier:          6t9w1UcU3QyuIzxCTt/m0fw0edduNvhr4r0hcpCSrqk=
Subject key identifier:   12:8F:22:DD:B8:94:3F:14:B3:01:6C:A9:CD:B6:F1:EB:31:F9:E8:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20E08100D25AE0299059A5A354ECBDFC897E6E62
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9373fbdc-d64f-41a3-8c80-eea0234a86a8.roa
Signing time:             Tue 24 Dec 2024 00:00:00 +0000
ROA not before:           Tue 24 Dec 2024 00:00:00 +0000
ROA not after:            Tue 28 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        57.139.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e0:81:00:d2:5a:e0:29:90:59:a5:a3:54:ec:bd:fc:89:7e:6e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 24 00:00:00 2024 GMT
            Not After : Jan 28 23:59:59 2025 GMT
        Subject: serialNumber=43bb9cdfeaadb83fda7657eae0585d02ce62137c3a7dd30c983dd629077a8224, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dd:b9:01:6d:db:4a:66:7c:9a:ec:b7:5b:9e:
                    48:e8:6c:66:8a:b1:96:15:26:9d:2b:7a:00:10:cd:
                    e7:d7:fc:17:1c:2a:3f:bc:a8:2a:fd:3d:c3:43:04:
                    37:6f:e3:b7:cc:81:22:63:9b:68:6e:24:99:16:2c:
                    d1:8a:e6:01:60:17:0f:1f:e5:a2:ac:44:a3:78:77:
                    47:10:f9:16:dc:e9:89:3b:22:fb:09:11:00:54:27:
                    b6:9f:2c:c3:01:13:5c:ce:05:40:32:90:f3:75:6d:
                    02:9d:9e:01:dc:6a:54:90:46:42:4e:54:5c:a8:32:
                    2f:1a:82:ac:64:36:4a:96:3e:58:18:8e:16:16:a2:
                    72:4d:e2:d7:3e:2f:55:b5:43:91:64:ee:81:1b:0b:
                    ec:00:3d:f5:eb:a1:fe:b1:64:76:21:6c:1e:db:14:
                    1e:4b:67:43:bd:4d:6f:88:31:71:8c:e6:cc:d1:54:
                    63:0d:20:d7:c4:67:90:4d:58:e7:c4:a4:0a:a7:e3:
                    78:f4:bd:6b:92:5c:a3:f4:ea:5f:0b:a0:d7:c1:f8:
                    af:29:2f:31:3f:1c:d3:a1:03:60:db:98:07:30:b4:
                    90:16:d3:ae:c9:a6:64:e3:55:b2:70:3c:5d:7c:fc:
                    20:58:2f:9f:9f:09:da:93:6b:9c:56:24:5f:c6:24:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8F:22:DD:B8:94:3F:14:B3:01:6C:A9:CD:B6:F1:EB:31:F9:E8:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9373fbdc-d64f-41a3-8c80-eea0234a86a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.139.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d5:32:f7:5a:e8:64:82:e0:53:27:78:ff:24:7b:c0:9f:ef:76:
         54:29:e2:f6:43:c4:e7:0b:61:dd:b4:a1:88:4c:7c:78:ba:51:
         fe:45:95:dd:1f:25:91:bc:7f:78:e6:b7:dc:bc:59:68:cd:a9:
         4c:29:6d:a0:f2:09:da:77:dc:cb:e8:da:9e:8e:f5:67:6e:20:
         bf:9c:b4:e7:8d:01:fe:aa:a1:a5:b9:74:6f:6c:22:69:36:85:
         64:0c:a1:f9:02:d0:60:1b:84:92:b3:b5:35:d1:0a:cd:ff:c4:
         6d:e7:32:17:b4:1a:83:01:4d:b5:ad:a1:21:bd:e5:2c:25:a7:
         ab:f2:6f:0f:cd:c8:06:03:14:13:8d:ec:2b:c2:db:2a:05:a0:
         f6:2d:46:db:18:c7:0e:34:c3:30:f7:40:e3:3c:9f:46:94:9d:
         d8:b2:e3:4e:ca:00:58:bd:3c:cc:56:af:66:1a:0e:2f:f4:ee:
         31:1f:ce:1f:09:22:91:63:28:ad:d6:9c:41:4d:29:ac:91:3e:
         0f:86:73:25:55:e5:a0:a7:00:28:c1:67:c7:78:ce:59:28:b5:
         8f:1a:c9:49:8b:1d:1e:ab:97:92:23:b3:fb:07:d1:f0:f5:20:
         9b:bf:70:37:18:45:ad:54:82:7a:cb:16:50:f9:3b:8d:1b:25:
         9b:1d:ba:5c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUIOCBANJa4CmQWaWjVOy9/Il+bmIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI0MDAwMDAwWhcNMjUwMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0M2JiOWNkZmVhYWRiODNmZGE3NjU3ZWFlMDU4NWQwMmNl
NjIxMzdjM2E3ZGQzMGM5ODNkZDYyOTA3N2E4MjI0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCP3bkBbdtKZnya7LdbnkjobGaKsZYVJp0regAQzefX/Bcc
Kj+8qCr9PcNDBDdv47fMgSJjm2huJJkWLNGK5gFgFw8f5aKsRKN4d0cQ+Rbc6Yk7
IvsJEQBUJ7afLMMBE1zOBUAykPN1bQKdngHcalSQRkJOVFyoMi8agqxkNkqWPlgY
jhYWonJN4tc+L1W1Q5Fk7oEbC+wAPfXrof6xZHYhbB7bFB5LZ0O9TW+IMXGM5szR
VGMNINfEZ5BNWOfEpAqn43j0vWuSXKP06l8LoNfB+K8pLzE/HNOhA2DbmAcwtJAW
067JpmTjVbJwPF18/CBYL5+fCdqTa5xWJF/GJDkRAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUEo8i3biUPxSzAWypzbbx6zH56DQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkzNzNmYmRjLWQ2NGYtNDFhMy04YzgwLWVlYTAyMzRhODZhOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA5izANBgkqhkiG9w0BAQsFAAOCAQEA1TL3WuhkguBTJ3j/JHvAn+92VCni
9kPE5wth3bShiEx8eLpR/kWV3R8lkbx/eOa33LxZaM2pTCltoPIJ2nfcy+jano71
Z24gv5y0540B/qqhpbl0b2wiaTaFZAyh+QLQYBuEkrO1NdEKzf/EbecyF7QagwFN
ta2hIb3lLCWnq/JvD83IBgMUE43sK8LbKgWg9i1G2xjHDjTDMPdA4zyfRpSd2LLj
TsoAWL08zFavZhoOL/TuMR/OHwkikWMordacQU0prJE+D4ZzJVXloKcAKMFnx3jO
WSi1jxrJSYsdHquXkiOz+wfR8PUgm79wNxhFrVSCessWUPk7jRslmx26XA==
-----END CERTIFICATE-----