Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/962f722e-c5f6-41a1-bb12-c48d58e3f16e.roa
File:                     962f722e-c5f6-41a1-bb12-c48d58e3f16e.roa (raw, json)
Hash identifier:          wfFyng+SKTUoXVmI2XdU6B9KC6so7r817uS8AwK+EdA=
Subject key identifier:   AB:A8:0F:0D:3B:42:70:00:58:F2:4A:D6:46:31:14:FA:27:18:1B:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       083006C125355C493BE07261404C670EA0589209
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/962f722e-c5f6-41a1-bb12-c48d58e3f16e.roa
Signing time:             Wed 25 Dec 2024 00:00:00 +0000
ROA not before:           Wed 25 Dec 2024 00:00:00 +0000
ROA not after:            Wed 29 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        135.140.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:30:06:c1:25:35:5c:49:3b:e0:72:61:40:4c:67:0e:a0:58:92:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 25 00:00:00 2024 GMT
            Not After : Jan 29 23:59:59 2025 GMT
        Subject: serialNumber=a2e3c636485780d573d18a68f9a129402e6a6129e861b242a16811c51f6368a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:2a:df:98:0b:fc:92:d4:ae:42:08:d7:32:
                    ea:86:f9:aa:80:f2:27:d9:5c:25:44:f1:dc:30:67:
                    49:f6:e7:9a:35:81:58:e3:ba:7b:48:52:71:8d:5e:
                    f5:5c:b3:1a:fd:48:e1:fa:6f:fc:1c:4b:ae:f8:75:
                    74:f5:d9:c3:6d:78:4d:e9:f5:3a:fc:37:63:f5:c8:
                    79:11:38:54:e2:05:2b:8b:46:df:3c:89:22:93:c9:
                    18:e1:a2:cf:e6:c3:80:05:da:92:fa:82:8d:8e:09:
                    51:d7:49:45:0e:f0:99:72:87:8d:ae:ff:ba:c2:4b:
                    2f:42:c4:50:36:c4:ce:bb:f7:39:b9:b4:de:2d:0a:
                    cb:84:a9:73:40:7a:b8:d3:52:ea:4d:75:3e:fc:93:
                    14:05:6e:7c:ae:0c:17:10:78:bf:a2:b4:a7:b9:52:
                    2c:c1:60:0f:71:b7:aa:f7:49:57:cf:12:6b:c4:ea:
                    2b:88:fb:fd:fe:37:56:4c:ba:c2:ac:ea:be:23:fe:
                    c4:45:cd:ee:3e:c8:16:cf:54:a5:4b:bb:d6:60:21:
                    a9:a1:bb:c3:bb:19:ea:27:be:32:10:ba:72:9c:15:
                    a4:84:43:c5:c4:d7:24:10:5b:09:b8:ba:18:08:b3:
                    eb:9e:71:ed:c7:c8:c3:04:ca:7e:3b:cb:6b:cb:9d:
                    cc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A8:0F:0D:3B:42:70:00:58:F2:4A:D6:46:31:14:FA:27:18:1B:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/962f722e-c5f6-41a1-bb12-c48d58e3f16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.140.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:d5:22:1b:ab:e5:12:a5:31:f0:7c:55:99:db:21:ad:25:2b:
         61:69:57:96:e5:d4:55:42:3c:8a:40:38:bd:f7:95:a0:cf:e8:
         97:04:d2:64:fc:31:4f:10:7f:0f:f6:ba:5c:41:be:1c:2e:da:
         67:66:a3:9f:28:da:49:a2:e5:0d:d2:13:94:43:5c:38:a1:34:
         79:06:c6:6c:7c:3e:f6:94:b9:13:91:d6:d2:78:ae:75:19:15:
         29:f8:7f:34:39:cb:0f:0f:a4:88:cf:f9:01:b5:be:11:c2:3b:
         47:b2:e3:ed:ea:a4:9d:2f:53:f7:e0:1d:2d:ac:38:0e:f0:35:
         ed:29:33:94:19:d7:b0:5c:f3:01:c4:df:e2:32:fb:08:27:64:
         53:b0:00:c3:ef:46:99:14:c7:40:bb:f1:e3:77:3c:cd:72:9b:
         b6:7e:59:0a:cb:c3:6e:df:5e:1c:e3:9a:1a:f9:a1:a5:22:f6:
         11:87:11:a4:a7:33:ee:32:ea:0b:d7:cf:aa:fd:16:08:72:40:
         1d:dc:97:bd:29:ea:ac:5f:87:af:8b:92:e9:29:7c:1b:63:d6:
         ea:04:3c:e1:74:de:e2:5d:9e:f2:19:4c:16:ee:7c:df:a7:ce:
         8b:63:bc:7a:04:a1:64:87:ff:0d:a6:ac:e3:91:4a:8e:58:04:
         f8:69:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----