Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96bae712-9cf5-45ce-868c-b38e70f729a5.roa
File:                     96bae712-9cf5-45ce-868c-b38e70f729a5.roa (raw, json)
Hash identifier:          Od4Vsjuj1zbSxUYuFbn0I94RfoQ/hMCigC75FFQShWI=
Subject key identifier:   19:F2:0E:CB:6D:18:EF:91:68:C8:06:69:5E:4D:26:10:4A:B3:6C:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18D82DCD91D4B12AABBA1FF626067DCFCEC0962F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96bae712-9cf5-45ce-868c-b38e70f729a5.roa
Signing time:             Sat 11 Jan 2025 00:00:00 +0000
ROA not before:           Sat 11 Jan 2025 00:00:00 +0000
ROA not after:            Sat 15 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        205.210.120.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d8:2d:cd:91:d4:b1:2a:ab:ba:1f:f6:26:06:7d:cf:ce:c0:96:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 11 00:00:00 2025 GMT
            Not After : Feb 15 23:59:59 2025 GMT
        Subject: serialNumber=9132a2cccb364cf3635787cf647a30778af53cd63e08cf2ef3f566c52bd68186, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a8:8b:a8:fd:d3:4f:d4:e5:f0:5b:7d:16:05:
                    78:a6:7f:a3:58:19:89:7b:ce:77:6c:28:e5:6c:f8:
                    d8:14:f0:4d:b1:7a:e7:dd:34:f0:8b:50:46:2d:61:
                    0a:f6:15:1a:aa:8c:75:8a:fd:04:57:06:f0:3e:c3:
                    84:b8:af:4e:e5:12:4a:42:14:d0:71:71:ad:3d:31:
                    6c:12:fc:72:5a:06:e8:16:f0:fd:0f:0d:da:6c:b9:
                    27:00:49:43:e0:49:6b:44:2a:68:e6:b7:f9:d0:04:
                    c9:e5:2f:a4:af:88:47:c1:91:4b:02:09:d8:ac:9e:
                    a5:92:00:2b:06:07:e6:c8:8e:bb:18:5e:3c:c1:ac:
                    55:e7:d6:57:82:82:1b:f6:57:56:15:3f:4c:66:92:
                    4b:97:1d:8c:8f:0d:25:41:f6:cd:99:c5:18:7d:40:
                    f7:d6:17:d5:43:b8:96:0a:0c:1a:d9:12:04:11:a1:
                    74:6d:4e:57:89:78:a0:86:b7:ef:fa:27:4a:1f:93:
                    b5:32:d9:4c:7e:5a:4e:49:c2:46:18:df:74:a6:68:
                    22:60:d2:69:d1:fe:5c:45:c6:ac:c2:35:3d:2c:ca:
                    91:a6:aa:f1:c7:bf:cd:91:5b:f5:4d:a8:91:0e:00:
                    2c:f8:5f:d7:80:17:b0:38:35:f8:4f:56:32:31:52:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F2:0E:CB:6D:18:EF:91:68:C8:06:69:5E:4D:26:10:4A:B3:6C:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96bae712-9cf5-45ce-868c-b38e70f729a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.210.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:9a:d8:f0:f6:60:e6:84:b8:f0:25:eb:07:2b:e5:5a:66:96:
         a6:bf:81:0f:f8:87:57:12:7c:df:1c:e1:53:de:fd:7f:2d:1e:
         7c:0e:d2:1e:13:e2:d1:20:f1:4f:5d:f1:ad:87:70:97:68:03:
         d4:1c:0d:68:9e:6d:1e:63:35:4c:f3:66:4d:1d:b2:d9:a0:8f:
         d6:2d:ac:81:42:0e:b4:a1:f7:83:1c:07:87:5f:1b:dc:ba:e9:
         88:aa:9c:17:73:9d:b6:8f:30:dd:e5:0a:d1:b6:00:62:a5:50:
         aa:ba:79:fa:a9:98:65:14:8d:18:65:1c:c9:c6:fe:9b:58:92:
         ba:b1:e9:1e:67:de:16:c8:28:fe:14:0a:8a:09:53:6e:e8:bd:
         d0:de:1a:40:5c:1b:02:2e:3b:d3:86:8f:d9:f4:c2:f1:48:80:
         1d:f4:a8:97:79:33:71:71:98:d6:ef:7f:87:32:ec:c4:84:56:
         21:83:a3:71:2a:9e:7b:c6:82:2c:15:93:f0:2f:78:22:54:6a:
         af:d7:fc:4f:c7:58:c5:c8:cc:a8:5a:57:b4:68:0a:45:0c:66:
         76:5e:a8:77:53:6d:4f:7b:d8:34:61:1f:23:3f:ee:cb:34:15:
         fb:73:4e:46:d1:24:ea:4f:75:2b:f3:67:52:57:12:4b:5f:c6:
         18:36:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----