Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c0b5b21-cbfe-4013-8056-ec2e5c54343c.roa
File:                     9c0b5b21-cbfe-4013-8056-ec2e5c54343c.roa (raw, json)
Hash identifier:          1j1O1glm9p3aZG92UgUoVrYfMQZOliW+isNTCauodAs=
Subject key identifier:   26:EF:B0:00:86:A0:34:B1:06:7D:26:B7:F5:01:BB:B4:0C:0C:B8:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E8E848691B7D27B31423FC2C2981A3C45F19023
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c0b5b21-cbfe-4013-8056-ec2e5c54343c.roa
Signing time:             Tue 24 Dec 2024 00:00:00 +0000
ROA not before:           Tue 24 Dec 2024 00:00:00 +0000
ROA not after:            Tue 28 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.157.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8e:84:86:91:b7:d2:7b:31:42:3f:c2:c2:98:1a:3c:45:f1:90:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 24 00:00:00 2024 GMT
            Not After : Jan 28 23:59:59 2025 GMT
        Subject: serialNumber=2da0859ca92fa467e7b9ae42d7a09faf8846b5ad0082fbd079c955ad651c6297, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:e3:84:b8:be:a0:c6:2b:60:f2:c8:83:21:
                    4d:49:72:31:c0:e3:51:c2:8f:51:c1:6a:09:ca:a4:
                    35:1e:55:35:20:92:38:9f:94:fa:92:f8:bb:b7:a8:
                    b0:17:0f:cd:6e:b1:7e:27:c7:7a:2f:e5:62:ad:9b:
                    1f:b5:41:b9:b8:52:ff:ac:b3:91:23:37:c7:6a:37:
                    d2:88:23:1f:99:c5:d8:cd:d7:e7:db:28:50:2a:97:
                    b0:8a:93:4e:85:f9:82:98:1b:dd:77:d1:22:fd:6d:
                    c9:23:0f:7d:87:63:c2:fb:7f:69:39:14:6b:2b:76:
                    dc:60:4e:70:a3:5c:82:3d:31:bf:a7:dc:ad:bc:18:
                    66:e1:d5:d3:6f:ae:21:01:86:2c:67:25:c5:89:1e:
                    a4:44:a9:21:06:a9:7a:3a:ce:1f:49:f0:0b:b0:ec:
                    28:20:87:b0:c6:19:29:b3:bf:1a:5b:3b:b7:a4:b6:
                    ea:76:2c:c5:3e:b5:c7:55:92:ac:df:fa:2a:96:b1:
                    52:7e:89:74:d8:08:a7:bf:c3:11:d3:88:9c:ef:38:
                    56:17:c8:bb:ea:2a:b5:70:eb:d6:1d:6a:a0:c7:a3:
                    49:1f:fd:68:f7:a6:7c:2a:43:43:86:5b:31:73:f8:
                    fe:8a:75:ff:8d:1b:5d:15:eb:80:41:61:a6:2f:dc:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EF:B0:00:86:A0:34:B1:06:7D:26:B7:F5:01:BB:B4:0C:0C:B8:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c0b5b21-cbfe-4013-8056-ec2e5c54343c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a9:f7:6c:71:46:c4:ba:8d:ea:3b:36:95:c2:c4:9c:4a:59:1a:
         69:0a:6b:72:53:ff:00:bf:5e:bb:9c:b0:64:03:c9:8f:1f:a7:
         fc:d3:21:48:bc:53:4c:b8:1d:47:13:b5:9b:65:bf:4e:e1:3d:
         be:70:41:7a:c3:b2:59:12:e5:ea:d8:0f:97:f0:c6:60:bd:c8:
         7b:b3:e2:47:87:dd:e1:f6:63:88:3c:e0:7a:86:fa:04:b3:0b:
         4b:a7:84:3a:ef:15:ae:45:6b:b8:e9:ab:53:17:20:73:30:36:
         93:23:39:b8:5c:d5:14:51:7f:48:89:77:74:2e:c8:02:68:8d:
         8d:32:37:67:1d:26:7f:2f:fa:2f:71:9f:0c:53:70:b7:92:4d:
         12:7b:ca:7d:66:ca:1a:9e:92:b7:3b:81:78:1d:e4:03:0a:65:
         71:57:25:7e:b5:f8:1d:f5:47:ce:b3:3c:e3:d3:ce:51:7d:25:
         a6:f9:fe:95:cf:96:50:b0:1d:98:c4:eb:1b:f1:46:4b:85:4a:
         0d:89:9d:6a:46:af:f2:40:1a:6c:ec:4d:6d:5c:27:83:18:ee:
         a5:02:eb:da:d4:8c:20:10:3b:05:ce:4b:3c:cc:7f:2b:d8:6d:
         73:81:21:ce:fe:4b:c6:ea:db:9e:74:49:31:c9:24:97:84:e0:
         7c:23:90:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----