Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fd607f9-7ca8-4c8d-b57d-78c58dc39541.roa
File:                     9fd607f9-7ca8-4c8d-b57d-78c58dc39541.roa (raw, json)
Hash identifier:          YKDCTpsAaLA9qbGl7pWfRnnfBadzxf9FiaY1j2ET4d8=
Subject key identifier:   85:AB:FC:C5:D7:93:56:E2:5A:9D:E3:EC:E2:11:A9:D7:7F:E0:C0:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0997CB8BC745C13D481F7EC58EFF94E992240009
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fd607f9-7ca8-4c8d-b57d-78c58dc39541.roa
Signing time:             Mon 02 Dec 2024 00:00:00 +0000
ROA not before:           Mon 02 Dec 2024 00:00:00 +0000
ROA not after:            Mon 06 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        16.157.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:97:cb:8b:c7:45:c1:3d:48:1f:7e:c5:8e:ff:94:e9:92:24:00:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  2 00:00:00 2024 GMT
            Not After : Jan  6 23:59:59 2025 GMT
        Subject: serialNumber=1d9eedfd9ce4d54cfd6722ac849e5eaee5b152d3c8d2b63bad917c9ab4f28c84, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7e:03:b4:d0:6e:40:89:af:0f:3f:b4:a3:5b:
                    7c:c9:ff:f9:54:fc:7d:7c:b3:d0:52:0a:31:63:7a:
                    11:07:0e:04:73:82:18:e8:69:e6:bc:29:f7:4d:ec:
                    10:08:ee:82:d9:e7:4c:11:39:cd:10:d2:c4:61:68:
                    f7:77:8e:ba:8d:ca:ea:06:04:93:e8:a2:1d:97:e7:
                    86:b6:65:5b:61:f0:27:e9:75:b4:54:2a:bf:a6:19:
                    f5:87:82:c4:3c:e6:f5:1d:ba:39:50:08:6a:bf:a2:
                    47:f4:ed:14:c8:79:9c:93:00:cf:20:a4:70:c1:ce:
                    8b:0c:40:a5:5d:ef:bb:11:fa:43:ef:63:fd:49:9f:
                    09:e7:92:90:e9:a0:1d:8a:b8:8c:5d:67:88:d5:34:
                    c5:37:96:bc:7f:d5:2e:2e:cc:87:e1:99:77:63:41:
                    35:bb:10:c2:58:a0:07:62:d9:5b:86:d3:c9:f0:58:
                    f1:6b:fe:28:c5:50:07:c4:ce:fb:4b:67:f1:28:c6:
                    43:f4:f3:19:9c:a1:66:6f:b9:a8:43:84:b0:f5:1f:
                    25:b6:a4:4d:09:a4:e3:96:43:49:48:ef:6e:f9:ec:
                    32:7b:fe:18:37:ed:26:d8:64:f2:27:8a:8b:e9:fd:
                    2e:6a:5b:b0:6a:cb:21:93:d3:b9:70:eb:2a:aa:55:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AB:FC:C5:D7:93:56:E2:5A:9D:E3:EC:E2:11:A9:D7:7F:E0:C0:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fd607f9-7ca8-4c8d-b57d-78c58dc39541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:00:92:f4:68:70:bd:6c:a2:47:d1:f3:dc:a8:39:e7:54:e5:
         02:39:f7:21:a5:8e:e3:d5:6c:d5:f9:75:0d:fe:3f:96:20:80:
         dd:ea:26:47:bb:da:db:16:87:69:26:e4:80:2a:75:a6:e4:d0:
         f9:e0:3e:00:1c:16:63:a4:8a:ba:8a:ab:e5:c0:bc:07:73:d9:
         b5:2b:ec:e2:e1:63:8f:74:67:01:1e:66:70:12:56:0d:ac:0b:
         f8:a3:cc:2d:1c:34:cd:a0:80:6c:c4:1e:b8:15:5a:23:5d:4c:
         be:b9:f6:e8:03:76:b1:4c:4b:cc:bd:46:21:52:db:70:0d:3b:
         16:b7:2b:47:53:6e:9e:74:20:df:5c:ca:93:c6:0f:65:61:02:
         7d:c8:88:45:fe:56:39:6c:d4:97:f2:53:4d:f5:43:fd:98:4a:
         97:61:e1:8d:5c:b2:3f:b6:5b:cc:9c:49:e6:1f:2a:b5:2f:de:
         0d:84:4c:ec:19:c2:3f:94:8e:28:c0:c2:e6:54:28:aa:a8:ce:
         d0:40:c1:0b:b1:24:ed:b4:6c:7c:b5:4a:b1:c3:e1:b5:88:e8:
         2a:8d:32:99:77:42:f3:32:00:0c:7f:33:b4:da:bb:e1:0d:d0:
         36:67:3d:d4:72:9b:77:e5:13:46:02:93:47:12:bd:4f:dd:52:
         d2:94:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----