Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3b143dd-e4b2-4fa5-a948-ba34cd244aae.roa
File:                     a3b143dd-e4b2-4fa5-a948-ba34cd244aae.roa (raw, json)
Hash identifier:          Q8WFmwDKFyGP+riYkpSopBuWp5D7eQYtlfeI8dqQgAo=
Subject key identifier:   87:A9:4B:2F:E0:A0:04:5E:CF:7F:F2:07:C7:C8:C5:EC:6D:6F:D5:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E567ED14E5BB97A0C91A1B257C02E3C89F46F30
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3b143dd-e4b2-4fa5-a948-ba34cd244aae.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        64.91.128.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:56:7e:d1:4e:5b:b9:7a:0c:91:a1:b2:57:c0:2e:3c:89:f4:6f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=d7a290bdf8365e1e266c9e9afdfd95d10401e0abec74bc441b3297d9db8628e7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:04:64:c8:10:c9:45:7d:6c:6b:db:9d:d5:
                    81:48:34:0a:af:81:b8:80:1c:4b:f8:62:4e:e1:ea:
                    04:4a:63:83:41:71:45:07:60:e7:ad:1f:9e:52:f5:
                    fa:1e:24:5c:cf:af:98:f9:82:64:e7:ab:dd:9c:eb:
                    13:3d:7a:5d:f6:a5:87:f7:96:34:37:23:31:26:de:
                    ba:55:14:a7:92:1c:53:be:1b:31:6f:13:97:c0:5d:
                    6b:e2:d3:eb:3e:76:ea:6b:8d:2b:a9:03:a7:d5:13:
                    d3:88:2b:71:39:12:02:75:b4:24:7a:e9:7a:f3:14:
                    70:e9:9a:27:d3:b5:8b:32:46:1b:8d:85:38:9a:f2:
                    5c:f7:57:e8:bc:a8:90:92:63:9c:86:16:28:90:7f:
                    a9:44:72:79:74:cd:0b:7d:0c:08:1f:2b:72:81:7d:
                    19:f4:80:6c:d2:05:18:1a:6b:07:79:b8:b9:fe:cd:
                    8c:f6:07:11:76:1f:d2:55:ce:57:1c:74:c0:4a:0f:
                    9c:b5:54:fe:51:b1:02:05:e3:25:b3:a1:ce:b3:0d:
                    97:af:07:4e:05:b5:8f:cb:de:c9:e5:b6:37:f9:c9:
                    bc:38:31:9c:98:6c:85:48:fd:90:45:53:d7:f4:c0:
                    f0:ea:b0:7e:23:3f:ee:36:8f:1f:41:7c:f7:b5:32:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A9:4B:2F:E0:A0:04:5E:CF:7F:F2:07:C7:C8:C5:EC:6D:6F:D5:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3b143dd-e4b2-4fa5-a948-ba34cd244aae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.91.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5b:c5:68:d6:df:dc:2c:50:ce:79:24:d0:f5:f4:14:a1:e8:40:
         21:ee:d4:2a:3c:0f:e2:0e:6e:b3:33:06:61:27:1c:61:28:b2:
         c3:ed:43:fe:65:9b:22:fb:0d:dc:81:a9:cc:5f:50:ae:c4:98:
         3a:d2:05:e7:a7:76:d3:d0:70:52:98:f1:a7:12:47:39:4d:40:
         79:a8:8e:1d:e6:0a:07:5e:da:af:90:58:bd:3a:b3:d7:85:2c:
         6b:4f:1c:c8:07:1f:3c:bd:2c:06:40:6f:e0:ef:a6:5c:68:25:
         75:a4:20:c8:ed:74:4b:4a:1b:41:ae:18:8d:66:59:db:e9:67:
         20:ac:05:dd:df:10:f6:ee:18:4b:dc:e4:2c:77:18:0f:f0:54:
         5e:02:8b:43:7e:26:50:ec:9f:6c:96:d8:12:11:00:ca:8c:66:
         a7:20:c1:f1:38:99:cd:cf:8d:82:a3:3a:d7:1e:a8:54:11:53:
         f8:af:c2:46:10:3a:55:a8:55:e1:5a:9c:fe:3e:c2:3b:7d:45:
         b5:74:05:0f:35:11:42:f6:4d:f2:24:40:27:00:ba:3a:b4:06:
         a9:a5:33:f1:7a:10:1f:9b:54:06:21:dc:75:29:9b:47:74:d8:
         98:45:88:1b:a7:f8:ac:9c:e0:b1:79:f3:62:89:eb:83:59:6b:
         6c:81:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----