Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a88399bf-d69e-4c9a-86af-f32b28ebd901.roa
File:                     a88399bf-d69e-4c9a-86af-f32b28ebd901.roa (raw, json)
Hash identifier:          qKQjWcEKja7kzC9/lZY49pBrFRmIFqiZVmRYebDHw9Y=
Subject key identifier:   10:41:0C:38:63:11:FB:81:5F:5A:ED:67:5E:18:72:DC:FB:71:A4:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74648698F09AF2C0985E2E0F8DA9C82DDDBE61B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a88399bf-d69e-4c9a-86af-f32b28ebd901.roa
Signing time:             Mon 23 Dec 2024 00:00:00 +0000
ROA not before:           Mon 23 Dec 2024 00:00:00 +0000
ROA not after:            Mon 27 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        129.224.128.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:64:86:98:f0:9a:f2:c0:98:5e:2e:0f:8d:a9:c8:2d:dd:be:61:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 23 00:00:00 2024 GMT
            Not After : Jan 27 23:59:59 2025 GMT
        Subject: serialNumber=af9ab80a6a4369ad0cb1837de50aa68d4e167ec3f0515d942566a5dc16f42fe4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:4a:fe:82:a0:d3:8a:e5:f1:58:83:99:c2:
                    26:fb:a1:76:3b:07:f6:7c:c0:90:f0:54:2e:93:df:
                    de:b2:ca:a3:e7:e5:f6:b6:8f:80:2d:aa:bb:b9:ba:
                    2b:3d:be:20:70:2d:42:71:0d:1e:cb:c0:2c:ad:c4:
                    9b:4f:3a:bd:99:91:ac:58:94:b9:46:8d:6a:62:23:
                    76:d9:18:ee:4a:46:3d:f5:a6:fe:3f:bd:17:a2:ad:
                    10:ed:3e:74:5f:d6:b5:49:24:04:18:1d:0f:11:92:
                    eb:88:31:ce:b6:1f:bc:b8:ed:c4:2e:72:86:7a:fe:
                    51:15:c2:0d:66:c2:5c:ec:83:54:fd:6b:e7:9e:fd:
                    80:1f:40:df:88:96:bd:ff:9a:0f:fd:ef:9c:0a:7c:
                    72:58:9a:95:12:de:56:d0:4d:63:87:2a:d0:b8:cd:
                    81:38:60:0c:7d:b4:6b:81:10:fc:e4:3a:c9:66:58:
                    6c:cb:52:2f:cf:d7:0f:a6:43:d4:a2:8f:45:0b:e8:
                    07:8e:3e:5e:4c:13:38:c9:e7:85:86:68:23:0d:bf:
                    7a:c5:b8:3b:a9:79:29:d2:60:e2:17:36:a7:1d:b8:
                    c3:b2:99:73:19:d5:54:67:e2:e8:b1:75:e9:a0:4d:
                    98:82:58:73:7e:0a:fc:8e:0e:d3:db:6d:e9:7f:87:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:41:0C:38:63:11:FB:81:5F:5A:ED:67:5E:18:72:DC:FB:71:A4:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a88399bf-d69e-4c9a-86af-f32b28ebd901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.224.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:61:40:52:93:fb:6b:cf:39:63:40:f0:88:1f:0e:cc:0d:26:
         3b:8d:10:83:7f:67:b2:30:17:b6:01:4a:4c:e8:96:5b:c8:58:
         c4:97:cb:cd:c7:35:bf:b5:83:04:76:36:13:66:ab:27:0c:27:
         b7:87:b5:a2:a1:ca:8e:9a:b0:a0:0e:d7:fe:44:b2:c4:68:5b:
         89:74:9d:cd:96:ab:15:34:08:7b:15:3a:55:e3:3d:12:30:f7:
         a7:3e:44:ba:89:0a:01:f0:ec:b1:92:95:33:96:b2:2f:f5:58:
         98:0c:fd:8b:35:47:1c:82:b3:c9:5a:e9:bc:69:58:36:cd:a9:
         2b:62:dd:40:ac:2b:93:b4:9b:55:42:01:74:f9:85:40:83:d2:
         6d:d0:0d:e5:2d:35:33:20:09:7f:1e:72:34:dd:d0:73:49:4d:
         6c:4b:67:63:80:59:84:07:03:11:7d:9f:92:93:e5:4b:cf:8b:
         2b:61:69:d5:d5:9e:e6:c0:87:5e:4a:25:47:d6:68:88:34:78:
         4b:46:6a:05:8d:89:54:e3:34:da:4e:33:79:8c:6b:66:84:2b:
         ab:86:c4:b8:78:19:15:a6:c9:d3:76:37:12:83:d7:e5:93:2a:
         1b:23:27:ed:70:6c:69:e9:fe:7b:da:43:9f:63:c3:46:63:ee:
         4b:ba:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----