Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aba43055-be4d-4d34-9d89-d00ab87a7a79.roa
File:                     aba43055-be4d-4d34-9d89-d00ab87a7a79.roa (raw, json)
Hash identifier:          hGJV/MmU/eZ76puRtcnQjHCMwErIvMKOzt3R5iW+W0o=
Subject key identifier:   FA:9C:C4:95:A4:C7:02:DD:B4:82:6D:6A:9B:36:83:D8:20:8A:3A:FC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03DC537A1ACBF0AA2193A651FBFE1938EE59320B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aba43055-be4d-4d34-9d89-d00ab87a7a79.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:c0c0::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:dc:53:7a:1a:cb:f0:aa:21:93:a6:51:fb:fe:19:38:ee:59:32:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=ea17f392bee9093cd32b5b2bf6e28627dfbb9d73e986fb6e871c936f7ef096df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:81:e3:78:31:10:78:cf:a3:88:98:a6:54:
                    0f:9a:cb:e1:2f:92:ea:93:7e:a9:56:54:20:fa:d6:
                    04:99:38:f5:c2:01:27:4b:2e:ec:f6:81:af:e5:64:
                    7f:ba:a3:2d:5d:74:d2:45:2c:75:2b:53:dc:2c:16:
                    a3:9a:fb:07:7f:08:d3:bf:fa:f6:1c:52:f2:3c:2c:
                    88:e4:fb:8d:2a:dd:02:0b:04:69:4d:5c:f0:f2:fb:
                    94:9e:5d:7b:ab:8e:14:e5:d3:b1:99:b7:6d:87:cb:
                    d7:25:1c:b5:e5:e3:68:d9:cf:f4:26:8f:a8:5e:37:
                    7f:22:97:ba:89:5c:66:93:02:e9:7e:58:ff:cb:8a:
                    a7:27:13:5a:80:cb:b9:e2:f4:fc:fb:4d:77:ed:ae:
                    75:4f:04:37:3c:34:1f:cc:3a:1a:32:66:08:38:11:
                    1d:e8:2b:bc:f1:27:ec:1f:a9:62:bd:99:0d:05:b6:
                    58:f6:15:5c:d5:ab:a6:26:74:69:5b:0b:54:f8:05:
                    5e:a2:19:30:7b:b4:78:cf:53:3b:6a:fb:f7:4f:b5:
                    f0:df:07:9b:1e:2e:3e:33:64:25:f6:b6:96:ee:92:
                    64:40:5c:ac:44:fb:ea:a6:5a:78:2b:5a:3e:a3:5f:
                    ff:a1:e3:9d:74:2b:5c:25:a5:91:af:63:ea:1c:6a:
                    4f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9C:C4:95:A4:C7:02:DD:B4:82:6D:6A:9B:36:83:D8:20:8A:3A:FC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aba43055-be4d-4d34-9d89-d00ab87a7a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:c0c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         d8:29:c7:32:a1:02:26:8b:72:c7:43:60:a7:f5:02:e2:4a:da:
         51:3e:fe:f2:2f:c9:68:1d:31:35:5c:4f:23:df:27:81:4f:dc:
         56:4b:02:0e:52:c0:58:d6:72:bd:d8:d1:7b:a9:92:2f:27:11:
         6a:90:b6:8d:6c:28:3b:b1:52:d4:52:a4:31:28:c2:49:61:22:
         61:19:04:db:da:38:81:1f:b2:47:cd:1b:1a:9e:d3:7f:e5:e3:
         e6:e0:b8:a1:e4:65:41:4b:eb:a3:85:25:de:42:f4:4e:5e:03:
         97:a2:90:3d:22:c4:7f:0e:17:c8:cd:f7:84:fe:c7:68:f7:24:
         8d:d9:8d:02:e4:e9:0f:96:82:ee:7d:3a:4e:3a:47:ac:3d:c8:
         17:25:f3:6c:60:fe:48:8d:8e:98:78:ae:27:c8:43:d6:a2:22:
         ce:d9:3d:41:23:cc:eb:6a:c3:3d:2b:9b:12:f2:0f:71:12:d6:
         3b:1d:e1:08:b3:47:6e:1a:99:41:2c:07:68:7d:db:14:0e:34:
         8e:a6:e3:53:30:d8:61:4b:01:81:eb:74:7d:51:af:64:1c:8b:
         2a:97:1a:d7:79:99:e6:09:90:34:c2:94:cb:ba:c9:6d:58:35:
         c2:6b:ba:c4:52:5e:8e:9a:46:a9:0b:0b:31:10:31:cc:ec:b7:
         2f:60:a5:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----