Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2f0c3bc-1691-405a-9792-e6b7a2db4608.roa
File:                     b2f0c3bc-1691-405a-9792-e6b7a2db4608.roa (raw, json)
Hash identifier:          yZIa25hVW/4QNla5OaKrcO0VZNrxz6h9ND2eCbc3L9k=
Subject key identifier:   DC:8F:06:59:6D:54:3B:43:E1:82:F7:0B:18:CB:5C:FF:DE:77:9C:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       054D505A7BC450C766C2B75F05292A71BA505C4C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2f0c3bc-1691-405a-9792-e6b7a2db4608.roa
Signing time:             Sat 11 Jan 2025 00:00:00 +0000
ROA not before:           Sat 11 Jan 2025 00:00:00 +0000
ROA not after:            Sat 15 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        168.242.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4d:50:5a:7b:c4:50:c7:66:c2:b7:5f:05:29:2a:71:ba:50:5c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 11 00:00:00 2025 GMT
            Not After : Feb 15 23:59:59 2025 GMT
        Subject: serialNumber=252ad80cddc9e4de085bd47c711bb689d71dbd7cc7e1547c2b45fdfa157bff7a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7b:91:f2:4b:e6:97:cc:32:ee:bc:24:f2:d2:
                    ec:ea:35:6e:ea:39:15:4a:a6:ec:3f:91:30:41:dd:
                    1c:f5:9c:9b:1d:78:4c:2d:65:3b:e6:b0:95:8f:be:
                    f2:2f:d9:ce:f4:85:16:34:be:94:c9:aa:b5:58:b1:
                    f3:3b:60:96:48:d2:c4:1b:11:96:5d:e7:bc:7e:33:
                    5e:66:73:49:49:f2:a4:c2:86:82:9d:5f:96:cf:5c:
                    18:a5:fc:88:e5:8a:28:03:df:5f:ab:15:03:6c:2b:
                    c8:c3:62:83:22:fc:05:d8:47:a2:d9:82:b4:c5:78:
                    4d:1e:54:52:51:51:22:4a:cd:e6:77:e5:25:40:14:
                    78:33:c6:7a:13:0b:a7:35:d7:aa:35:10:a0:3b:f8:
                    72:ea:b5:94:7f:a0:a4:b7:04:2d:65:e3:65:d4:fa:
                    fa:66:9a:08:f9:4d:a5:40:58:0e:53:cc:6c:da:25:
                    57:7e:d6:97:8a:46:ac:b4:3f:ee:d5:5a:36:2b:1f:
                    b2:15:91:be:2f:a9:b7:af:1b:3d:ef:c7:49:d5:df:
                    f1:84:a2:cc:5a:dc:b8:3f:5d:99:88:e4:0f:1d:3d:
                    c8:d4:30:58:37:d9:d6:d5:d3:9a:4d:72:36:60:c5:
                    03:ec:5f:e3:72:3e:ab:88:6c:a7:95:91:4f:72:d2:
                    a2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8F:06:59:6D:54:3B:43:E1:82:F7:0B:18:CB:5C:FF:DE:77:9C:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2f0c3bc-1691-405a-9792-e6b7a2db4608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cd:e8:72:73:30:da:ae:bb:00:16:80:2f:20:17:6e:cc:76:49:
         f5:49:3b:ba:13:64:4d:14:84:e5:fc:80:d4:5b:44:da:eb:c5:
         8c:d7:1f:06:17:c9:d0:ba:7d:99:f4:72:ff:c7:bf:41:b7:c8:
         51:92:aa:99:80:02:66:17:ab:81:25:ec:db:51:81:e5:37:12:
         1f:78:ad:db:80:85:ed:04:26:c2:8b:5c:0f:7c:9e:4b:17:b4:
         e9:f3:da:f5:ce:0a:7a:94:27:ad:54:e5:74:d2:17:fe:44:93:
         2b:1c:59:db:97:f9:30:de:64:da:f9:8b:1e:1c:33:9e:9d:15:
         3e:d1:cf:84:fc:19:cd:2c:25:8d:0f:07:81:2c:eb:a1:78:00:
         89:15:e3:0c:6d:a3:bf:85:d1:d9:96:b2:10:c8:f6:55:5a:b7:
         61:30:15:3b:ff:f0:14:ce:77:bc:c8:2c:9b:c3:2c:a3:8b:42:
         14:33:5a:1f:6c:46:d5:8e:49:0c:9c:00:9c:06:bb:bb:1f:19:
         8e:16:2c:b9:e1:c2:01:97:e9:d3:79:88:ad:df:3b:9e:21:2b:
         b8:d6:58:b5:f3:02:6a:53:01:84:63:34:c1:68:90:e7:9a:53:
         20:83:ae:b4:ca:ee:a6:1a:7b:2b:d6:b9:a5:0c:d6:24:e0:28:
         5f:e2:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----