Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b90d9276-501c-49ef-af7c-3df4208b431e.roa
File:                     b90d9276-501c-49ef-af7c-3df4208b431e.roa (raw, json)
Hash identifier:          XENMebBeyGKG7FWZzR5pJHcXwwD/dGDtNomDBFPROrw=
Subject key identifier:   4C:09:A4:22:19:B1:F4:C0:48:9D:C1:AA:B1:68:A3:B2:A7:98:4C:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       017B8ED3A669A2928EEAB28B3BA042FD35CFFFE6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b90d9276-501c-49ef-af7c-3df4208b431e.roa
Signing time:             Fri 03 Jan 2025 00:00:00 +0000
ROA not before:           Fri 03 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        209.177.24.0/21 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7b:8e:d3:a6:69:a2:92:8e:ea:b2:8b:3b:a0:42:fd:35:cf:ff:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  3 00:00:00 2025 GMT
            Not After : Feb  7 23:59:59 2025 GMT
        Subject: serialNumber=9fcb577b622b58c9c24e08d9b4a2dc4364c8b47e2c8f8dd783f0ef25092c9821, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:4d:cb:28:4a:f7:8b:d6:52:7e:8f:3b:a9:
                    58:32:f3:42:03:5f:1f:7d:32:a6:ea:87:c0:66:23:
                    fa:2b:e4:84:ea:1a:4c:65:90:b7:e4:3f:5d:a8:a7:
                    5c:f7:2b:dc:d9:ce:49:66:0e:60:f2:55:d7:3e:09:
                    d2:77:4e:32:02:50:9c:4c:bf:e4:b7:d7:7d:79:60:
                    34:89:40:5f:db:a7:48:0c:41:5c:13:9c:20:8c:79:
                    81:e2:5f:d1:81:eb:ff:63:c1:17:66:71:28:48:34:
                    6b:4e:3c:b1:46:5b:e1:f9:50:8b:4c:04:fe:67:09:
                    c7:ae:d8:12:59:44:83:5a:23:44:e9:20:ac:04:41:
                    25:d1:b7:db:37:80:33:96:c7:d9:49:2b:21:b5:3e:
                    b4:7c:14:35:9f:ab:b9:60:44:89:d5:08:49:7d:90:
                    44:1d:7d:ef:b0:fa:db:e8:a8:87:bf:2d:55:8e:2f:
                    2f:3f:3a:b1:ce:9b:48:4e:0b:81:e9:69:5d:d4:c1:
                    6a:f0:10:b5:f7:6d:17:d2:80:32:a4:8f:f7:cd:2e:
                    39:82:f1:ec:43:4a:0e:94:a1:2d:93:f2:f9:0c:5b:
                    9d:fe:16:b7:b2:44:6c:3e:45:89:a7:e3:a5:71:50:
                    44:a6:9c:4c:b0:f4:4a:2f:c1:02:eb:1b:96:a2:a4:
                    29:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:09:A4:22:19:B1:F4:C0:48:9D:C1:AA:B1:68:A3:B2:A7:98:4C:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b90d9276-501c-49ef-af7c-3df4208b431e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.177.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:02:e4:47:41:2c:ff:21:47:75:d0:f0:a8:ca:1d:01:8f:4c:
         b8:e9:37:a5:c0:97:f1:dd:5e:76:a0:94:09:9c:15:cc:b3:e1:
         2d:1e:09:a4:92:15:2d:68:d2:a8:a3:e9:0b:02:40:4a:32:26:
         00:eb:c7:3f:4f:de:a9:05:69:96:40:a7:78:81:03:b3:f5:0d:
         d7:4c:3e:8c:8f:b2:4c:44:8c:af:a4:49:72:43:a0:7b:fa:1c:
         ab:e5:33:13:b5:8d:7d:98:a2:b9:07:f6:74:b2:be:d8:11:02:
         24:89:c7:8f:d4:dd:f7:03:d9:4d:60:05:e5:16:62:e5:89:0c:
         e6:b3:cf:7f:61:9f:98:68:8c:7c:30:46:46:d8:ba:37:82:9b:
         80:c6:7c:ff:ea:8a:17:0c:87:e6:8d:f5:2d:63:16:c5:64:e4:
         14:a7:f0:71:57:56:ec:98:73:6a:78:4b:1b:e0:e0:d4:c6:2e:
         ac:a9:32:91:ca:d3:09:7d:69:9f:45:4a:91:c7:a8:f6:18:f6:
         c9:22:63:b5:80:7f:bc:a2:51:ef:7b:88:7e:95:50:d2:ff:61:
         96:ee:9c:3c:49:d5:51:0c:f1:57:c1:82:07:e5:86:03:6d:d9:
         f4:a9:ca:bd:e7:b3:4f:ec:74:a7:50:57:fc:8d:e1:e7:e2:a2:
         3f:71:ff:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----