Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb302713-15e4-43a7-8e53-6797490452b5.roa
File:                     bb302713-15e4-43a7-8e53-6797490452b5.roa (raw, json)
Hash identifier:          f3muUEM0zFtkRHXFahGIQozOS/60soXmyzkExFnD49Q=
Subject key identifier:   92:3B:5D:0A:B6:0B:B6:D9:9C:E6:19:E9:0F:C2:D6:8D:2A:82:52:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       648C7858BCA6B8498B00E594E510F06EFBC6BFD7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb302713-15e4-43a7-8e53-6797490452b5.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.228.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8c:78:58:bc:a6:b8:49:8b:00:e5:94:e5:10:f0:6e:fb:c6:bf:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=548d6348bb95f35be337bf57e8897c2a1e9a854d94b5cb5ddd3a2de192446944, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:76:26:13:85:03:ef:91:21:d5:06:74:e8:
                    ea:ef:50:dc:5a:f7:c4:18:ae:1a:71:82:e0:b1:a0:
                    09:e4:1c:d5:48:c4:e4:12:de:d4:b6:cb:78:96:ad:
                    23:51:ab:45:11:49:f6:4a:df:f4:13:5a:73:a4:47:
                    a6:49:34:72:19:07:b7:e9:4e:4a:62:ac:da:0d:aa:
                    0e:c4:ef:c2:fc:ec:5b:7e:5d:e6:f3:3a:02:d0:7f:
                    85:43:37:d9:70:71:d2:ee:e0:e9:a0:f2:c4:f6:e7:
                    36:12:51:00:e9:6c:3c:9e:59:4a:d1:ed:c8:af:d6:
                    89:cf:8b:83:ca:fc:4e:77:b3:42:1c:a1:d6:b6:d9:
                    ae:14:18:b5:7c:26:64:fa:b0:80:5c:1a:44:94:df:
                    9f:dd:cc:89:2d:6f:b9:48:99:d1:f8:42:b5:84:90:
                    9c:22:2a:14:55:8f:f4:a4:24:be:86:cd:6b:d4:b5:
                    c8:9e:fa:4f:2b:3d:1f:15:fe:7a:4a:ac:bc:e0:cf:
                    ac:0a:0d:97:0a:33:a8:6e:26:7b:36:5d:e5:6d:d0:
                    d1:b5:04:13:a1:9d:a3:94:01:04:a2:a5:ff:d5:03:
                    ea:24:34:18:68:5d:fc:8f:87:25:1b:1c:bf:73:d9:
                    7c:a5:0e:2c:1c:19:16:fa:e8:b4:0e:be:14:d1:54:
                    b4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3B:5D:0A:B6:0B:B6:D9:9C:E6:19:E9:0F:C2:D6:8D:2A:82:52:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb302713-15e4-43a7-8e53-6797490452b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.228.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b8:a0:f0:f4:1b:db:19:c6:86:bb:8b:1d:e2:38:ff:b8:92:f2:
         3d:83:01:ca:c1:53:d7:6d:54:40:25:7e:4f:50:48:8a:ee:66:
         c5:f3:80:f4:a5:54:a0:ee:00:61:28:61:90:6c:47:bf:ef:1a:
         30:99:e1:b5:ce:aa:ea:20:bb:fe:9a:91:59:12:d7:bd:d0:be:
         b6:e4:45:16:36:40:b2:3f:bc:63:45:6f:e5:ae:b6:06:d0:8d:
         b7:c8:1f:32:80:d4:4c:e2:4f:b0:5d:6b:ea:98:6e:ef:95:15:
         d0:a9:8e:ff:2d:49:4d:0c:f3:17:9a:d4:b1:06:93:4f:3f:bd:
         cf:6e:f2:8b:80:03:64:67:bb:1a:02:11:4f:b1:33:3b:37:d5:
         f1:a5:b6:03:d8:23:b8:2b:f8:05:82:e8:b5:40:cc:74:9b:c6:
         91:35:ba:0c:39:48:7a:fd:64:7c:e9:2f:f9:d8:45:bd:e9:c0:
         2f:e3:f1:c2:3f:fd:01:78:a1:72:f9:99:8a:50:bd:ea:9c:d0:
         2f:9a:7f:d7:68:05:05:1d:27:ee:39:1a:bc:c9:a5:49:5d:5a:
         85:73:db:21:fc:d0:78:45:df:8e:c0:e6:1d:f2:ed:4f:02:a5:
         f2:c0:de:37:24:52:df:0b:8d:d7:ba:08:59:a4:68:27:80:c3:
         aa:7a:0a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----