Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c19e42ee-5272-4934-8507-b042c981dfe4.roa
File:                     c19e42ee-5272-4934-8507-b042c981dfe4.roa (raw, json)
Hash identifier:          aubu4Z3sXBa5+J3UI5C31/jnyozYCgR7kqO6bX2g9Bg=
Subject key identifier:   64:53:06:8D:98:22:E5:FF:F7:6A:21:60:21:AA:F3:5F:FE:32:00:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B974DF642BCF163A9C8C208B373A8ED1B122532
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c19e42ee-5272-4934-8507-b042c981dfe4.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        56.219.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:97:4d:f6:42:bc:f1:63:a9:c8:c2:08:b3:73:a8:ed:1b:12:25:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=20ce55dba37e345953f8cf374fa28c675c4a57faffae711e84d2679d2d85e8d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:a5:e7:54:a7:0a:1b:9c:23:af:c9:30:f1:
                    17:a0:a2:65:6f:ac:92:2b:f9:c2:67:9c:df:49:b6:
                    56:fc:4a:f3:77:3a:38:56:9a:c7:4c:28:60:66:04:
                    cc:51:3c:50:a1:2c:95:49:bd:eb:2c:66:a8:6c:e4:
                    c5:04:75:ce:38:cc:af:f2:97:5a:54:e3:fc:fd:13:
                    90:ed:b5:36:9a:35:b1:ee:d2:91:5f:9f:1c:e8:d3:
                    62:03:f6:80:c4:8b:20:2f:60:d5:54:20:ea:2f:9f:
                    8e:fd:60:2e:f5:8c:41:ae:53:84:57:9b:7a:68:b9:
                    1d:3c:28:0c:3b:f3:48:d9:6e:57:b4:23:17:f5:42:
                    06:99:62:02:33:3e:b9:f0:be:7a:5a:cf:93:ea:a8:
                    d5:9e:6a:a0:16:9e:70:e2:e1:03:65:0d:f5:58:ed:
                    eb:7d:d2:8d:df:ac:f1:47:f9:f4:46:2a:14:57:9c:
                    4d:e6:52:f9:cc:00:df:9e:a6:77:32:51:d3:fc:47:
                    ff:6e:cf:0d:38:0f:7c:2b:76:bb:21:e6:a3:76:1f:
                    18:55:63:bd:07:1f:8a:c2:07:1e:77:f6:79:34:c8:
                    d9:a9:33:23:96:e1:c9:85:3a:7e:8a:f9:1a:f2:df:
                    ac:b9:22:62:93:78:61:f7:c1:7b:44:01:6e:4a:6d:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:53:06:8D:98:22:E5:FF:F7:6A:21:60:21:AA:F3:5F:FE:32:00:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c19e42ee-5272-4934-8507-b042c981dfe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:da:66:b1:ea:26:2d:b9:48:06:2a:53:83:ba:29:69:84:a2:
         76:7e:c1:21:13:af:2f:3b:a9:f1:0b:6c:b9:33:b0:64:4c:78:
         18:7a:85:64:d0:91:fc:2f:4d:22:2d:5d:07:6a:f7:4f:ad:38:
         3e:3c:06:b1:9a:0d:8e:da:56:90:99:67:2c:7e:f4:81:09:85:
         5b:04:9c:0b:74:65:8e:73:81:6b:8e:e2:ef:82:90:45:26:ec:
         81:b0:5e:c4:83:b9:df:0b:4c:85:99:f2:52:76:0d:ce:cc:e3:
         93:2a:ad:d8:f3:b1:96:3c:3a:23:e4:c7:e2:6a:d0:1a:46:d6:
         54:10:8f:67:58:9c:f8:ea:84:11:43:19:4d:14:f0:31:4a:dc:
         35:fa:a0:bd:de:b5:51:17:a6:ce:7f:03:fe:da:13:33:1a:4b:
         be:4c:cf:ea:82:c2:f9:af:31:1c:aa:a6:08:9d:a7:68:51:fa:
         9b:c7:7e:a9:07:1c:85:8c:4b:54:34:a5:da:e5:15:f8:a9:9b:
         8f:ac:1c:6a:8f:7d:53:4a:a8:50:91:da:99:92:8f:0c:14:70:
         26:04:86:a6:37:73:e3:ca:0d:18:81:12:81:22:f3:4b:82:85:
         c0:63:be:60:c2:b7:5d:cc:59:7c:0b:07:6c:8a:96:74:57:95:
         5a:0e:6d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----