Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6af4af8-b343-45d5-9182-b2e48bb0af06.roa
File:                     c6af4af8-b343-45d5-9182-b2e48bb0af06.roa (raw, json)
Hash identifier:          f/jveLPcKEQdM6jgN8swQLCoGErkRRSirYGLFLCDiWc=
Subject key identifier:   06:7B:DF:1F:20:EB:A7:4B:93:C3:62:B2:3C:08:B5:4F:3C:48:16:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A5FE73703D0AAF476817644BFA85A591E7B5EA6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6af4af8-b343-45d5-9182-b2e48bb0af06.roa
Signing time:             Fri 20 Dec 2024 00:00:00 +0000
ROA not before:           Fri 20 Dec 2024 00:00:00 +0000
ROA not after:            Fri 24 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        208.78.128.0/21 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5f:e7:37:03:d0:aa:f4:76:81:76:44:bf:a8:5a:59:1e:7b:5e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 20 00:00:00 2024 GMT
            Not After : Jan 24 23:59:59 2025 GMT
        Subject: serialNumber=035950efbfd1348b76e60ef123d95609b02ba5e01c8723c3c4a74ce5a75c4d1b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:c9:ad:6a:79:45:d7:da:29:39:e2:22:42:
                    66:2c:34:2b:15:37:80:01:f6:ce:d8:39:c8:82:7b:
                    b2:b6:76:3f:cf:1a:aa:33:3a:d5:d7:9f:ec:5d:60:
                    4f:4b:b2:87:05:95:2e:26:f6:69:b8:4f:f4:41:db:
                    73:f0:e6:b4:bc:95:42:33:d2:d3:81:23:0c:e1:c3:
                    79:75:cf:9c:7e:75:52:37:03:aa:04:c9:fb:f2:10:
                    92:f4:97:93:8e:67:fb:dc:3a:9a:86:2b:15:da:1d:
                    0d:c6:15:62:2c:99:13:d0:63:e1:5a:6a:28:2d:55:
                    b0:49:e9:2d:f8:83:7c:ab:16:10:e7:15:92:6a:3e:
                    9a:94:fd:2a:c8:f5:be:6e:bc:ea:ba:20:4c:77:23:
                    77:78:ea:02:9b:a3:f0:dc:43:48:18:73:83:b4:2d:
                    1c:39:a8:b5:fa:de:03:d1:86:47:c7:68:27:1d:65:
                    68:f3:a0:c2:ba:0c:58:ef:69:c1:03:ba:f5:9c:0b:
                    4c:67:93:df:6e:26:94:cf:1f:0c:92:33:ce:d2:07:
                    9e:8c:c4:bc:e1:1f:c7:2e:b3:62:94:6e:09:cc:29:
                    c8:4b:53:e1:c1:c2:c6:6a:36:45:73:97:e2:f7:01:
                    ac:c2:88:49:7c:b6:9e:5d:0a:23:84:22:99:2a:dd:
                    76:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7B:DF:1F:20:EB:A7:4B:93:C3:62:B2:3C:08:B5:4F:3C:48:16:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6af4af8-b343-45d5-9182-b2e48bb0af06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c8:5b:96:0b:56:aa:30:69:73:1a:e8:e2:63:58:11:02:31:de:
         93:c6:9d:77:ab:cc:db:43:1e:17:05:70:44:e1:62:95:29:4a:
         07:94:0f:38:58:ad:cb:e7:f6:3f:8b:03:52:20:a3:c3:70:d7:
         01:c2:33:59:10:d4:66:cd:b9:d7:c0:6b:3a:29:71:82:6c:b4:
         9a:c7:6a:8f:b0:29:ab:ae:6c:07:13:89:14:c4:19:b6:b1:cd:
         1b:ea:e9:8a:16:10:85:2a:eb:43:d1:71:bb:85:3f:0e:68:56:
         90:c4:a9:44:75:d9:fc:95:ce:2a:e8:b4:a2:16:fa:6c:52:bd:
         1d:a8:21:03:42:1a:90:95:eb:7b:45:b6:ba:fd:9d:58:00:e1:
         86:db:6f:18:c0:dc:20:86:a3:49:2d:35:66:3e:0b:af:8f:e4:
         f9:73:4a:c8:97:8d:55:c3:b0:81:36:a6:40:99:ae:0a:91:cf:
         e2:04:c4:ee:fe:7e:5e:0d:fa:06:e5:54:1b:30:b2:10:7c:66:
         c7:73:7c:90:45:67:42:2d:f1:55:33:55:73:9f:9e:c5:a1:61:
         d6:51:0a:9e:9e:d9:82:67:ad:31:9d:51:1d:27:50:cb:ab:71:
         57:d3:ad:ae:98:e7:a0:ac:83:4c:b1:cd:72:00:f9:3f:82:6c:
         03:68:c2:92
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOl/nNwPQqvR2gXZEv6haWR57XqYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjIwMDAwMDAwWhcNMjUwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMzU5NTBlZmJmZDEzNDhiNzZlNjBlZjEyM2Q5NTYwOWIw
MmJhNWUwMWM4NzIzYzNjNGE3NGNlNWE3NWM0ZDFiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC698mtanlF19opOeIiQmYsNCsVN4AB9s7YOciCe7K2dj/P
GqozOtXXn+xdYE9LsocFlS4m9mm4T/RB23Pw5rS8lUIz0tOBIwzhw3l1z5x+dVI3
A6oEyfvyEJL0l5OOZ/vcOpqGKxXaHQ3GFWIsmRPQY+FaaigtVbBJ6S34g3yrFhDn
FZJqPpqU/SrI9b5uvOq6IEx3I3d46gKbo/DcQ0gYc4O0LRw5qLX63gPRhkfHaCcd
ZWjzoMK6DFjvacEDuvWcC0xnk99uJpTPHwySM87SB56MxLzhH8cus2KUbgnMKchL
U+HBwsZqNkVzl+L3AazCiEl8tp5dCiOEIpkq3XZXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBnvfHyDrp0uTw2KyPAi1TzxIFqAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M2YWY0YWY4LWIzNDMtNDVkNS05MTgyLWIyZTQ4YmIwYWYwNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPQToAwDQYJKoZIhvcNAQELBQADggEBAMhblgtWqjBpcxro4mNYEQIx3pPG
nXerzNtDHhcFcEThYpUpSgeUDzhYrcvn9j+LA1Igo8Nw1wHCM1kQ1GbNudfAazop
cYJstJrHao+wKauubAcTiRTEGbaxzRvq6YoWEIUq60PRcbuFPw5oVpDEqUR12fyV
zirotKIW+mxSvR2oIQNCGpCV63tFtrr9nVgA4YbbbxjA3CCGo0ktNWY+C6+P5Plz
SsiXjVXDsIE2pkCZrgqRz+IExO7+fl4N+gblVBswshB8ZsdzfJBFZ0It8VUzVXOf
nsWhYdZRCp6e2YJnrTGdUR0nUMurcVfTra6Y56Csg0yxzXIA+T+CbANowpI=
-----END CERTIFICATE-----