Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c90818a8-3277-4323-aa01-3bd2a36f1179.roa
File:                     c90818a8-3277-4323-aa01-3bd2a36f1179.roa (raw, json)
Hash identifier:          s7U/7IO3vfd30brJz6VtlPgbtseLbP43vcRbArf5L0M=
Subject key identifier:   1E:B0:67:2C:60:08:61:69:95:EF:99:94:56:04:61:14:B1:9C:23:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F9AA852A12BF5BC6D560DDC09DFB61EBEA99875
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c90818a8-3277-4323-aa01-3bd2a36f1179.roa
Signing time:             Tue 24 Dec 2024 00:00:00 +0000
ROA not before:           Tue 24 Dec 2024 00:00:00 +0000
ROA not after:            Tue 28 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        54.134.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9a:a8:52:a1:2b:f5:bc:6d:56:0d:dc:09:df:b6:1e:be:a9:98:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 24 00:00:00 2024 GMT
            Not After : Jan 28 23:59:59 2025 GMT
        Subject: serialNumber=10dfd9d3f43562d0397ae9c4f973f275be83cbb1e9e362f7f294f62ef35d610a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:69:f9:32:4c:a2:37:e9:d1:e0:32:3f:df:
                    d2:d3:da:73:8d:23:49:4c:3d:00:22:69:54:f0:7e:
                    c0:bc:0a:b5:d1:25:e3:2f:08:55:a8:9f:8d:c9:4a:
                    8b:e0:b4:f0:57:67:0d:e1:5f:5f:7d:4d:6d:d4:a4:
                    5b:ab:15:2a:0d:11:20:77:8d:b7:15:aa:e4:cf:0f:
                    95:85:7e:a6:5c:96:0b:95:f9:de:e4:b8:b6:c3:ee:
                    4b:8e:b4:66:a9:ae:c5:96:9f:2b:c0:95:52:78:88:
                    2e:8b:7b:f1:44:1f:05:63:56:6f:ed:5b:99:d3:3d:
                    da:e7:ff:62:16:6b:45:ce:8f:af:60:b0:20:aa:e5:
                    74:0b:0a:c4:e9:14:af:66:6a:5c:74:77:f4:53:55:
                    6c:0c:c3:ce:10:83:44:35:56:2b:d2:89:4b:b5:49:
                    e0:4a:78:4f:9b:2d:a9:c6:29:ab:e0:ff:dd:0e:9c:
                    0a:f6:23:ec:62:fa:f3:d0:ec:6a:36:99:99:3d:dd:
                    24:92:7a:1e:e0:92:93:df:77:87:22:91:b6:55:b7:
                    32:0c:be:ee:2f:9e:bb:4a:c0:8c:fc:0f:f5:ca:3f:
                    a4:bc:61:3f:e2:0d:9f:61:87:d6:7a:3f:ff:e0:0f:
                    53:29:35:68:29:d0:91:df:46:ec:6c:93:58:d1:8d:
                    aa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B0:67:2C:60:08:61:69:95:EF:99:94:56:04:61:14:B1:9C:23:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c90818a8-3277-4323-aa01-3bd2a36f1179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7f:f4:ff:4c:6a:a6:8a:8b:62:e4:31:23:74:5b:48:34:df:6b:
         a4:b6:60:f8:8c:0a:4b:90:9c:1d:a2:2d:50:2c:42:ca:6d:2c:
         08:e1:61:ce:ca:8c:0f:94:20:80:b1:7f:58:5a:ce:96:14:02:
         4f:14:e8:70:c3:b6:e8:41:ac:e4:42:df:44:21:19:79:d6:79:
         cd:cf:16:81:06:46:3a:7d:b0:2b:09:2d:1c:80:7c:32:66:05:
         bd:46:50:a7:68:83:48:e4:51:0a:8d:cf:90:be:7a:10:38:01:
         01:81:b8:ee:00:b9:61:4a:9e:70:7c:e7:1a:ab:fd:b6:44:56:
         bf:77:bd:1c:0e:fd:7a:ea:65:c6:50:7f:18:f4:e7:97:3e:1a:
         9b:69:0a:f0:71:dd:b0:dd:cd:4e:7e:a9:3e:ef:89:6f:50:b8:
         17:51:3f:38:a7:b5:be:f4:85:02:db:51:c0:7e:b0:4f:86:5e:
         d0:dd:41:27:35:7d:11:62:a1:04:39:da:96:c4:83:4a:5a:a9:
         c6:7f:39:ef:ae:d3:1c:75:8e:76:a2:0b:58:46:04:e8:79:16:
         1d:ff:81:a5:3a:3c:67:bc:2d:c6:71:7d:76:ac:ac:91:a9:bc:
         ba:f2:ec:ef:5e:5e:f2:d4:64:2e:a7:09:c6:f7:4b:17:d9:de:
         bd:01:63:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----