Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d84cf571-35a1-46e2-930a-816a1c2b6d8a.roa
File:                     d84cf571-35a1-46e2-930a-816a1c2b6d8a.roa (raw, json)
Hash identifier:          APrERDf65iH8dQeyWTOn/NFTu9dXZGys//IgtmLGKew=
Subject key identifier:   8F:B4:F0:89:18:E2:9F:34:6D:EB:F1:18:8A:40:2E:09:53:64:FE:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       707840FC66F976E4DFEC8A55AC905D1BDB69CF8E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d84cf571-35a1-46e2-930a-816a1c2b6d8a.roa
Signing time:             Wed 25 Dec 2024 00:00:00 +0000
ROA not before:           Wed 25 Dec 2024 00:00:00 +0000
ROA not after:            Wed 29 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        129.224.0.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:78:40:fc:66:f9:76:e4:df:ec:8a:55:ac:90:5d:1b:db:69:cf:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 25 00:00:00 2024 GMT
            Not After : Jan 29 23:59:59 2025 GMT
        Subject: serialNumber=3dcf9ea261a0cb38c56a21936197e4921f5c14b799013adde05389623843bba6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:d2:ea:01:b4:0d:af:8c:b8:f7:e6:f0:17:
                    7c:0e:c9:2a:ea:82:eb:18:dc:5c:5f:45:b5:a0:73:
                    50:94:27:d2:19:0f:85:99:86:a8:83:31:d6:17:62:
                    76:f5:37:48:49:56:7b:97:74:d5:58:8b:11:ed:5c:
                    56:87:97:b8:ab:21:5e:b5:57:db:46:ac:32:0d:a2:
                    6e:8e:c4:be:93:9e:4f:75:54:0b:76:b6:80:54:70:
                    ff:38:ae:3f:b0:ea:06:f2:90:f8:37:67:fd:6f:9f:
                    cd:f0:dc:3d:0c:37:6d:d6:03:0c:1d:86:04:a0:f8:
                    86:8e:87:72:5e:1a:30:2c:fd:ef:11:6b:b0:95:99:
                    c0:ce:e9:57:72:fa:6f:9b:c3:7c:7b:4f:d6:df:11:
                    fa:67:fd:88:ae:3a:08:42:b9:5f:10:dd:0f:92:44:
                    13:b1:5a:3a:50:93:93:68:38:de:d2:69:14:c3:77:
                    7c:43:02:ce:62:6f:cc:c2:e5:15:66:d1:aa:6d:98:
                    23:85:b3:fb:d4:22:83:0e:d4:b9:9b:eb:2b:c3:ce:
                    b6:48:0a:8c:1f:e9:06:fd:00:88:ba:bb:e0:83:05:
                    b1:24:e8:3d:a4:98:3f:29:9c:f3:8b:17:bd:eb:d4:
                    b3:de:67:08:73:4b:f7:54:83:8e:23:dc:e4:d7:ea:
                    fe:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B4:F0:89:18:E2:9F:34:6D:EB:F1:18:8A:40:2E:09:53:64:FE:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d84cf571-35a1-46e2-930a-816a1c2b6d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.224.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6c:a6:62:16:3e:f8:9c:4e:94:e2:ac:69:a9:12:5a:cb:92:eb:
         a5:64:5b:ab:e6:56:4e:27:b0:2f:d0:8e:2a:23:a3:28:a5:73:
         61:83:81:07:cc:a6:cf:6c:53:bd:8d:56:bb:e2:10:dc:17:f6:
         05:54:76:1e:00:16:c7:6d:82:bf:11:a6:38:ad:aa:69:4c:de:
         4d:60:f4:0c:8c:5b:84:c1:2d:8d:b7:4f:85:96:3b:8a:97:4f:
         2a:6f:be:72:23:96:54:60:ae:f5:91:48:a1:d6:ac:3d:14:7d:
         94:e0:20:5b:64:0d:e7:1e:8f:0d:30:9d:21:e1:d0:3a:35:3c:
         7e:8c:55:87:ac:ac:52:fd:7d:9b:d5:4f:a2:c2:04:7f:ca:5b:
         2d:37:b4:d1:67:bf:54:82:dc:21:91:08:ea:33:06:c5:69:77:
         9f:9e:56:6c:34:8f:3a:9d:78:35:24:25:d9:44:42:6e:19:6d:
         61:20:61:61:4c:d9:57:17:57:9d:0d:1e:53:63:ad:1a:74:e6:
         92:b2:ec:67:fc:ab:1e:f7:ca:7e:1d:53:82:7c:dd:89:28:93:
         df:d1:4f:82:81:be:7f:06:33:84:15:89:4a:f8:87:f6:f7:a4:
         38:8d:c6:d5:0a:4c:f5:67:77:c2:9f:41:70:d2:a5:35:fd:bd:
         96:ed:68:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----