Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8ec2428-0807-456e-8e2c-03d16ea5cdf6.roa
File:                     d8ec2428-0807-456e-8e2c-03d16ea5cdf6.roa (raw, json)
Hash identifier:          omMukcKBcCwPmo1Sj9HP+Zu3SQ5zqmH/pXBhpyYB4BA=
Subject key identifier:   3D:64:2B:94:92:AD:DC:F6:34:B8:03:78:4C:EA:FB:B5:2A:5A:0D:B9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AAE3F335020FE94A782EA467E6066D24E314373
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8ec2428-0807-456e-8e2c-03d16ea5cdf6.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        99.105.128.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ae:3f:33:50:20:fe:94:a7:82:ea:46:7e:60:66:d2:4e:31:43:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=ac4a5424fa509cc9a15718bb2a7d7578de71c5c0e9569801b00896da3d36394d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:4f:cb:13:c4:7c:c6:30:f0:6a:6d:2a:7e:
                    f9:f3:0d:da:d0:84:17:0f:7a:04:38:67:ae:87:90:
                    fd:1b:7d:22:33:d1:2a:ce:4d:7a:87:8e:94:ca:c6:
                    67:dd:c5:22:b9:82:3e:9f:16:8e:92:ab:b5:76:2b:
                    18:47:bc:af:41:bb:b0:6f:88:eb:28:fb:6e:20:96:
                    f9:47:68:5b:88:58:8c:6a:a2:26:7b:94:59:e8:74:
                    e2:d0:f4:33:2b:b0:c4:b0:70:19:75:5a:92:b8:3e:
                    7b:c9:9b:df:39:ef:6c:31:5d:10:d2:a3:0c:77:f2:
                    a3:dc:33:04:d3:a9:89:34:45:98:1d:0e:87:12:17:
                    78:1e:56:61:69:4c:d2:36:d4:8f:5b:73:88:a4:e9:
                    7a:c8:99:31:b6:8c:c0:10:1d:57:a9:57:cf:09:c2:
                    84:e5:fd:d0:52:76:76:ce:d3:05:33:63:ae:71:bf:
                    81:e1:a4:e5:b2:14:91:46:e4:32:08:ce:32:21:38:
                    aa:9a:98:dc:2b:cc:16:1d:bd:c9:ae:39:45:32:72:
                    9e:a4:c7:e1:6b:f4:04:61:06:39:b1:91:d2:6e:50:
                    25:65:24:b8:07:66:0d:08:10:82:a5:cf:5a:ee:6f:
                    54:39:ea:fa:df:e5:aa:1e:b7:e9:e9:da:42:ee:cb:
                    8b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:64:2B:94:92:AD:DC:F6:34:B8:03:78:4C:EA:FB:B5:2A:5A:0D:B9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8ec2428-0807-456e-8e2c-03d16ea5cdf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.105.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         38:86:51:08:43:c0:db:03:fb:c8:6f:b0:6f:0b:b8:fe:00:ff:
         1b:c0:48:57:a7:b7:21:ad:8b:81:b5:36:93:79:2a:1f:00:a0:
         50:ef:5b:82:57:aa:92:0a:e5:4b:a9:de:02:62:10:92:2d:30:
         f0:40:93:51:a7:3e:06:ed:b7:8c:9a:3d:46:b4:6b:14:b2:86:
         51:df:36:a6:18:3b:02:32:a5:83:d9:92:20:c8:dc:65:c0:1e:
         2d:04:27:68:b7:b3:a6:73:6b:79:1c:02:7f:ba:8d:2e:0c:27:
         5c:73:30:ae:52:cd:c4:49:b0:0e:fe:0c:c1:57:14:e6:be:0a:
         96:ca:99:7a:c7:e0:a0:f6:37:aa:87:11:2b:b5:b9:53:34:1f:
         70:27:6c:2b:af:ed:95:2f:a2:90:90:5d:bf:66:8b:05:98:c2:
         cd:9e:f3:79:7a:ba:2a:d9:3e:e2:b9:9b:a2:fd:b0:e9:5b:9b:
         77:ed:c5:1b:8e:e9:36:96:1b:53:17:3f:2f:87:f9:e1:cb:5e:
         ce:67:1b:44:1e:7b:2b:38:54:4f:32:27:ab:48:ff:3d:4a:af:
         58:24:95:a5:21:b4:f3:ab:f7:b8:4e:bb:2d:4f:aa:6c:eb:ac:
         f5:13:4a:66:83:ea:ca:56:69:09:50:a0:83:b6:cc:8c:fd:ca:
         ee:4c:4c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----