Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da7bf551-a636-41ce-8adb-52e60afddcf1.roa
File:                     da7bf551-a636-41ce-8adb-52e60afddcf1.roa (raw, json)
Hash identifier:          XUfXvivBasIuH2YhDToAwXtmyVuGybluljQzOejmnRM=
Subject key identifier:   26:06:29:F3:6A:A1:46:2A:B9:A3:6E:37:24:0E:A7:84:70:D8:C1:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B00309AFC2768B08E449054EDA8C262849A0F38
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da7bf551-a636-41ce-8adb-52e60afddcf1.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        208.115.0.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:00:30:9a:fc:27:68:b0:8e:44:90:54:ed:a8:c2:62:84:9a:0f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=e7a80f39e79352323ae3a57e6ce259c5a06fc53de856b5349245ec9c47fc1f5e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3c:d3:54:e6:b1:6c:d0:14:25:99:67:10:5d:
                    22:4c:37:b0:46:2c:f2:28:61:f5:f4:37:cd:51:44:
                    e3:73:0e:e2:a5:d6:c7:7a:cb:3e:c6:79:53:bb:57:
                    4d:8b:2b:0a:c7:e7:c5:06:ca:eb:57:24:1f:8e:3a:
                    ae:fc:53:f4:3b:bf:88:38:95:66:7e:d8:f3:45:90:
                    a9:aa:34:18:b8:fe:46:c2:c8:8f:9a:97:c2:a6:86:
                    a2:32:7e:75:18:ce:58:2f:3c:b4:bd:db:b1:2b:bf:
                    83:b8:ac:28:1e:ca:e7:39:2c:02:f5:94:d5:28:94:
                    d4:c0:86:3f:7d:0b:13:c9:c8:a1:78:f9:61:1f:ba:
                    70:97:43:71:a0:ea:30:a6:6e:8c:cd:9c:ad:80:2d:
                    ae:a0:ce:68:e8:08:12:fc:c5:4e:6e:88:f6:8a:17:
                    e8:4a:78:91:54:e0:d4:df:9f:1a:4d:97:b4:93:59:
                    a4:78:24:62:20:83:a7:28:19:a1:d8:2c:35:2f:8e:
                    0b:59:bc:fd:05:f4:e6:2d:05:6d:f6:ed:bb:a4:a4:
                    c5:e4:eb:02:bb:3a:51:b7:8c:31:df:a7:e7:02:80:
                    cb:7e:9e:27:16:b3:b1:af:1b:52:94:2d:31:f0:c2:
                    61:73:22:30:15:29:a3:bd:31:67:7d:d1:42:4d:af:
                    4c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:06:29:F3:6A:A1:46:2A:B9:A3:6E:37:24:0E:A7:84:70:D8:C1:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da7bf551-a636-41ce-8adb-52e60afddcf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.115.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:00:bb:86:97:b5:ae:40:98:80:40:d1:19:1b:b5:38:22:
         b1:0c:67:d2:c6:ff:71:a3:50:7f:4d:5c:bd:e7:e2:dd:52:5d:
         17:a1:3d:b9:31:8e:5c:55:c8:25:f3:d5:6d:72:ff:4b:73:20:
         47:15:06:b7:c6:a1:a4:75:6e:fc:94:b0:e7:73:76:82:5d:52:
         0c:51:ea:c0:54:6c:70:b1:51:93:ac:2b:79:32:60:6a:66:11:
         ea:43:d3:03:a7:8d:b5:9b:a0:24:55:fa:1b:58:a9:a6:a6:78:
         9e:8e:ca:47:15:2d:16:01:63:ef:0f:30:72:87:72:d2:e3:7a:
         8b:93:6d:cf:ca:f8:bc:b8:e7:1b:95:0f:bb:6d:3d:81:fe:fa:
         f1:82:7b:cb:06:83:b5:cf:b7:f2:1f:08:c5:9b:ff:7e:1c:5e:
         b0:1c:1c:c7:d6:e3:fc:b6:a7:b3:ca:2a:d5:21:a1:bc:b8:30:
         2c:b8:ae:76:0d:36:c3:c9:dc:49:ed:67:16:b0:4c:b2:1a:b3:
         cf:d5:41:29:c3:6b:0e:3c:3d:26:34:d1:48:a0:c1:b0:21:05:
         1e:76:a9:6b:c2:f1:4e:4c:ff:71:b2:35:34:1a:ed:75:79:6f:
         92:ee:4f:a3:76:ad:b4:df:e4:2c:8d:e0:23:0e:be:1b:8e:88:
         0d:46:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----