Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd651272-6faf-4a4a-b374-d544aa3b6547.roa
File:                     dd651272-6faf-4a4a-b374-d544aa3b6547.roa (raw, json)
Hash identifier:          VREmqKvT4BbpX6kx6zYStKg5f4BDq+xQYkYjRFX+C5U=
Subject key identifier:   58:41:82:93:9D:BB:5B:B9:6B:03:6E:C2:D1:2A:C7:38:57:47:0D:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       ECABAA86D31E81CC7B3D2EDB7A28DB3D309230
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd651272-6faf-4a4a-b374-d544aa3b6547.roa
Signing time:             Fri 20 Dec 2024 00:00:00 +0000
ROA not before:           Fri 20 Dec 2024 00:00:00 +0000
ROA not after:            Fri 24 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        74.190.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ec:ab:aa:86:d3:1e:81:cc:7b:3d:2e:db:7a:28:db:3d:30:92:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 20 00:00:00 2024 GMT
            Not After : Jan 24 23:59:59 2025 GMT
        Subject: serialNumber=67a9d0f18cd0cc5913f80b48e64c700d4f5f31baf42bc66889aa5c3b315b19e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:10:ce:75:2b:a0:d2:d4:a3:78:33:9f:6b:f3:
                    f0:fe:15:e0:9e:6a:37:84:e3:a3:37:11:4b:8b:02:
                    03:0d:98:d0:d3:2b:f1:de:9d:70:9c:f9:66:44:d4:
                    4c:e5:99:78:45:a9:97:08:8f:2c:0c:15:69:6c:57:
                    b1:7d:e4:95:f4:c0:00:8f:12:0f:55:e2:eb:ab:b4:
                    99:43:f6:37:e8:42:93:d6:70:91:5a:eb:b6:fe:f5:
                    50:36:41:9b:e6:23:bb:40:49:44:6e:1a:ce:cd:39:
                    56:7f:e0:c6:8e:4c:9f:de:7b:61:a3:f4:e2:fb:29:
                    88:1c:eb:fb:c7:32:73:43:f7:39:27:10:0b:31:af:
                    e7:08:05:5e:4a:49:ce:f4:07:8f:b2:1d:54:0d:b1:
                    54:d3:12:a1:36:37:bc:9b:c5:27:de:30:42:6a:6c:
                    98:9b:d3:0d:6f:58:f9:fd:dd:02:b5:f6:f1:c6:27:
                    1a:3c:a7:b9:c4:30:df:e9:29:f7:4f:38:42:87:dd:
                    6c:ae:2a:b8:f9:a4:af:c3:85:34:68:e7:13:4d:a2:
                    de:a8:c7:ab:16:ed:5e:57:18:a8:f1:7f:87:51:03:
                    d6:d8:11:58:19:48:e3:d2:d2:67:bc:e7:f6:a6:60:
                    f6:d5:d5:3b:88:f9:32:1f:34:37:9d:9e:a8:08:2f:
                    16:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:41:82:93:9D:BB:5B:B9:6B:03:6E:C2:D1:2A:C7:38:57:47:0D:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd651272-6faf-4a4a-b374-d544aa3b6547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:51:35:19:5e:63:fe:c2:92:71:04:fa:1e:7f:6c:a1:57:7b:
         d3:e5:db:a7:c2:3e:f5:3f:54:aa:a3:4c:2b:68:26:e7:37:e7:
         96:a5:fe:e4:ef:f2:d8:57:06:e5:b8:dd:16:44:8d:91:46:b8:
         5e:46:83:fc:72:4e:07:73:44:27:8e:b8:51:15:4d:86:c9:ce:
         e1:79:7c:06:0f:3e:c7:57:28:73:f4:0a:34:5d:b6:44:38:73:
         33:d8:97:3f:d9:49:37:7d:54:82:a5:10:51:5f:59:43:20:af:
         23:31:dc:78:c2:07:41:d6:ed:74:b8:73:68:bc:59:f5:bd:d7:
         c9:5e:71:0a:e7:4a:98:99:e4:5c:34:1f:a5:0a:33:7e:9c:1a:
         bb:cc:2b:b6:fd:86:88:68:5b:84:64:a8:de:79:28:97:b3:86:
         e5:39:1d:a2:f3:38:89:8e:0d:c7:19:39:6c:b8:80:c8:78:dc:
         32:42:8f:2b:e0:f2:8e:9d:ae:63:36:68:8d:a3:08:4e:51:2b:
         48:ba:cf:e1:c7:47:63:b9:76:fb:b5:d5:cd:cb:96:f5:46:c5:
         b8:60:80:c2:52:be:f1:20:9b:05:00:1c:1c:8f:13:b9:89:aa:
         9d:40:35:39:0a:8e:af:45:18:a0:6a:22:7a:85:2e:ba:0e:9d:
         5c:1a:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----