Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc52d6f-0821-434c-9376-c97690059740.roa
File:                     ddc52d6f-0821-434c-9376-c97690059740.roa (raw, json)
Hash identifier:          Y21VXgTtwJG7PgAgnkGuk2D1r54lZ9n8A+C0cKPDICo=
Subject key identifier:   10:61:30:2E:0C:12:09:E6:47:B3:C9:23:94:72:5A:E1:E2:67:4A:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F01DDD0C3BB7382C8F4CEE8B10FDE32E074597C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc52d6f-0821-434c-9376-c97690059740.roa
Signing time:             Fri 03 Jan 2025 00:00:00 +0000
ROA not before:           Fri 03 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        216.24.192.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:01:dd:d0:c3:bb:73:82:c8:f4:ce:e8:b1:0f:de:32:e0:74:59:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  3 00:00:00 2025 GMT
            Not After : Feb  7 23:59:59 2025 GMT
        Subject: serialNumber=f1e7418740d13a0ed82888668fba84f1b283cdcee778483867a3b49768be466b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7f:b6:2d:46:57:f4:95:30:50:00:13:b0:17:
                    83:ea:6c:e7:dd:db:fb:a2:76:c2:b4:a2:71:ec:34:
                    fa:d1:81:b0:4f:c1:95:b8:75:0c:3e:99:10:a7:41:
                    fc:db:c3:b8:ca:f5:6c:7f:09:6d:69:9e:b9:cc:bc:
                    e0:60:e0:ff:a7:cd:59:02:d7:d5:fa:3d:7f:0f:9f:
                    be:3d:fd:63:9a:bc:aa:06:a2:5d:71:05:c7:e6:84:
                    4a:03:59:d2:0c:9e:f2:e5:84:4b:eb:12:53:ab:e0:
                    a3:78:81:1a:a5:5a:7f:11:1a:93:79:95:b1:01:65:
                    1f:2c:d0:11:ca:04:e9:7a:4d:12:fe:2b:42:dc:58:
                    99:31:53:c3:84:a8:a5:50:1e:e8:dc:f7:7f:03:f0:
                    65:70:9c:65:1b:f7:48:e1:1c:95:7d:ee:a9:c6:55:
                    4d:64:7e:61:a1:e1:4c:62:ae:42:64:c0:55:71:2a:
                    1d:74:1e:75:74:9e:33:2d:47:46:6c:49:49:b6:92:
                    7c:9c:65:ed:28:9e:e4:09:80:03:26:fe:45:58:a3:
                    cb:04:9c:d7:17:63:66:ff:f5:d7:9d:69:3a:06:76:
                    e6:f3:de:11:f8:14:c5:27:8a:98:b4:a3:6f:bc:15:
                    a0:dc:67:41:d2:7c:26:87:59:6a:0b:aa:84:58:6a:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:61:30:2E:0C:12:09:E6:47:B3:C9:23:94:72:5A:E1:E2:67:4A:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc52d6f-0821-434c-9376-c97690059740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c8:8f:2e:60:4a:12:c3:f3:26:3f:dd:93:5e:1d:14:c8:1d:b8:
         f9:32:69:8e:03:16:dd:67:c0:03:b8:71:52:c5:12:23:23:5a:
         b4:48:42:9b:cf:df:fe:93:8e:41:49:ce:5e:14:66:c0:5e:6e:
         45:08:31:ed:ac:a8:fd:fb:3e:b7:60:9f:75:1b:a7:d2:85:0e:
         26:07:f4:3e:3b:47:25:6e:7e:88:0c:73:bf:05:4b:c3:bb:d5:
         db:f2:42:16:2b:ef:99:44:d3:45:b3:ec:0c:91:30:e0:45:16:
         08:21:dc:d3:d0:dd:3c:9b:1c:a5:e2:b9:8d:d1:d8:42:56:df:
         cd:24:ca:67:6f:ed:3c:70:44:e6:13:d9:7f:8d:27:0e:34:88:
         b9:0e:e8:29:70:ff:3d:fb:2e:8e:5c:3c:d2:9a:10:74:5b:64:
         65:78:79:c2:ed:61:76:88:79:86:6d:10:f9:8b:47:e0:21:db:
         17:66:f0:be:fb:ac:50:ff:60:16:0d:4b:77:bb:63:30:06:60:
         2c:b0:7d:db:a6:e0:94:f4:01:c9:18:84:f3:0f:e4:dd:77:c6:
         6a:60:b9:06:2c:48:bc:ee:5b:78:37:04:eb:1b:cd:dd:e4:53:
         5c:75:81:1b:db:98:a2:e9:a6:03:d9:fc:26:b2:9d:45:86:c8:
         c9:ba:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----