Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0f1ad81-abfe-432e-b45d-859ac90ece6c.roa
File:                     e0f1ad81-abfe-432e-b45d-859ac90ece6c.roa (raw, json)
Hash identifier:          AOytBXIPxszIdjJQmcmxBRYFwseUUbxwYN7yc9GDtUg=
Subject key identifier:   2F:8A:C0:BF:F3:6A:43:6E:15:BA:76:57:00:15:2F:80:1F:43:EA:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D88D80862E32AD629103B2FB20F1E6BDEA5D34D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0f1ad81-abfe-432e-b45d-859ac90ece6c.roa
Signing time:             Sat 21 Dec 2024 00:00:00 +0000
ROA not before:           Sat 21 Dec 2024 00:00:00 +0000
ROA not after:            Sat 25 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        161.46.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:88:d8:08:62:e3:2a:d6:29:10:3b:2f:b2:0f:1e:6b:de:a5:d3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 21 00:00:00 2024 GMT
            Not After : Jan 25 23:59:59 2025 GMT
        Subject: serialNumber=020c9bca88dfaa3affcbabbddaa8f9979f69649b77dc834f871200d23cc8ca85, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:0b:84:57:74:9f:6f:a2:17:fa:2b:84:d3:
                    f9:c1:30:55:ef:ae:d6:02:cc:ec:f4:82:5e:53:a3:
                    3c:0a:f7:9a:35:d2:b3:33:73:a6:8b:a3:53:8c:bd:
                    54:9f:81:ba:86:b5:f3:e2:69:62:bb:2d:93:d2:da:
                    93:8e:fb:b1:2c:a0:89:67:c7:14:50:a8:ab:81:2f:
                    e7:dc:e3:a8:8d:ef:e1:35:e7:ba:28:ab:38:54:8a:
                    ee:3d:98:d5:75:72:d7:8c:7d:8a:80:56:12:16:12:
                    6d:85:25:30:11:2e:94:15:53:cf:15:11:e3:10:2a:
                    f8:57:de:f9:ba:17:e2:f6:53:8f:da:9f:d7:45:2b:
                    2b:f7:4b:78:84:bb:76:60:cf:62:78:0c:63:56:95:
                    10:17:7d:d5:42:36:97:13:52:a0:2e:ab:43:f5:07:
                    b9:07:c3:e9:ed:90:33:fd:6c:fb:29:24:1d:b3:eb:
                    1d:5a:e2:e5:fe:0d:7c:a1:5a:b5:b9:26:da:20:92:
                    be:9c:20:62:63:cb:dd:8a:7d:b4:ff:91:d8:4f:fc:
                    cb:d5:62:a7:8b:71:dc:39:65:a6:8a:96:96:ec:a3:
                    1f:7b:89:d3:1f:d4:1b:d3:52:3b:c7:39:db:c2:89:
                    8c:03:34:03:e7:c1:08:04:46:d6:0b:53:be:7d:a9:
                    83:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8A:C0:BF:F3:6A:43:6E:15:BA:76:57:00:15:2F:80:1F:43:EA:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0f1ad81-abfe-432e-b45d-859ac90ece6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         06:dd:af:66:03:75:d6:37:27:48:86:ba:d6:30:7d:ca:1c:c9:
         ff:e7:36:a2:34:31:c5:ea:a2:34:db:3a:34:a7:0e:0c:71:58:
         10:62:3f:b2:18:c7:31:96:72:e2:fd:c7:13:ce:41:f9:73:bb:
         2d:ff:c3:aa:44:27:74:57:4c:35:b8:e2:1f:5d:12:72:a2:81:
         c3:ef:91:fd:37:04:52:4b:06:24:48:c0:27:85:9a:34:f5:6e:
         35:7a:91:06:88:e0:52:d7:d2:73:3a:22:f0:87:28:a6:8c:65:
         b7:64:b6:3c:a0:03:c9:9d:17:35:b8:d6:ae:44:2a:0f:b7:55:
         ec:64:b5:f9:f1:98:f6:f6:54:b8:a1:b2:94:12:62:5c:89:c7:
         e7:d4:cc:df:ac:6b:27:6e:d3:8b:f0:07:8b:28:86:40:98:a7:
         f2:f9:98:3a:68:30:c1:c8:87:ce:7c:65:b2:6f:7b:50:4b:a0:
         35:53:a2:fa:8a:91:a9:38:42:d5:3c:ea:b0:e4:b1:4b:bb:01:
         0d:6d:27:38:ef:81:6a:35:74:b5:67:cc:04:89:96:f2:86:9e:
         70:85:9a:3b:e3:97:fa:27:81:78:3d:05:ed:d6:ce:02:74:80:
         6c:f7:a6:5b:c8:db:da:65:b7:31:77:78:73:6e:4f:ed:50:11:
         9d:95:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----