Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee6b75bd-2c0a-4a54-84fa-10597d0c6e73.roa
File:                     ee6b75bd-2c0a-4a54-84fa-10597d0c6e73.roa (raw, json)
Hash identifier:          MvTGrjgE7OdvWVqhoUIMkklK9HzijVgFdb+SZWyASKo=
Subject key identifier:   E4:E4:B7:FE:BF:71:D1:9D:6F:3B:8F:94:A1:E0:77:CD:85:18:78:AB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A7E6CE06FAC27877663DBF5AE01C6E9E4540356
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee6b75bd-2c0a-4a54-84fa-10597d0c6e73.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        99.85.128.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7e:6c:e0:6f:ac:27:87:76:63:db:f5:ae:01:c6:e9:e4:54:03:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=d8baeb186a1c2dce8fa4aa7a3c534bdeda4ed3ab3a8519c3bb1da6af72004ccf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:a3:b4:b5:f7:5f:19:da:82:d8:ea:7d:98:
                    3a:ee:40:35:f2:e9:8c:1e:fd:1c:00:28:75:90:6c:
                    f7:7a:5a:c6:ff:73:a6:c6:3f:92:29:37:2a:10:9b:
                    05:09:96:62:e9:e8:29:37:a7:ec:f5:0d:d3:0c:78:
                    af:d6:bb:2b:60:bf:3c:b0:8e:ed:45:7e:92:fa:a3:
                    82:6d:e1:9f:ca:0d:10:3c:ab:5d:98:f2:94:32:c7:
                    4d:9f:ed:50:64:5e:03:c6:6a:0f:a5:85:33:b8:9f:
                    8c:ab:a8:8d:63:05:e0:24:5e:83:63:d3:9c:c0:af:
                    04:dc:b8:09:32:0e:30:ad:0a:19:b8:98:c2:af:c0:
                    47:db:40:38:5f:af:0a:eb:94:63:f9:e2:ea:f3:a0:
                    e6:6a:ae:ba:ed:f9:7c:df:7c:ee:e6:ba:d9:f2:6b:
                    9c:9f:00:c3:67:db:9a:23:54:fc:10:92:c8:c1:b3:
                    70:2c:9d:aa:08:f7:c2:ee:d4:31:4a:00:60:e4:ac:
                    0e:1a:89:2d:69:f9:b5:46:78:6c:11:6e:dc:1d:09:
                    4a:90:b8:da:7f:a6:c8:e0:36:c7:59:75:6b:8c:10:
                    e2:1c:33:5d:b5:bd:d2:c7:2f:db:b4:04:b6:ef:42:
                    9c:25:4c:8e:e0:eb:e4:7b:79:04:7a:d5:0c:98:41:
                    61:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E4:B7:FE:BF:71:D1:9D:6F:3B:8F:94:A1:E0:77:CD:85:18:78:AB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee6b75bd-2c0a-4a54-84fa-10597d0c6e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.85.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         72:dc:3c:88:2a:00:8a:e0:cf:83:52:db:26:f9:32:7f:0c:a7:
         c3:3a:af:34:dd:6e:d9:dc:94:fe:e7:3e:1a:33:5b:90:36:a8:
         81:a2:48:90:d2:ff:a9:de:63:5e:36:db:c3:95:89:2d:8e:5b:
         36:97:a0:ae:61:f1:08:ec:83:09:7c:fd:80:5e:56:d4:c4:b0:
         86:85:d9:f7:11:27:97:8b:eb:42:ba:25:3b:8f:15:37:7f:de:
         fb:45:d3:00:31:12:bd:f4:15:f0:78:5f:4d:f4:48:2f:76:ab:
         94:2d:ad:04:1f:dc:20:e8:1e:db:f1:fd:50:27:3c:11:49:88:
         75:71:b2:72:18:50:a9:24:78:1a:c6:12:ba:a1:b1:60:c2:65:
         3b:a7:30:ac:7c:90:c2:5f:90:61:a9:af:9d:2a:98:09:6f:96:
         00:6c:68:90:76:f6:30:eb:97:61:f4:e9:02:b5:b1:3b:49:f4:
         be:c7:1f:a4:bb:32:24:bd:b8:1f:4b:1e:18:8d:f8:eb:cd:22:
         bb:25:85:42:24:4d:2c:4a:7f:94:3b:9f:7d:7d:88:55:8d:a8:
         70:5b:58:6a:dd:43:02:3b:a2:82:b2:19:b9:ba:24:e8:b8:e4:
         01:58:36:9f:c6:7a:bd:ba:42:de:35:16:4e:68:16:33:36:4f:
         9a:43:38:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----