Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef0f68dc-c565-4e1f-89ac-581577fc8d14.roa
File:                     ef0f68dc-c565-4e1f-89ac-581577fc8d14.roa (raw, json)
Hash identifier:          L58INYaiCKIso4jDwzSJL+haqM2pA8olVoQ+fKyvh4g=
Subject key identifier:   16:C4:3B:21:9F:26:72:BF:01:D9:2E:1C:B5:8F:87:FD:6A:86:3B:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       660FF595EE429C9876CB494A1BFBD2B01584DC71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef0f68dc-c565-4e1f-89ac-581577fc8d14.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        204.169.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0f:f5:95:ee:42:9c:98:76:cb:49:4a:1b:fb:d2:b0:15:84:dc:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=635289637ff4a4b2684eee9e62563c128277161e9de150a287bb693a9a70630f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:e9:20:4d:86:5e:60:9b:0c:ed:c6:f3:5b:
                    55:88:33:03:93:83:be:a0:37:21:60:aa:68:39:64:
                    3c:26:8d:6b:f7:5d:eb:f3:cf:e7:15:1a:ee:7a:9b:
                    d2:50:cf:49:4a:0f:b2:09:71:a7:97:2a:4a:79:ad:
                    69:79:ef:e7:4c:c0:f3:05:28:5a:cd:ee:ee:38:3e:
                    ff:b2:d1:78:ce:8c:aa:87:fa:39:cb:73:9f:de:86:
                    c7:04:f4:07:ed:57:49:b9:e1:d7:3a:e2:e8:61:17:
                    92:69:40:0a:77:f6:3e:58:ab:99:a3:88:cb:20:80:
                    5d:86:6c:98:30:73:69:2f:51:e1:80:b3:95:23:5e:
                    3e:9a:7a:c6:6d:ee:3d:3a:2f:98:46:cd:fc:a5:9a:
                    40:dd:86:79:1e:c4:d5:44:9f:8d:a6:de:50:7b:a2:
                    b5:e4:2d:cc:ad:08:25:f5:4d:d9:8d:50:25:43:04:
                    c4:97:ad:fe:ab:93:e7:0e:9a:0a:44:17:1d:24:bf:
                    0e:ec:b1:b5:8c:7d:a7:07:af:a5:5e:20:31:42:52:
                    0d:6c:d3:e7:41:62:97:00:27:09:2f:61:71:73:b5:
                    0d:97:7a:da:81:2c:a5:d7:bb:eb:8e:26:87:b8:60:
                    a1:99:85:c3:8b:7c:2d:30:9b:c5:de:db:c5:02:39:
                    e9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C4:3B:21:9F:26:72:BF:01:D9:2E:1C:B5:8F:87:FD:6A:86:3B:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef0f68dc-c565-4e1f-89ac-581577fc8d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.169.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9d:05:84:9e:17:40:76:df:73:8c:51:5a:76:54:2d:1f:6a:19:
         5d:65:5b:2f:49:19:c6:e2:a8:89:32:c3:94:90:f2:8b:fd:fc:
         57:0e:cc:bb:98:ed:e5:c8:05:84:59:5c:5d:c5:a7:bf:fd:30:
         1b:6b:25:2b:f4:32:42:d9:c1:a8:c7:19:4a:9d:8e:e2:1f:0c:
         88:c4:90:84:65:18:98:fa:fe:0e:2e:66:4b:15:bc:30:79:25:
         1f:c1:4f:ff:53:84:59:09:c3:2f:c1:96:d4:83:4b:1a:2e:64:
         8d:34:a9:46:dd:a3:5b:cd:9d:8e:e9:ed:e6:34:bf:0d:ff:0d:
         44:c4:39:1f:32:e6:47:18:40:53:0c:32:fc:8d:3e:7a:fb:cf:
         18:01:3e:95:5b:9d:67:6c:57:b3:53:73:cb:95:67:d0:9e:10:
         3a:b3:38:4a:98:c9:5d:42:46:85:51:62:d7:9d:51:0a:df:3b:
         c8:8d:eb:b5:93:f8:04:cb:3b:72:6a:a1:62:9b:4f:a2:31:cb:
         57:ec:dc:29:3d:83:43:35:d3:59:bb:4f:b1:0d:ae:c7:7d:4e:
         91:5d:9a:42:9c:b0:80:9c:f2:a5:b2:97:a9:fa:b8:bc:10:3c:
         49:29:7d:0b:8e:0c:61:81:92:78:57:76:f6:f5:6f:ac:65:dd:
         39:45:bd:70
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUZg/1le5CnJh2y0lKG/vSsBWE3HEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MzUyODk2MzdmZjRhNGIyNjg0ZWVlOWU2MjU2M2MxMjgy
NzcxNjFlOWRlMTUwYTI4N2JiNjkzYTlhNzA2MzBmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCruukgTYZeYJsM7cbzW1WIMwOTg76gNyFgqmg5ZDwmjWv3
Xevzz+cVGu56m9JQz0lKD7IJcaeXKkp5rWl57+dMwPMFKFrN7u44Pv+y0XjOjKqH
+jnLc5/ehscE9AftV0m54dc64uhhF5JpQAp39j5Yq5mjiMsggF2GbJgwc2kvUeGA
s5UjXj6aesZt7j06L5hGzfylmkDdhnkexNVEn42m3lB7orXkLcytCCX1TdmNUCVD
BMSXrf6rk+cOmgpEFx0kvw7ssbWMfacHr6VeIDFCUg1s0+dBYpcAJwkvYXFztQ2X
etqBLKXXu+uOJoe4YKGZhcOLfC0wm8Xe28UCOen9AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUFsQ7IZ8mcr8B2S4ctY+H/WqGO1QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VmMGY2OGRjLWM1NjUtNGUxZi04OWFjLTU4MTU3N2ZjOGQxNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDMqTANBgkqhkiG9w0BAQsFAAOCAQEAnQWEnhdAdt9zjFFadlQtH2oZXWVb
L0kZxuKoiTLDlJDyi/38Vw7Mu5jt5cgFhFlcXcWnv/0wG2slK/QyQtnBqMcZSp2O
4h8MiMSQhGUYmPr+Di5mSxW8MHklH8FP/1OEWQnDL8GW1INLGi5kjTSpRt2jW82d
junt5jS/Df8NRMQ5HzLmRxhAUwwy/I0+evvPGAE+lVudZ2xXs1Nzy5Vn0J4QOrM4
SpjJXUJGhVFi151RCt87yI3rtZP4BMs7cmqhYptPojHLV+zcKT2DQzXTWbtPsQ2u
x31OkV2aQpywgJzypbKXqfq4vBA8SSl9C44MYYGSeFd29vVvrGXdOUW9cA==
-----END CERTIFICATE-----