Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f066f27c-0680-4593-baf9-f40cbb3ae5b0.roa
File:                     f066f27c-0680-4593-baf9-f40cbb3ae5b0.roa (raw, json)
Hash identifier:          KrKg5IwxDkpS1fJkqJ5h+huLLX66N79mBg3Srgr82kk=
Subject key identifier:   39:08:94:DD:84:7D:1A:79:AE:DA:A3:E8:AD:D3:CA:D0:D2:7C:86:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6AF8D1BF28FC6E3C40405A29CB2706754F2384D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f066f27c-0680-4593-baf9-f40cbb3ae5b0.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.187.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:d1:bf:28:fc:6e:3c:40:40:5a:29:cb:27:06:75:4f:23:84:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=374143901a8cdda973ad28460a65b41ca891b3a116f9c95542d882ddcd70a89b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:32:6b:8f:d4:78:30:59:95:c4:25:9d:99:
                    7f:5f:ae:1e:4d:98:e7:c3:4d:b6:f6:8c:2b:65:df:
                    e5:3a:42:00:c7:cb:41:e3:57:4a:77:43:81:59:9a:
                    63:0e:26:c9:a9:91:c9:76:7d:64:d9:6a:09:27:5e:
                    d9:50:5a:ed:2a:50:e5:09:ee:b6:d4:25:e7:54:1b:
                    32:ed:c5:bd:1a:f9:f4:19:ff:bc:dd:d5:5d:c1:84:
                    1e:ad:ba:a5:b1:3a:e7:83:ce:33:d5:c2:b0:9d:bb:
                    47:1a:05:fe:8c:fe:fe:24:fc:c7:0f:d4:24:ea:cf:
                    7c:af:0c:67:20:c6:06:34:24:a5:1d:00:14:80:55:
                    68:2a:a2:0c:d8:b8:b4:24:08:3f:fc:b2:15:f7:07:
                    b5:e7:18:ff:e3:7c:f7:9b:d7:30:10:78:07:77:18:
                    19:68:70:f9:40:f7:31:e1:22:43:79:74:78:47:74:
                    c7:d8:36:69:27:86:c7:1c:0c:e8:1c:0e:82:d9:02:
                    55:4c:e8:36:de:05:bb:41:db:e4:11:3c:45:ab:79:
                    1b:b1:fd:40:87:cf:d6:9b:3e:d1:7a:36:bf:47:8d:
                    dc:09:29:34:b4:c4:cb:1a:80:11:ba:da:09:49:18:
                    b2:02:f3:74:f2:f0:49:34:7a:c7:e1:cc:a8:e6:ee:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:08:94:DD:84:7D:1A:79:AE:DA:A3:E8:AD:D3:CA:D0:D2:7C:86:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f066f27c-0680-4593-baf9-f40cbb3ae5b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.187.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c5:92:e2:75:9d:32:dc:7a:19:be:a7:f3:f5:08:bb:f0:2b:f1:
         3b:d1:81:49:e6:d5:76:dd:0f:5a:55:3b:1d:f4:95:32:43:22:
         65:c7:64:2e:88:66:59:0e:95:18:a5:a5:ba:da:4b:db:39:27:
         52:79:4c:c7:fc:2a:e3:a7:97:3c:7e:8f:25:66:18:ad:b6:f8:
         e1:8f:e9:2f:ca:28:b6:69:e4:56:82:d6:9e:0a:ff:8f:be:b1:
         4d:37:0a:fe:8a:17:84:80:8d:59:3a:8a:0c:99:58:07:9a:f3:
         a7:4e:74:c1:17:80:34:8a:72:2d:33:1f:da:8f:84:f1:cd:06:
         a0:f9:7e:df:2b:f1:9e:7a:41:20:b0:3a:8c:e6:75:5a:be:86:
         c4:75:e0:3d:b0:76:e4:5b:13:17:eb:36:5f:a0:1c:44:f3:d5:
         20:ed:08:ee:77:af:d7:2e:38:fd:68:e2:c0:fc:af:15:0a:6b:
         9c:37:11:4b:27:7a:7a:5d:c8:7b:b1:4a:12:01:09:c6:bb:5b:
         a0:7e:07:60:6c:33:db:4c:c2:3f:c7:65:a9:30:f6:c0:fb:97:
         69:ea:21:cb:98:79:55:ff:fe:d0:0f:7b:51:61:71:c2:27:e5:
         15:e1:97:09:ef:ee:dc:28:8f:51:9a:54:24:34:63:8e:1d:f1:
         fa:f5:05:c4
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUavjRvyj8bjxAQFopyycGdU8jhNgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNzQxNDM5MDFhOGNkZGE5NzNhZDI4NDYwYTY1YjQxY2E4
OTFiM2ExMTZmOWM5NTU0MmQ4ODJkZGNkNzBhODliMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGnzJrj9R4MFmVxCWdmX9frh5NmOfDTbb2jCtl3+U6QgDH
y0HjV0p3Q4FZmmMOJsmpkcl2fWTZagknXtlQWu0qUOUJ7rbUJedUGzLtxb0a+fQZ
/7zd1V3BhB6tuqWxOueDzjPVwrCdu0caBf6M/v4k/McP1CTqz3yvDGcgxgY0JKUd
ABSAVWgqogzYuLQkCD/8shX3B7XnGP/jfPeb1zAQeAd3GBlocPlA9zHhIkN5dHhH
dMfYNmknhsccDOgcDoLZAlVM6DbeBbtB2+QRPEWreRux/UCHz9abPtF6Nr9HjdwJ
KTS0xMsagBG62glJGLIC83Ty8Ek0esfhzKjm7kpjAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUOQiU3YR9Gnmu2qPordPK0NJ8hs4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YwNjZmMjdjLTA2ODAtNDU5My1iYWY5LWY0MGNiYjNhZTViMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4uzANBgkqhkiG9w0BAQsFAAOCAQEAxZLidZ0y3HoZvqfz9Qi78CvxO9GB
SebVdt0PWlU7HfSVMkMiZcdkLohmWQ6VGKWlutpL2zknUnlMx/wq46eXPH6PJWYY
rbb44Y/pL8ootmnkVoLWngr/j76xTTcK/ooXhICNWTqKDJlYB5rzp050wReANIpy
LTMf2o+E8c0GoPl+3yvxnnpBILA6jOZ1Wr6GxHXgPbB25FsTF+s2X6AcRPPVIO0I
7nev1y44/WjiwPyvFQprnDcRSyd6el3Ie7FKEgEJxrtboH4HYGwz20zCP8dlqTD2
wPuXaeohy5h5Vf/+0A97UWFxwiflFeGXCe/u3CiPUZpUJDRjjh3x+vUFxA==
-----END CERTIFICATE-----