Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5eeb290-8392-4010-87a4-527055bd8c1a.roa
File:                     f5eeb290-8392-4010-87a4-527055bd8c1a.roa (raw, json)
Hash identifier:          +gLl+/pIhhO4Pb/kGL8t5B0FvH4pbXczJep8Za9u248=
Subject key identifier:   E9:0C:84:42:0E:33:BB:13:8B:2C:4B:B0:7B:F0:80:0A:AA:38:43:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C49F3F091D304A5057DAD6E515375C7F47D5F47
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5eeb290-8392-4010-87a4-527055bd8c1a.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        16.87.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:49:f3:f0:91:d3:04:a5:05:7d:ad:6e:51:53:75:c7:f4:7d:5f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=58800bc414f7e0591cabee5c86b9847ef71709e4b591bab47e34fe7060f2df93, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:2c:35:86:52:35:08:4a:c2:ba:de:40:2d:
                    27:66:02:ca:cd:9a:37:fe:e2:4c:24:e2:09:60:e6:
                    39:ea:ec:b6:90:7c:66:a5:42:03:94:e4:dd:59:52:
                    c9:89:9e:5e:8d:96:14:ba:d5:d2:98:a8:c3:c9:ae:
                    62:5a:94:2f:6b:6f:a9:c9:2f:9e:c4:e7:87:4f:ec:
                    d9:98:a8:dc:a5:aa:32:a0:62:2b:85:b2:a5:39:a8:
                    d9:28:25:05:89:f5:ba:fc:e6:00:bf:07:73:1b:e4:
                    ca:0f:d5:11:ca:85:29:41:f1:1b:df:da:b6:07:35:
                    35:e1:f6:a7:4f:6c:a8:ba:1f:8b:a9:b7:d0:bf:91:
                    2e:50:5a:bf:6b:84:31:6e:cd:9f:a9:ba:37:81:45:
                    22:5f:b1:4c:c0:25:5d:c6:6f:8a:81:c9:d1:3e:54:
                    ec:98:79:a5:9c:1a:9d:4d:ed:10:b4:45:4b:66:35:
                    4d:c1:a5:a1:42:03:1c:f4:2e:fb:47:24:ce:59:95:
                    51:90:56:e2:5f:ff:a4:c7:e3:58:41:83:67:b4:14:
                    c0:19:33:bf:58:68:6d:35:25:7d:4e:56:22:67:c5:
                    0e:94:45:72:8a:5b:16:85:c3:1e:47:82:2e:03:3a:
                    52:ba:5b:31:50:4c:e1:77:46:38:61:46:30:97:a8:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0C:84:42:0E:33:BB:13:8B:2C:4B:B0:7B:F0:80:0A:AA:38:43:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5eeb290-8392-4010-87a4-527055bd8c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.87.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:2b:b8:05:5d:59:c6:42:66:63:d0:d1:67:78:70:c0:ea:95:
         d2:ad:d3:69:92:81:f3:db:e1:d7:4b:ec:cc:3c:39:b9:1a:e4:
         63:7d:dd:24:c3:a4:b5:98:77:ba:40:e5:d4:63:c4:5c:d8:dc:
         1b:3a:c1:bd:72:ec:18:04:fa:8d:69:ae:2c:03:38:b5:ec:52:
         df:de:4f:68:f2:3e:07:b9:1a:56:29:9e:43:1d:1d:98:58:19:
         96:d2:d7:41:14:7e:0f:1b:99:72:69:c3:3a:3d:5c:7f:b5:e6:
         3f:dc:65:87:8a:c7:42:e0:56:a4:fe:2b:08:fd:f2:32:86:ea:
         23:ac:76:5f:00:d0:49:38:7d:83:dd:28:d1:a1:c9:4f:70:da:
         20:e7:3a:1c:54:f8:35:b7:28:7a:29:9e:e5:78:70:2d:8f:41:
         fb:49:bc:85:fc:97:15:63:cf:cb:d9:ef:df:15:0a:e2:06:4e:
         95:2d:ba:dd:42:21:2f:1b:3c:c6:d3:92:c3:50:34:59:97:fa:
         66:b3:0c:99:b2:7a:74:e2:ad:44:10:25:87:f1:e3:00:c8:24:
         47:6a:e7:cf:10:4b:32:fe:7f:30:fa:69:31:3f:50:37:a0:39:
         a3:15:78:da:e0:aa:93:1a:6d:52:e4:9f:77:b3:dc:b7:ed:50:
         35:f1:81:d6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUDEnz8JHTBKUFfa1uUVN1x/R9X0cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ODgwMGJjNDE0ZjdlMDU5MWNhYmVlNWM4NmI5ODQ3ZWY3
MTcwOWU0YjU5MWJhYjQ3ZTM0ZmU3MDYwZjJkZjkzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDN3Cw1hlI1CErCut5ALSdmAsrNmjf+4kwk4glg5jnq7LaQ
fGalQgOU5N1ZUsmJnl6NlhS61dKYqMPJrmJalC9rb6nJL57E54dP7NmYqNylqjKg
YiuFsqU5qNkoJQWJ9br85gC/B3Mb5MoP1RHKhSlB8Rvf2rYHNTXh9qdPbKi6H4up
t9C/kS5QWr9rhDFuzZ+pujeBRSJfsUzAJV3Gb4qBydE+VOyYeaWcGp1N7RC0RUtm
NU3BpaFCAxz0LvtHJM5ZlVGQVuJf/6TH41hBg2e0FMAZM79YaG01JX1OViJnxQ6U
RXKKWxaFwx5Hgi4DOlK6WzFQTOF3RjhhRjCXqKHPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU6QyEQg4zuxOLLEuwe/CACqo4Q7YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y1ZWViMjkwLTgzOTItNDAxMC04N2E0LTUyNzA1NWJkOGMxYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQVzANBgkqhkiG9w0BAQsFAAOCAQEAkSu4BV1ZxkJmY9DRZ3hwwOqV0q3T
aZKB89vh10vszDw5uRrkY33dJMOktZh3ukDl1GPEXNjcGzrBvXLsGAT6jWmuLAM4
texS395PaPI+B7kaVimeQx0dmFgZltLXQRR+DxuZcmnDOj1cf7XmP9xlh4rHQuBW
pP4rCP3yMobqI6x2XwDQSTh9g90o0aHJT3DaIOc6HFT4Nbcoeime5XhwLY9B+0m8
hfyXFWPPy9nv3xUK4gZOlS263UIhLxs8xtOSw1A0WZf6ZrMMmbJ6dOKtRBAlh/Hj
AMgkR2rnzxBLMv5/MPppMT9QN6A5oxV42uCqkxptUuSfd7Pct+1QNfGB1g==
-----END CERTIFICATE-----