Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f60a5ce7-5b9d-40b2-b2ef-19c356b6965b.roa
File:                     f60a5ce7-5b9d-40b2-b2ef-19c356b6965b.roa (raw, json)
Hash identifier:          yaooqz+7C3jpmc0HeVQ4OMS69O+qqHmKwMnKTKdBqMM=
Subject key identifier:   25:D5:88:91:25:7E:A0:A3:FF:53:49:5B:BD:BE:C7:70:69:58:38:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       396D830E3328080C1616048D3C689A9A52981A53
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f60a5ce7-5b9d-40b2-b2ef-19c356b6965b.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        202.147.64.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6d:83:0e:33:28:08:0c:16:16:04:8d:3c:68:9a:9a:52:98:1a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=9e9c3319bea349c1d240ae2e4c39c832f6ec491a6946e1703355bb7b8bd048bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cd:ba:7e:2d:d7:9e:51:50:8c:b8:40:55:ff:
                    d5:d2:ce:18:35:0a:41:66:12:08:d0:c3:be:7d:1f:
                    d7:69:95:85:f1:bd:60:70:ec:52:28:32:1b:07:fa:
                    19:14:b5:83:3e:ec:64:8d:d5:74:ac:00:e2:78:44:
                    15:ac:10:6b:59:66:d8:0c:cb:04:c9:00:91:2c:2d:
                    aa:cb:d5:4d:b6:83:7f:6f:7d:f5:3f:9e:1a:c6:1e:
                    71:12:ca:cb:1d:4c:50:8e:f5:24:e4:3b:f7:ed:ef:
                    8b:7c:eb:2d:19:05:69:0c:4e:2e:fd:9e:55:84:47:
                    f4:12:92:50:aa:f7:49:3e:73:89:31:71:84:e5:eb:
                    c8:86:4f:98:8e:69:3f:71:ab:63:37:1c:ba:65:6e:
                    20:0e:e5:e6:3a:e0:59:37:4c:c1:e4:31:8b:b3:0f:
                    df:12:ec:23:0f:f7:5a:da:42:24:8e:04:70:c6:04:
                    ab:b6:35:6b:44:39:dd:4c:e7:05:a8:7e:bc:da:61:
                    5f:18:0f:cd:be:03:06:4b:43:78:58:ca:dc:1e:98:
                    cc:98:d5:bf:09:77:e4:11:ab:f0:62:bb:7f:87:2a:
                    cd:6e:8a:3b:71:ab:53:2d:ff:8a:56:2e:27:82:53:
                    25:50:f6:f0:91:6b:e6:77:cb:01:12:e3:55:5f:da:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D5:88:91:25:7E:A0:A3:FF:53:49:5B:BD:BE:C7:70:69:58:38:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f60a5ce7-5b9d-40b2-b2ef-19c356b6965b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.147.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:d8:d2:69:e1:f1:6e:ee:64:08:b1:ef:2d:71:11:c8:22:4b:
         d1:16:85:bb:0e:59:48:79:48:7d:ca:33:5b:49:f5:28:91:74:
         36:f1:0a:eb:9c:4b:f8:9b:dc:9b:58:bd:88:d1:58:86:92:3e:
         27:fd:59:60:5a:8c:b6:a6:76:53:80:0a:e9:21:fc:e0:be:9c:
         f6:8f:fb:fa:0c:2b:7e:f1:9a:4d:e6:00:91:ae:25:8d:0d:71:
         e7:81:62:4d:82:63:45:d0:01:e6:9c:ec:a8:43:57:25:8b:dc:
         62:b2:f4:9a:f1:04:c0:cc:d7:dd:89:46:c4:8a:70:79:0c:2b:
         9e:cc:a5:7a:46:35:72:31:39:9b:97:38:ea:20:5e:49:d0:0b:
         a1:63:fd:a5:0b:93:0a:a0:15:2d:3b:a1:97:70:86:4f:4e:9c:
         88:71:65:6a:90:99:11:13:ab:7f:44:cf:00:19:a8:67:64:6d:
         59:ab:2e:98:75:17:dc:49:b7:70:a7:a3:a8:4e:44:c2:a5:76:
         4c:5c:bb:f6:45:d5:3c:8b:bc:41:14:60:48:9d:35:85:bc:f5:
         74:6d:b2:3c:aa:07:d3:38:5c:4b:ad:1b:c0:04:2e:1c:c5:3f:
         b0:34:79:cd:74:20:04:d3:60:97:01:fa:54:ca:40:34:fe:b5:
         f0:0e:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----