Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcb18923-2d39-4a89-83ae-b48736a572e4.roa
File:                     fcb18923-2d39-4a89-83ae-b48736a572e4.roa (raw, json)
Hash identifier:          gDOrGDQovn9bYAjSjdVXU6JrDF3fI2UMYZpmNZQsyjI=
Subject key identifier:   A1:F8:52:0C:6E:5F:68:7B:AC:99:DC:AB:1B:17:70:EE:F7:A7:C9:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6677990036D57C3E19040B7763616FE1B8294F83
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcb18923-2d39-4a89-83ae-b48736a572e4.roa
Signing time:             Fri 27 Dec 2024 00:00:00 +0000
ROA not before:           Fri 27 Dec 2024 00:00:00 +0000
ROA not after:            Fri 31 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        128.81.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:77:99:00:36:d5:7c:3e:19:04:0b:77:63:61:6f:e1:b8:29:4f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 27 00:00:00 2024 GMT
            Not After : Jan 31 23:59:59 2025 GMT
        Subject: serialNumber=9c22c5d45cd267269414cb443938c5172a5c336bd639b1957177820644705893, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:cf:50:63:96:8f:04:10:30:16:f9:ba:b6:
                    4b:4f:19:79:7d:96:13:ad:04:42:a3:5a:8e:80:ad:
                    34:86:11:46:82:01:0b:91:4a:c4:a7:18:de:44:1c:
                    9d:71:db:60:a9:8e:09:f1:b0:c2:34:57:a2:54:3a:
                    e0:77:9a:1e:42:f9:12:54:70:7e:b1:ef:32:64:91:
                    65:52:8c:ee:a7:66:f4:da:cc:d6:03:b3:b0:8d:db:
                    1f:44:8a:09:c5:cf:34:f3:52:73:74:f1:f7:fd:cd:
                    b5:81:67:76:ff:87:c3:73:91:ee:1e:25:70:aa:31:
                    98:96:e7:c3:03:b8:17:ad:f9:4e:ce:bb:e2:f5:19:
                    6f:22:e6:de:b3:df:23:fd:86:ff:7c:3e:ba:e2:b4:
                    01:ee:d2:51:8f:8e:7f:0b:a7:61:f5:f3:7c:63:9f:
                    80:1f:f8:f4:67:fe:af:05:fd:b1:af:37:cd:4d:69:
                    a9:ce:0a:89:d1:b2:b9:6f:ef:ee:42:ac:5f:fb:7f:
                    7b:fd:bf:4a:d1:6d:1c:c4:6f:b9:b9:6b:4b:e2:4f:
                    d4:8b:f4:a3:78:8b:4b:aa:1f:a4:73:3a:09:5b:94:
                    f3:da:5f:e1:48:f2:20:93:0f:d4:72:08:90:82:93:
                    88:a1:ec:e6:a4:bd:d6:d4:5f:7a:9e:0c:d6:9f:ff:
                    ac:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F8:52:0C:6E:5F:68:7B:AC:99:DC:AB:1B:17:70:EE:F7:A7:C9:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcb18923-2d39-4a89-83ae-b48736a572e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.81.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ba:b5:b4:ba:33:ad:3e:5b:0b:b3:67:e1:6c:9d:a8:ad:92:02:
         b4:a3:dc:e1:75:5e:3b:a8:95:f1:36:87:51:d0:d0:53:40:61:
         3b:74:ed:5f:dd:91:8c:56:aa:7a:d8:98:c9:bd:c9:ab:e4:ab:
         5a:04:a2:de:e0:d4:c0:49:3b:0c:37:f9:a8:75:0d:47:06:7d:
         af:0b:8c:87:14:17:93:c7:cc:68:e8:54:28:d7:f9:23:d0:3d:
         e7:67:6e:51:33:9e:6e:4c:f9:5b:ad:1b:12:46:54:4f:db:69:
         c4:4d:b5:57:df:0c:19:91:dc:3d:f7:f0:f4:a0:be:02:3c:f5:
         23:a4:2b:a5:29:85:68:38:68:82:c5:64:6d:0e:7c:b4:a0:6b:
         0c:59:84:7f:f5:38:ea:f5:2c:0d:58:51:59:18:c3:f6:44:b7:
         b6:40:4d:20:d2:94:0d:b7:e6:b1:6b:09:52:de:98:9d:be:84:
         0c:ad:bf:99:55:98:2f:6d:e2:35:b1:3d:e0:b6:61:1c:ff:9a:
         81:30:3a:93:5d:20:fd:ca:7e:4c:5b:80:76:03:c7:6a:3b:ea:
         30:37:94:ef:12:a3:81:12:59:69:ef:3f:60:49:55:de:f6:b8:
         7c:59:d5:72:d7:bb:6a:ac:e6:b6:09:fe:d2:e5:9a:f9:ed:96:
         f3:21:68:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----