Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d445e728-d44c-4756-b75c-84a184a73fca.roa
File:                     d445e728-d44c-4756-b75c-84a184a73fca.roa (raw, json)
Hash identifier:          Bs1HxmrdmsCjpxWxXaEvN+2bIaxoEuibwkoVKalf4M0=
Subject key identifier:   CE:95:68:1B:FC:EF:AE:03:5A:DD:63:0F:13:C6:A1:BD:B1:20:EE:41
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       651D31AFF5A59BDECB0DD89E207BB3FB6A3DCEA7
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d445e728-d44c-4756-b75c-84a184a73fca.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2606:f40::/32 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1d:31:af:f5:a5:9b:de:cb:0d:d8:9e:20:7b:b3:fb:6a:3d:ce:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=064ead5835b9a34e4617b267c5aeb6e21ae776980950565c3c3d6bfabadfc550, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:79:0c:ec:1a:75:e7:3c:b9:f0:9f:b9:11:13:
                    b9:23:ad:8e:bf:6a:4e:a1:cf:84:f3:84:37:3c:e5:
                    5d:86:b0:f9:fa:54:ab:da:99:67:f7:67:6a:0a:a9:
                    d8:ae:52:a4:53:5b:1b:17:2f:09:cd:d3:58:b5:a0:
                    19:54:c3:4e:1b:5e:32:98:69:fb:b5:8d:fb:8d:ff:
                    35:6f:da:5e:2b:fd:9a:57:e0:14:0b:4f:99:83:2c:
                    0d:6f:85:05:57:3f:b8:e3:29:1d:83:d0:71:47:75:
                    82:bb:d5:81:f5:96:7d:cf:bc:11:5c:85:b4:10:0c:
                    77:9c:de:32:b3:f6:7e:79:45:28:c7:45:9d:1a:b9:
                    67:e1:f3:2b:c0:b1:02:9e:be:c7:c5:0d:d0:cb:fa:
                    e4:e7:37:bc:cf:8c:2c:79:2a:9c:8e:e8:77:31:a6:
                    70:67:f0:93:be:a7:c1:de:80:a3:c5:b2:d9:9e:9e:
                    20:0b:d9:74:d4:3a:6d:a3:3b:62:3f:1e:42:14:17:
                    15:2a:59:ec:c6:fa:a4:0f:a8:7b:98:c2:af:1d:e6:
                    b5:6c:e1:47:c2:e3:be:df:69:5d:13:07:58:67:d2:
                    ed:4e:71:dd:bd:14:7f:cd:a4:55:42:86:1b:4b:ab:
                    ed:7d:95:fb:de:97:83:fa:2b:23:c5:5a:0c:47:64:
                    69:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:95:68:1B:FC:EF:AE:03:5A:DD:63:0F:13:C6:A1:BD:B1:20:EE:41
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d445e728-d44c-4756-b75c-84a184a73fca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:98:f9:b2:f4:a6:f8:37:7e:86:dd:05:46:c9:97:77:e0:db:
         64:41:29:82:a3:17:4a:64:01:0a:b8:75:cd:54:22:57:f4:b3:
         6e:1a:e7:9f:d4:38:9e:6d:a8:1e:e8:fb:60:5d:91:a2:95:4f:
         dc:a9:7a:d4:0d:ac:d1:e2:61:bd:7a:81:46:84:b8:5f:c7:6c:
         5b:cc:03:5f:84:25:e5:88:9d:75:97:5b:86:f4:6c:b7:3b:79:
         a2:20:c3:3b:00:bd:35:ec:b9:52:92:62:69:d8:db:01:61:aa:
         1a:b6:51:28:3d:d8:1b:aa:8c:dc:e2:e7:1a:87:bb:08:be:50:
         80:74:c2:98:c8:e3:a8:bd:87:e6:e2:46:57:fb:c0:94:4f:e6:
         9b:4e:ac:da:d0:77:b0:b5:b6:7f:1b:9f:66:3e:8f:c6:32:ed:
         4c:70:48:aa:f0:a3:aa:3e:b5:50:ee:e4:55:00:42:67:a6:fd:
         89:9c:e6:e1:6a:30:51:e8:78:02:bd:66:4d:2c:33:96:67:74:
         85:c2:b6:4a:5a:4f:31:9e:24:f6:b6:00:90:51:c6:7f:42:e5:
         35:51:41:52:0a:8a:ad:de:83:0e:39:8e:22:40:5a:dd:c3:61:
         6d:a7:5d:bc:78:90:24:98:8e:1f:73:01:d1:99:10:4a:67:fe:
         47:8d:79:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----