Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a38622f8-5fb2-4f4a-95ef-57202780478d.roa
File:                     a38622f8-5fb2-4f4a-95ef-57202780478d.roa (raw, json)
Hash identifier:          wg7l1eHYqBpJ8STE6F3L9HbVeT4DmrarZVfHfPtzE1U=
Subject key identifier:   DF:6C:F4:C6:D6:72:D3:7D:C7:7A:DD:CD:9F:BF:B4:45:66:AB:57:E9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0678432357A2177E60B7FE414D97920A35111A8E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a38622f8-5fb2-4f4a-95ef-57202780478d.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        15.170.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:78:43:23:57:a2:17:7e:60:b7:fe:41:4d:97:92:0a:35:11:1a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=36b0e8eecaf6d1e087b6098766bc99b54791af6ccb376c99b9500cd513f0b25e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:97:93:d1:68:33:ee:ea:af:5c:f6:c9:fc:69:
                    f1:23:31:63:ef:97:5c:16:54:c0:9e:f7:8a:fb:49:
                    1a:e0:fa:59:29:57:cd:8c:7a:38:bc:b9:6e:44:ed:
                    75:1b:ec:c3:5a:1f:25:13:e6:bc:dd:55:5c:6d:29:
                    58:92:7b:e2:06:da:db:00:f8:b0:a0:5f:be:2f:23:
                    5f:de:4b:68:a8:d1:08:81:48:98:20:52:d5:d1:be:
                    b8:6b:e6:70:56:a3:16:48:4a:62:8d:fd:59:2b:0d:
                    2b:b6:a9:cb:73:ea:53:50:cf:a6:31:3b:9d:6d:88:
                    e5:bf:26:96:ab:8e:93:42:e3:11:d2:15:a0:bd:79:
                    4d:1b:fb:50:a8:71:98:d5:d7:cb:f7:00:f3:aa:03:
                    62:20:11:1d:29:2c:4a:f5:46:cc:b9:ed:93:77:43:
                    c1:00:51:68:b6:1e:26:43:18:b3:63:c8:e9:3f:40:
                    ce:33:e2:c5:f0:54:b3:64:ec:b3:08:d0:95:a9:09:
                    3e:bb:da:6a:8e:24:c8:a4:64:ec:b3:d0:30:de:c3:
                    0c:29:70:93:d2:82:be:0f:f2:d8:aa:83:fc:3c:72:
                    8f:80:d7:31:f9:e0:a0:7c:32:69:03:bd:bc:10:77:
                    3f:f2:7f:14:71:0c:5f:9e:c8:de:81:40:e0:5a:4b:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6C:F4:C6:D6:72:D3:7D:C7:7A:DD:CD:9F:BF:B4:45:66:AB:57:E9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a38622f8-5fb2-4f4a-95ef-57202780478d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.170.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:51:de:e1:68:11:dc:c1:df:6b:14:7e:02:31:4d:99:9e:
         12:54:6e:5c:da:ee:fe:57:e1:ce:92:d1:60:e2:cd:b2:e2:94:
         4f:5d:b6:af:db:25:3f:c3:73:ab:ca:02:f7:83:6a:68:b0:0a:
         30:9f:8a:97:1d:d0:55:df:40:ee:8e:d2:b0:11:6f:59:9b:98:
         2d:41:57:90:c7:f8:f2:86:42:bf:58:d1:37:35:7f:bd:ad:fc:
         09:7a:69:38:9e:67:3e:e4:39:cf:5e:5a:2e:17:a9:89:90:67:
         e1:04:86:1e:ae:49:ba:3c:d8:42:66:e0:a8:4c:77:7a:bf:0a:
         ff:27:fe:ca:fe:d9:04:9e:28:b5:9d:98:49:7e:74:1f:3a:d4:
         00:b8:cd:d3:8d:40:6d:c3:13:c8:de:e6:e9:da:a3:e1:75:58:
         a5:8d:f3:0b:93:e9:b1:13:2e:58:48:66:e7:2a:b6:88:ce:a1:
         0d:b4:48:36:df:8d:cc:5b:b2:b4:b5:4d:3f:c8:79:38:bd:90:
         93:09:46:4c:1a:0a:8a:be:a7:72:06:a9:5a:a2:74:67:d7:ff:
         ef:d5:3a:9f:ea:5b:04:57:6d:73:a5:b8:c9:af:49:0e:29:ac:
         32:14:a3:0b:a1:74:08:18:ab:3c:36:0b:29:cb:61:85:9a:c5:
         74:ca:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----