Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abd004bc-1430-4d7b-b483-9e6866e7ff14.roa
File:                     abd004bc-1430-4d7b-b483-9e6866e7ff14.roa (raw, json)
Hash identifier:          2dCl617IqF9FvpMzNbJjnxEzJ0m5TU+XfIBwJc+FmrI=
Subject key identifier:   D9:7E:46:BD:03:97:45:AA:30:0A:68:27:56:FA:06:E1:3A:13:1D:80
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       204091A2A1F87E13EBC6C358D73F16A7795F783C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abd004bc-1430-4d7b-b483-9e6866e7ff14.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        13.244.0.0/14 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:40:91:a2:a1:f8:7e:13:eb:c6:c3:58:d7:3f:16:a7:79:5f:78:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=38e04b16350ff44bcf12a1fe1908370dd4e08299da17e52ce16c20fc11e33752, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:d4:54:10:02:56:c8:6b:e9:53:62:b3:b9:
                    31:d3:65:d5:08:7b:27:b5:7e:3c:89:43:91:38:13:
                    0f:35:76:08:49:b0:c8:82:56:c2:17:94:75:d6:47:
                    50:fc:f7:94:d9:78:e1:ac:1a:85:93:55:51:20:13:
                    0b:4d:81:33:50:e3:8e:78:b1:8c:3f:b3:dc:a7:4a:
                    88:3f:0d:3f:ea:66:5c:53:ec:d2:d4:ec:c9:f0:74:
                    48:74:47:b1:4c:ab:55:2a:0f:f1:bf:cb:b5:d1:0d:
                    de:2d:23:4d:ae:19:28:4c:4a:b6:56:f0:70:02:52:
                    46:17:bf:c1:a6:7a:42:df:c2:3c:f0:e6:60:a8:b4:
                    a5:8d:2e:72:df:86:da:43:9e:f1:06:94:a0:51:b3:
                    91:07:3d:4b:8a:e0:bc:d4:bb:97:9b:0e:21:b9:31:
                    c1:73:47:c4:cc:f8:6a:a4:52:af:7c:1f:9e:5f:a4:
                    1a:30:15:23:6b:b3:cb:68:b1:6b:27:66:ef:24:bc:
                    c3:b2:b3:d7:51:66:5f:9f:b6:84:1c:bd:84:00:09:
                    7f:33:52:8c:65:6f:dc:e2:86:76:1d:43:f3:95:d9:
                    c8:b4:37:8c:a8:38:88:fb:a9:fc:95:01:cd:8e:ce:
                    22:3f:20:47:f3:25:8b:06:c7:24:ad:36:52:39:5f:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7E:46:BD:03:97:45:AA:30:0A:68:27:56:FA:06:E1:3A:13:1D:80
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abd004bc-1430-4d7b-b483-9e6866e7ff14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.244.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         7e:6a:aa:3f:09:8e:ae:35:8f:03:6a:b3:43:62:3b:36:03:ca:
         62:3b:05:94:06:a5:33:63:96:15:bf:bf:2e:03:e4:79:94:4e:
         2c:49:21:e7:77:0d:29:91:85:27:9f:24:95:c3:6a:a0:20:5f:
         2f:7a:fa:e5:2c:ad:23:62:d0:e6:ca:84:7f:fd:21:29:1a:dc:
         58:a0:3b:6e:a5:68:71:e7:4c:aa:59:e2:37:8f:99:12:96:d1:
         64:b8:d9:64:c7:f8:6d:c0:7b:b2:bf:88:66:a5:0f:2e:27:b2:
         f7:ae:72:bc:5c:d9:43:38:89:f9:88:13:61:36:c0:88:22:c9:
         c4:5a:6b:34:1c:70:96:f2:25:a4:44:e5:03:01:56:c7:7f:23:
         ec:a0:63:ce:6d:73:85:6a:fb:f5:28:97:41:68:70:d6:bf:b9:
         eb:cd:41:cd:b9:14:84:7f:6e:53:f3:e8:e0:8f:07:4f:62:70:
         87:f4:d9:e8:54:f8:b4:64:16:eb:46:5d:52:39:95:67:3f:d4:
         07:ba:b1:e7:8c:00:a7:d4:7b:12:a9:64:de:e0:1c:e2:33:c6:
         ee:bb:d2:5b:27:3d:61:32:17:8b:29:3a:37:c0:58:17:27:f2:
         18:d2:aa:da:81:b5:05:51:dd:ab:92:bc:4e:d1:d6:5d:d5:1b:
         eb:3e:60:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----