Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a48c4f0d-0c69-4755-9fde-fa820556c017.roa
File:                     a48c4f0d-0c69-4755-9fde-fa820556c017.roa (raw, json)
Hash identifier:          t8codkNanfCYysX//CK3AcIz6ebh2K3fvFeqcORdzBc=
Subject key identifier:   30:96:71:E3:32:F4:D8:0A:10:82:36:5D:D9:33:4D:DC:74:D3:A3:03
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2DF634A4D4172F3AF012E5988CA6ECA77A15EDAD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a48c4f0d-0c69-4755-9fde-fa820556c017.roa
Signing time:             Tue 17 Dec 2024 00:00:00 +0000
ROA not before:           Tue 17 Dec 2024 00:00:00 +0000
ROA not after:            Tue 21 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.248.0.0/14 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f6:34:a4:d4:17:2f:3a:f0:12:e5:98:8c:a6:ec:a7:7a:15:ed:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 17 00:00:00 2024 GMT
            Not After : Jan 21 23:59:59 2025 GMT
        Subject: serialNumber=e2494f99071efebbedb38128ecbd680ae506355fe0f053f5a9438a09122f17c6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:37:a6:4b:f5:e2:29:1b:b4:dd:c8:9e:85:
                    ab:6a:eb:d0:4e:67:be:7d:5c:ac:9d:63:4f:85:0e:
                    4e:d5:1d:4b:0f:f1:ba:d4:8f:6d:c2:51:2b:68:6e:
                    e8:3c:4b:c6:84:dc:b2:6f:cc:7a:17:0f:c8:6d:26:
                    2c:c2:39:1f:a0:0d:df:33:e8:79:f3:d6:2f:88:cc:
                    76:0b:60:a4:b5:43:97:d2:59:1e:db:76:76:1b:77:
                    f1:c0:8b:8c:29:39:61:a5:b0:2a:bd:13:34:e3:8c:
                    77:43:81:ac:89:b9:b9:2a:6b:2d:db:6b:ff:96:6d:
                    2b:4e:34:85:ea:71:dc:d2:a6:75:06:ad:5b:3f:46:
                    8a:37:ef:03:8a:16:57:be:75:51:89:97:4a:e0:8c:
                    31:95:79:8c:39:c7:5d:38:0f:94:70:a8:11:02:a0:
                    10:2f:07:6c:7b:28:0b:d1:f5:d8:72:cb:40:a2:55:
                    af:af:35:81:4c:94:39:39:63:66:18:4d:13:f5:c1:
                    3f:c3:3b:b2:a6:7e:0d:87:95:bc:aa:38:0c:d8:2a:
                    c8:51:bd:1e:1c:12:16:5b:0b:b0:da:4f:84:ec:56:
                    a3:19:52:01:e2:7c:dc:18:ff:51:a4:ad:3f:24:60:
                    dd:eb:e3:b1:08:70:5a:f3:8c:41:c3:9c:c5:60:50:
                    14:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:96:71:E3:32:F4:D8:0A:10:82:36:5D:D9:33:4D:DC:74:D3:A3:03
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a48c4f0d-0c69-4755-9fde-fa820556c017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         42:fb:21:73:e7:65:9d:e4:77:1f:e0:3e:aa:ba:2c:48:bc:39:
         a2:38:b9:13:0d:c3:ed:90:6a:f9:5e:4f:45:02:70:bc:f9:39:
         44:f3:c3:f6:fe:dc:57:48:ba:93:39:cf:72:c0:5c:f4:5f:04:
         fa:fb:67:51:51:de:50:5f:77:54:ec:77:81:b5:10:01:c1:8c:
         19:0b:b4:5c:4f:a8:59:19:95:6f:cf:69:30:1b:ce:1f:29:b6:
         73:24:2e:b2:bf:3b:21:bf:cc:4f:90:67:dc:93:c5:69:7c:eb:
         22:7d:45:84:8b:b4:92:3c:54:92:83:24:0d:c9:47:3c:9a:09:
         1f:b5:85:66:1b:34:0c:b8:c5:e9:97:75:fa:9f:e0:88:2c:31:
         ca:db:74:49:32:bb:d9:a5:9a:c6:5e:2d:1a:a6:2a:30:5a:4c:
         3f:f9:45:27:1b:6f:cd:ef:fc:ac:ed:5a:80:50:01:9f:98:99:
         d6:aa:d2:d1:94:d2:e7:b0:5e:e4:4c:f7:25:6c:50:7f:10:f9:
         43:38:8a:f7:bd:f3:9e:96:47:d8:0e:63:a7:5a:fa:94:9d:c9:
         25:b4:5e:8f:01:f5:78:08:5f:17:59:10:fe:43:20:ed:f1:9d:
         51:d8:15:2b:42:6a:f4:21:05:de:90:3b:1c:0f:a4:14:9e:c1:
         9f:d3:36:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----