Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/00227852-c87e-4bf3-8f42-0f3cde7fa0de.roa
File:                     00227852-c87e-4bf3-8f42-0f3cde7fa0de.roa (raw, json)
Hash identifier:          354wnUdgEQ/aSoCN2SlWiIgjltFlexNIxaXvKPrKnnw=
Subject key identifier:   6B:F2:35:D4:31:28:DE:7A:DF:F6:F9:B9:9E:87:49:6E:EC:1A:D4:36
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5CCCE38A3C6B4B7D596FF8C6D25240E181FB461C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/00227852-c87e-4bf3-8f42-0f3cde7fa0de.roa
Signing time:             Thu 17 Oct 2024 00:00:00 +0000
ROA not before:           Thu 17 Oct 2024 00:00:00 +0000
ROA not after:            Thu 21 Nov 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:cc:e3:8a:3c:6b:4b:7d:59:6f:f8:c6:d2:52:40:e1:81:fb:46:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 17 00:00:00 2024 GMT
            Not After : Nov 21 23:59:59 2024 GMT
        Subject: serialNumber=ab277e69aa4b7f025cd547fa4dc21cf7e863329e009987adfe0e9fbf0ce990a1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:e6:df:2d:83:35:9f:9f:fd:c8:d2:05:25:
                    80:b6:c0:d3:b2:d6:97:f2:74:f3:41:3a:ad:8e:01:
                    2e:63:57:8a:40:91:69:c9:c8:3c:13:f7:d3:b8:9e:
                    ed:5a:a9:c3:9a:1f:6c:3c:60:db:b0:1d:98:a4:42:
                    1f:ca:76:16:1b:1d:66:33:09:00:42:a1:9e:34:fd:
                    80:5f:15:32:04:00:a5:8b:32:78:ab:19:4c:e6:cf:
                    95:e6:06:62:9b:e5:81:0d:75:69:c0:20:6b:a3:c3:
                    82:3f:a4:de:c8:de:2e:d8:60:7b:71:20:11:7e:f2:
                    4a:85:9b:6a:e6:3f:6b:d6:ae:ff:2d:f3:e0:24:62:
                    41:33:0b:e8:79:ee:d3:00:20:48:0a:23:67:e2:4c:
                    47:41:6f:34:fa:23:11:7d:2f:bc:c2:29:60:a1:01:
                    29:59:64:9a:0b:bd:62:ce:f7:69:04:63:12:0f:3a:
                    26:9d:b0:f0:89:a0:9c:ac:c3:29:1a:9b:98:8c:9a:
                    23:1b:63:99:56:73:ca:54:93:6c:79:67:bd:ec:2d:
                    93:21:64:f2:44:98:8b:7b:76:6d:54:9c:7f:8a:fa:
                    3e:30:8f:d9:c7:95:61:59:46:eb:ed:2e:06:79:bf:
                    db:55:c7:94:2b:6d:77:8f:fc:1a:53:39:b8:a7:e5:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F2:35:D4:31:28:DE:7A:DF:F6:F9:B9:9E:87:49:6E:EC:1A:D4:36
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/00227852-c87e-4bf3-8f42-0f3cde7fa0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:32:60:a5:f3:bb:22:34:39:cd:e3:0a:9f:b4:34:2e:a6:6c:
         0e:54:00:ab:d9:28:d0:cc:ed:a1:f2:3c:d7:4c:31:b0:b1:10:
         16:3b:7b:9d:7f:1c:90:eb:2d:63:42:34:0d:4e:b9:00:cc:0b:
         36:c7:17:b6:16:65:c7:d6:c9:c4:31:b6:46:7a:6d:32:61:ca:
         a7:25:0f:85:31:41:ba:4e:f6:a0:94:1c:0b:08:07:dd:3d:1c:
         7f:50:7c:db:17:58:75:c0:35:33:52:c2:40:c9:bb:6a:a7:20:
         29:4c:d7:a3:ca:3a:82:0b:e1:3b:d5:1f:40:23:2d:72:92:d4:
         6f:38:ce:f5:1a:fb:20:91:33:0d:2b:4f:27:d5:9a:64:7a:32:
         51:a6:e2:60:d0:14:aa:c4:e2:1a:b7:b6:be:4f:70:f2:e9:cd:
         f6:b3:3c:3b:e8:37:52:72:eb:d3:17:64:a7:5b:ff:61:90:f9:
         01:9a:bd:68:5c:bb:98:b9:f1:c4:b8:d5:e9:63:95:22:42:9f:
         a2:eb:c1:8c:64:bd:d6:7a:60:e7:1a:e5:72:09:c7:d0:95:9d:
         68:76:16:b6:8d:69:38:c5:98:67:61:7f:f3:7e:ab:54:f8:a7:
         8c:0f:43:b2:65:81:35:0a:3d:0a:78:a6:60:5e:5c:7f:3e:4b:
         76:19:fe:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----