Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/023498f6-18f6-4eed-8efc-e784052a1ebe.roa
File:                     023498f6-18f6-4eed-8efc-e784052a1ebe.roa (raw, json)
Hash identifier:          RwZPM1Jueb34T7XXqtqZP6sDN5sRxIAXxqPi5W9CDWU=
Subject key identifier:   9F:D8:FD:D9:12:53:2B:D9:24:F0:42:55:D6:9B:1F:05:B4:7B:A0:A0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       43C7C32089D1C946E38FDB445B62D1E8625B7709
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/023498f6-18f6-4eed-8efc-e784052a1ebe.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c7:c3:20:89:d1:c9:46:e3:8f:db:44:5b:62:d1:e8:62:5b:77:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=9daf53e81800a5c2438cc842d24a355bea6b66c645649589272fe7a5c580aeb1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:cb:7d:78:a7:e4:97:2b:85:33:bc:c7:23:
                    3e:23:fd:37:2e:06:0b:16:2a:04:a6:55:f9:b3:05:
                    69:d9:7d:7f:fc:de:da:d5:b6:81:dd:e7:ff:3a:be:
                    cc:65:04:b5:f3:fa:0c:94:cd:f7:a0:8a:0c:55:23:
                    10:77:52:7d:63:c0:7c:39:60:3e:1c:89:c3:fc:80:
                    0e:3e:74:46:ab:43:2b:81:b4:2d:4d:9a:f6:8c:5c:
                    24:2c:2f:12:85:09:3f:98:be:9b:45:79:0c:4b:90:
                    c8:9d:f3:f1:c7:b4:31:5c:7d:73:ed:36:69:28:18:
                    c9:ef:50:4f:e8:e6:81:e9:39:12:c5:46:2a:c5:ee:
                    ec:42:69:7f:67:b6:2e:31:70:a5:38:6f:57:5c:54:
                    4d:63:94:e9:f8:f1:2d:44:2d:05:65:e8:00:46:98:
                    47:58:15:d2:7c:c8:fe:d8:84:ca:df:90:da:1f:1b:
                    ea:9c:12:c1:d2:17:d1:7c:32:4b:91:4c:4d:78:9b:
                    e9:62:cc:24:39:b7:77:ef:d9:02:4a:b2:e8:2a:d2:
                    00:e4:94:08:37:db:ef:7d:50:a7:db:bf:b8:f0:ce:
                    f5:39:44:18:e5:84:0b:54:28:4c:ba:d0:7a:24:7c:
                    86:d8:bd:6a:20:b7:8f:9d:15:71:db:22:7b:1b:f7:
                    4f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D8:FD:D9:12:53:2B:D9:24:F0:42:55:D6:9B:1F:05:B4:7B:A0:A0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/023498f6-18f6-4eed-8efc-e784052a1ebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:a2:5c:99:53:04:be:a9:21:58:f6:20:9e:bb:fa:c1:09:
         88:2a:ef:4a:76:db:1b:e0:99:49:2f:a7:2c:e7:ea:7f:11:be:
         98:17:ad:7e:5d:eb:a9:12:67:0b:56:cc:a5:5a:ac:33:57:3f:
         71:47:ee:2b:76:09:4d:0f:aa:de:1c:31:a3:05:3b:39:76:66:
         db:73:97:9d:97:af:f4:af:75:89:9f:65:51:b5:8f:ae:bf:84:
         f9:02:16:4d:10:07:bf:35:ae:f9:f9:a8:6f:ae:cf:a8:03:ad:
         b4:7e:c3:b7:32:e5:27:ce:80:72:3f:69:59:ad:c7:89:b6:8b:
         f3:df:80:d9:0d:43:d0:7a:e6:8d:10:fa:dc:f2:e6:06:58:2c:
         cc:d3:95:80:58:c4:d6:63:49:72:43:21:03:29:3c:87:33:65:
         b6:a7:5e:d6:b1:e5:0f:10:2a:f5:68:f9:64:5d:f4:98:78:99:
         29:e2:60:f4:0f:64:7a:8a:e4:a1:c8:d7:c2:81:45:78:4f:2f:
         9f:b5:9d:a1:6e:15:26:00:39:b0:7a:95:fd:26:54:ad:90:2c:
         58:98:49:39:24:f5:1e:2d:c5:e4:86:86:b2:72:1f:03:7c:14:
         7b:43:dc:36:24:24:a2:2f:02:9c:75:06:f6:a7:18:34:aa:a3:
         3b:1f:f0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----