Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07e6aef0-78f3-407b-96e2-3cf69045d5b7.roa
File:                     07e6aef0-78f3-407b-96e2-3cf69045d5b7.roa (raw, json)
Hash identifier:          M/n8Xq3OPSWRG0n+cjuhRuqsZsuN6YYD0+SBjBCRkhs=
Subject key identifier:   93:61:B2:CA:5A:E2:2E:85:00:C1:32:B6:CC:7F:E7:34:51:A5:A1:4F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       093EDEEC3819A37DAA2482EC0A30FE1EA9E56DE2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07e6aef0-78f3-407b-96e2-3cf69045d5b7.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3e:de:ec:38:19:a3:7d:aa:24:82:ec:0a:30:fe:1e:a9:e5:6d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=6b8553ee0a33c14026fc53a0a9801e30dd447042159cfb84b01371b2c25696d5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ff:04:ba:1a:69:37:bf:c6:f5:b7:c5:bb:7f:
                    55:95:48:0e:52:1b:19:a9:13:28:61:1a:c3:8d:74:
                    e0:28:9b:98:0a:f0:be:e5:54:ca:36:f6:af:7f:c9:
                    5e:7a:82:08:6f:3b:42:51:b3:bf:37:37:89:20:d1:
                    be:c0:1c:01:1a:ae:29:a6:71:06:cd:86:5d:e2:a1:
                    f9:f9:27:38:e7:d9:fc:ac:9f:65:1c:24:69:f4:e0:
                    17:40:a5:da:ce:6e:d8:ae:ae:6c:fe:54:01:11:ef:
                    68:c7:ce:25:f8:08:d3:ce:1b:a7:7d:3b:89:f9:d9:
                    f4:57:49:1e:98:d5:eb:3b:e5:2b:ef:09:16:74:bb:
                    20:4d:c0:1a:31:48:f8:9f:5b:04:c6:84:0a:a2:de:
                    59:72:80:04:e7:1c:e2:dc:ef:05:9a:46:3b:69:0e:
                    93:2f:60:c4:43:e5:5c:e1:bd:ea:aa:2f:9b:64:eb:
                    55:95:e4:c4:35:d6:05:4f:b8:5a:a8:0e:f9:a7:3e:
                    02:22:c7:b8:3d:f5:08:d7:57:28:7d:90:99:95:a0:
                    7c:b2:5e:f8:ba:17:6e:19:3a:3a:a5:cd:45:18:18:
                    f4:5d:86:14:be:05:08:7b:34:2f:cf:0e:20:a7:3a:
                    44:5b:b9:d4:f0:66:fc:19:89:61:eb:55:1a:2d:74:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:61:B2:CA:5A:E2:2E:85:00:C1:32:B6:CC:7F:E7:34:51:A5:A1:4F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07e6aef0-78f3-407b-96e2-3cf69045d5b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:13:b1:9b:08:da:8c:fc:5b:f6:aa:c0:a3:46:f6:88:84:f3:
         50:2e:cf:16:6b:8d:f1:d0:25:0b:6d:a5:ea:34:f9:e5:36:32:
         54:eb:53:7c:d0:c7:95:d9:28:ff:21:c2:de:33:77:41:26:03:
         fc:69:ae:a3:c6:c2:cf:76:4c:73:c8:88:d4:97:b2:1b:92:dc:
         9b:31:78:73:42:bc:ec:0c:95:0d:fc:15:d1:0b:ea:6b:31:30:
         37:02:d2:66:71:fc:6b:fa:4e:90:b0:36:42:6b:1c:f3:ed:14:
         5d:5f:fa:c6:83:a8:13:93:00:e3:46:4c:78:56:54:a7:8b:c9:
         7c:b1:68:9b:a6:ca:ac:44:43:c2:ff:41:45:25:7d:17:d8:28:
         fe:5e:45:75:97:c9:2c:42:0d:a5:87:60:ae:36:71:31:d2:9e:
         97:32:53:a9:dd:66:6e:1b:b2:b9:e3:e4:e6:d0:02:f5:8a:eb:
         e4:ec:68:5d:10:9b:11:0d:6e:08:f8:3b:d3:a7:ba:e6:2b:18:
         f0:b2:72:c6:a9:dd:e5:51:85:01:03:c3:eb:52:62:af:f5:19:
         9a:f2:53:41:bd:e5:ad:d4:3f:33:9c:de:3b:0f:14:6d:be:6e:
         3a:63:b2:35:6d:e8:e8:88:21:c0:c4:7b:4e:4d:af:4f:90:30:
         0b:35:e9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----