Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d448fab-8a11-47ef-8c72-970de10d24b6.roa
File:                     0d448fab-8a11-47ef-8c72-970de10d24b6.roa (raw, json)
Hash identifier:          oFEZ53tNWMCAWfhcieVqXLUdnVw6ta8onX6gJ+d1XT4=
Subject key identifier:   5A:14:9B:AF:55:6A:87:42:72:F2:6E:8D:2A:98:BC:B4:97:48:7D:2D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       33FD62C2C14E5E16952FF6497B17EAEBBEA9165A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d448fab-8a11-47ef-8c72-970de10d24b6.roa
Signing time:             Mon 12 Aug 2024 00:00:00 +0000
ROA not before:           Mon 12 Aug 2024 00:00:00 +0000
ROA not after:            Mon 16 Sep 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fd:62:c2:c1:4e:5e:16:95:2f:f6:49:7b:17:ea:eb:be:a9:16:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 12 00:00:00 2024 GMT
            Not After : Sep 16 23:59:59 2024 GMT
        Subject: serialNumber=7a79b0ae2ae6ab0a0166507b5a6c8affe9415881bdf055bee788ca67ff200115, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:4c:07:e3:33:55:60:49:b5:58:7d:6e:eb:
                    00:99:8b:46:53:3a:a1:6e:e1:11:9b:b7:fe:bb:7f:
                    d9:ee:99:f6:6d:37:0f:8b:5b:9c:b2:fa:d0:af:54:
                    bf:67:16:e6:99:43:b4:00:a2:7b:a1:40:1a:44:d3:
                    09:75:3b:3c:78:9d:41:e9:4e:22:9b:bc:65:d6:58:
                    83:50:ec:fe:2e:97:d8:ff:0f:af:8f:d9:e4:63:ce:
                    c6:b1:aa:f5:e2:49:5b:83:64:ff:b1:bb:69:3f:2a:
                    c2:7b:b9:99:3d:b3:73:06:7b:a0:b0:18:8a:a2:ef:
                    81:26:75:c0:a8:64:9a:ba:b0:6b:7b:3b:99:ea:f6:
                    9b:69:2d:c1:bc:6e:69:9e:bf:9b:4d:a6:f0:28:fc:
                    43:b2:37:f0:53:30:45:43:09:a2:f1:63:fc:3f:48:
                    ed:0c:9d:94:2d:04:2c:c3:cd:ba:05:5d:2f:97:8e:
                    6c:1c:7b:1c:b2:1e:95:97:09:90:41:02:b8:97:35:
                    a7:41:32:29:7a:a9:8f:d8:0a:45:26:4f:b3:4b:3a:
                    b6:5a:2a:66:45:31:7d:d4:e6:fe:a9:53:c8:06:5b:
                    ae:89:2d:eb:51:bf:45:f5:31:ac:45:18:bf:de:a5:
                    57:8d:3e:25:d2:2a:b9:0b:a6:4e:6e:77:3f:8c:e6:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:14:9B:AF:55:6A:87:42:72:F2:6E:8D:2A:98:BC:B4:97:48:7D:2D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d448fab-8a11-47ef-8c72-970de10d24b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:ad:82:6c:56:ff:e4:7c:41:df:5a:3e:aa:aa:fb:11:28:2b:
         ee:ed:ab:45:b5:0e:75:08:b8:f6:4d:be:27:ca:64:de:b0:d7:
         74:36:45:87:67:27:02:eb:b5:20:cc:4f:c4:51:b4:af:67:27:
         d7:cf:00:d3:43:9d:02:34:15:0d:7f:7b:13:96:74:68:c4:77:
         4b:40:ee:9b:be:64:63:e3:ee:61:42:1a:ea:93:75:fe:e1:17:
         67:38:c7:01:cc:3d:80:a7:8e:66:88:7f:a0:41:3d:7d:e1:b6:
         c2:d7:fe:85:d4:bb:ce:37:cc:2d:11:67:56:2d:64:12:4e:94:
         54:78:58:0f:48:57:9d:83:ab:c4:74:6b:8f:21:c1:d0:dd:ed:
         39:ec:67:f9:15:dc:eb:99:32:57:58:27:eb:76:bc:9e:9a:eb:
         91:d8:31:74:bb:b2:69:2c:1d:14:f9:4d:15:e0:2e:5f:34:ab:
         ef:3a:43:83:6d:c8:23:5e:8e:c9:be:a5:82:49:99:06:4a:22:
         01:83:62:4b:4f:db:55:e4:c4:64:db:73:31:a5:9b:09:96:c6:
         57:ba:90:6c:c5:63:2a:c0:60:37:a1:7d:1f:74:af:e1:01:2f:
         37:b3:37:2d:aa:66:9a:d4:ec:38:9d:f6:8c:2a:20:47:91:e7:
         99:c2:bd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----