Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/219893fe-d2e9-4e7d-9e3d-54a63524d80e.roa
File:                     219893fe-d2e9-4e7d-9e3d-54a63524d80e.roa (raw, json)
Hash identifier:          fFWxO12Zt24bGUycoStIl8Tz+sDgdZFktQBTpv9B/J4=
Subject key identifier:   2B:3E:26:E5:2B:AC:D0:CB:8F:32:9B:8C:32:0B:ED:8C:C1:ED:6F:B1
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0E8E11AF37E6B93A0B953803EC3086C2336E5E60
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/219893fe-d2e9-4e7d-9e3d-54a63524d80e.roa
Signing time:             Tue 18 Mar 2025 11:58:16 +0000
ROA not before:           Tue 18 Mar 2025 11:58:16 +0000
ROA not after:            Tue 22 Apr 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8e:11:af:37:e6:b9:3a:0b:95:38:03:ec:30:86:c2:33:6e:5e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 18 11:58:16 2025 GMT
            Not After : Apr 22 23:59:59 2025 GMT
        Subject: serialNumber=31f3e34f8c66427be7b1ac311140e8b9e688991212cb0ede9ac8efdc425f6035, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:76:1d:19:50:e8:bf:79:f1:8d:af:30:3f:
                    ae:0f:4d:3e:77:03:6d:58:30:31:a6:d5:f8:03:34:
                    bb:0a:67:1a:0a:81:e4:ab:15:0c:54:69:5d:53:30:
                    66:bf:8a:bf:d3:1e:d5:7d:94:b2:83:f6:d5:b5:4c:
                    24:1d:81:59:7e:65:a7:fd:d3:8d:8d:1e:83:47:13:
                    dd:c3:99:07:38:6e:68:b6:3b:14:83:2b:b6:ef:71:
                    7a:1d:07:86:d0:78:26:49:2b:d4:a9:bb:66:ee:81:
                    08:3c:0f:47:cd:7d:67:5d:55:74:e0:68:f1:0a:00:
                    da:c8:18:0d:22:8d:a9:d8:b1:13:1c:0b:4c:ab:8c:
                    cf:0e:6e:fc:34:cb:8a:a9:bf:70:26:b3:36:41:3c:
                    be:75:6f:58:b5:a1:66:70:cc:be:84:80:ea:d5:de:
                    10:e3:ed:95:45:38:6e:58:9a:ae:a8:ef:55:67:ef:
                    4e:13:40:f9:b2:32:56:e1:72:c2:d5:68:ec:0b:de:
                    7f:c8:69:4b:60:bd:bf:f5:7a:51:71:ad:e6:58:6a:
                    34:6f:38:03:a1:e2:93:09:65:2b:d4:fd:5a:05:5b:
                    98:86:f8:a7:24:e6:69:25:2c:88:b8:5e:c7:36:6d:
                    aa:98:9b:a6:d0:d1:f9:f2:74:8c:6d:0d:a3:9b:a6:
                    c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3E:26:E5:2B:AC:D0:CB:8F:32:9B:8C:32:0B:ED:8C:C1:ED:6F:B1
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/219893fe-d2e9-4e7d-9e3d-54a63524d80e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:12:22:e5:cf:f4:bc:09:38:22:9e:79:93:69:a6:49:95:84:
         a2:43:01:f5:a2:47:11:f4:a2:db:73:bd:4e:0c:82:96:b8:c9:
         e2:0c:30:e5:5d:76:7b:d4:0d:a8:2d:d6:4a:8b:97:89:b7:7b:
         09:6d:74:11:1a:f6:84:fe:b0:68:83:ac:5f:5a:22:38:b1:0f:
         f2:16:ef:60:17:ff:4a:22:c4:80:0d:c5:d2:91:9c:40:6e:ca:
         76:b6:84:fa:6e:ed:c1:d9:6d:b5:d3:c6:03:9f:5c:be:ab:99:
         69:69:b5:14:17:57:fa:0a:bf:65:ca:36:08:6e:e8:b7:ec:6e:
         28:88:cc:cc:7b:31:83:50:3a:06:30:10:54:23:93:5e:aa:d1:
         36:e9:da:1a:43:5c:4b:7d:45:cf:9b:56:cf:44:57:01:88:fc:
         e4:bb:e1:f4:fd:5d:71:0c:6e:72:06:33:2b:6f:a4:94:fe:b5:
         a0:41:88:cd:03:bc:04:a9:7e:84:f9:9f:23:64:63:3f:76:28:
         24:f1:de:d3:12:1d:2f:f0:e5:d2:da:4b:88:e8:93:49:56:8b:
         36:c7:1f:09:5d:c8:b4:86:f3:1f:33:3d:d8:d7:c9:b9:4f:16:
         63:0a:29:a4:de:4c:0c:0f:f0:fe:e7:ec:b9:79:a4:56:05:bf:
         48:f1:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----