Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/299e63b2-d839-42d5-aeaf-bbef2b608cd9.roa
File:                     299e63b2-d839-42d5-aeaf-bbef2b608cd9.roa (raw, json)
Hash identifier:          kistKlxx/IPW5bTXPr95kqRPGuD4RMutHeJtz3X9GcQ=
Subject key identifier:   55:FD:B0:71:68:3B:3A:79:DF:29:F6:C9:F2:5F:BE:32:4F:47:A5:36
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7577E19081FB34B181061723BB514DE1733C1E00
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/299e63b2-d839-42d5-aeaf-bbef2b608cd9.roa
Signing time:             Mon 26 Aug 2024 00:00:00 +0000
ROA not before:           Mon 26 Aug 2024 00:00:00 +0000
ROA not after:            Mon 30 Sep 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:77:e1:90:81:fb:34:b1:81:06:17:23:bb:51:4d:e1:73:3c:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 26 00:00:00 2024 GMT
            Not After : Sep 30 23:59:59 2024 GMT
        Subject: serialNumber=8b97b7903840ad9b2f3208dbab4a79e885324889953dff4c13842fd23d8e28a7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:9d:50:bd:2d:30:44:ba:b0:99:93:67:da:
                    38:bc:76:78:06:e1:46:76:a2:8b:1c:62:84:df:7c:
                    50:e9:8f:51:2e:6f:a8:8c:7c:84:4d:15:54:95:78:
                    94:85:d9:48:67:92:e5:17:2f:92:c0:d9:4f:77:51:
                    19:1e:6e:05:c4:e7:10:4b:60:7b:48:3b:34:80:3d:
                    b4:3c:a9:df:8b:f2:5f:77:d6:a0:93:9b:e8:ae:7f:
                    ca:22:9a:c4:a0:df:71:c6:74:cd:23:47:c8:33:67:
                    5f:6a:93:b5:6a:33:1c:a1:ad:0d:3d:70:93:c1:c8:
                    c9:47:42:40:29:1b:05:6a:cd:2c:6d:69:08:96:b5:
                    b2:83:3b:bd:67:84:07:97:d7:3b:06:ff:f3:e9:5f:
                    7c:ae:bc:fb:30:34:8e:07:13:78:e9:1f:e6:db:48:
                    42:90:b7:91:26:1d:ac:63:c6:d6:e1:f3:97:42:21:
                    4d:09:da:00:c0:af:a3:80:b4:09:f5:f6:fe:dd:5c:
                    06:b3:5b:0d:b0:79:da:e5:9b:37:f5:06:3b:75:a7:
                    f0:1b:61:72:78:ed:7e:50:1e:75:96:a1:76:49:6e:
                    15:20:68:b7:3d:ce:51:8a:f5:16:f6:df:67:f6:e7:
                    d8:a0:2d:10:4f:cf:28:e5:79:09:8c:b1:43:51:9a:
                    3d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FD:B0:71:68:3B:3A:79:DF:29:F6:C9:F2:5F:BE:32:4F:47:A5:36
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/299e63b2-d839-42d5-aeaf-bbef2b608cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:b8:98:00:60:69:f8:2d:79:08:42:eb:d1:2e:bd:82:d2:
         0d:d2:9a:19:85:3c:97:4a:e0:d7:c2:f1:af:a1:70:d1:e6:e8:
         75:4f:9e:6e:de:f6:de:74:30:94:f8:47:37:c4:cb:2b:b0:70:
         34:69:a8:4f:18:c3:f9:22:19:1d:ec:99:5d:f4:f9:f4:ac:1b:
         41:c8:78:da:62:46:75:84:05:34:1b:81:dd:59:21:3e:de:00:
         c9:54:ad:8e:2b:4f:91:6a:c7:c1:bd:ee:4e:98:f2:7e:cb:30:
         11:79:37:8a:d8:65:c6:18:12:49:34:fd:9f:01:95:76:42:b2:
         a1:ad:47:db:fe:c4:93:17:d3:64:ae:b7:39:f5:e3:f9:5a:ec:
         fd:01:fb:a4:51:50:08:24:35:38:4b:61:93:34:8b:54:43:c5:
         70:56:80:a3:68:59:9d:8d:80:18:da:cc:88:da:bc:0d:2f:1c:
         ed:7b:06:97:e8:e6:cd:cd:27:fc:a7:7c:3b:bf:37:7b:7d:fa:
         69:9e:ad:2e:c3:e3:47:c1:fa:28:19:76:b4:e8:5a:10:79:8e:
         f5:2c:cb:d7:92:e8:05:f6:8a:10:6e:1d:ca:d1:8a:28:0d:e1:
         78:41:9e:ae:69:72:77:2d:7e:23:f3:b0:a8:ee:c5:c2:f1:6d:
         e4:08:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----