Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/38b11fd8-2c4a-49f8-b258-6294338bd651.roa
File:                     38b11fd8-2c4a-49f8-b258-6294338bd651.roa (raw, json)
Hash identifier:          beLoWL3m7sJkpIQE2dHGex3xjMITpH+UyBgrzA9AVKs=
Subject key identifier:   60:74:25:17:6B:0F:BC:C3:AB:75:59:05:DF:B5:E5:11:F1:F3:09:78
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       377C7766EF6F2A6B58F0B5A8D5EC565F1DAFDB19
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/38b11fd8-2c4a-49f8-b258-6294338bd651.roa
Signing time:             Tue 18 Jun 2024 00:00:00 +0000
ROA not before:           Tue 18 Jun 2024 00:00:00 +0000
ROA not after:            Tue 23 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7c:77:66:ef:6f:2a:6b:58:f0:b5:a8:d5:ec:56:5f:1d:af:db:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 18 00:00:00 2024 GMT
            Not After : Jul 23 23:59:59 2024 GMT
        Subject: serialNumber=abddd6465aa9191d706089f1a6a24da5aade974b186f8bc92d89d6ddb579c5b1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:10:df:9a:1e:35:ef:bf:79:f5:ae:1d:81:
                    01:b1:c4:9a:8f:5a:a2:62:cb:4a:61:c1:c1:6b:a6:
                    7e:c3:24:84:1d:f8:33:fa:37:95:df:84:c7:5a:5a:
                    99:cb:32:0d:78:65:42:27:dd:99:4f:82:d2:92:23:
                    df:48:30:c2:6a:2f:47:d2:63:90:0e:d1:75:30:9f:
                    e5:3d:2e:21:87:ac:ef:e6:4f:cc:9a:26:a6:f6:80:
                    3a:88:88:03:40:91:57:12:82:e5:b5:48:95:82:b7:
                    87:0b:68:2e:87:30:3a:52:7e:24:9c:9e:07:45:ad:
                    bf:4e:93:fb:8d:f4:cd:7f:d2:51:cb:a9:4a:04:2d:
                    d1:3e:a2:a3:ac:92:b5:73:4e:d7:4a:f9:2b:21:25:
                    01:b7:fa:4a:6b:0d:82:07:1e:0e:1a:37:c7:bd:7d:
                    75:90:ea:ae:38:84:ba:77:bd:12:fc:41:79:88:f5:
                    2b:e0:56:d1:52:87:bf:81:f9:e3:10:4b:f6:c6:63:
                    15:0f:2c:e2:77:f2:c8:bd:7d:ce:9d:af:4a:18:c1:
                    5e:5c:96:04:b6:ca:27:84:52:06:2e:0a:f4:3a:71:
                    ff:b1:f7:d2:94:f5:3e:93:83:7b:cc:86:c1:93:7f:
                    5d:1c:40:0b:f6:c4:cf:f0:3a:c6:08:d4:7a:02:0e:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:74:25:17:6B:0F:BC:C3:AB:75:59:05:DF:B5:E5:11:F1:F3:09:78
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/38b11fd8-2c4a-49f8-b258-6294338bd651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b5:66:ae:12:db:de:91:c3:41:7a:59:36:cd:b6:9a:82:35:
         df:77:75:40:b6:88:6d:13:36:f9:5e:3f:70:6f:d6:ae:b0:37:
         c3:be:1b:81:ec:a2:56:61:04:c5:09:e2:e1:f0:79:f5:76:48:
         fb:bb:50:01:51:65:1d:bd:23:20:cf:7b:17:03:e1:9a:a3:55:
         a8:be:9c:51:d3:bb:dc:64:ca:1d:6a:63:a4:b7:4b:09:7a:56:
         6d:ad:b9:cd:45:09:9b:81:8c:d2:cb:e1:e8:29:8b:20:3d:47:
         d8:30:b2:3e:4b:b9:c6:c7:5c:b2:c6:01:aa:f3:5e:61:19:3a:
         9c:1d:d4:69:a6:c6:58:21:69:e7:27:51:ae:0c:9f:d0:bb:91:
         e6:1a:2a:0a:3c:cf:ca:c6:58:bf:10:49:d6:e7:2c:27:87:f5:
         8a:c9:04:20:33:92:18:5f:47:6f:3c:51:09:7c:ca:2e:60:f7:
         ed:3f:22:e3:c6:c1:be:70:fc:a6:26:3a:7e:ae:37:42:b2:3f:
         96:5b:ff:42:e6:73:20:fa:b4:6c:2f:92:85:bb:65:86:ff:3b:
         ee:bb:3f:84:86:b9:cf:65:9e:db:31:27:6f:26:e7:19:95:8f:
         23:11:f6:cb:97:34:e3:ce:7f:a2:22:53:cf:65:7a:a0:9f:f4:
         b4:0c:b2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----