Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39e3d2a9-0fb6-48c1-a484-17da3f3a355b.roa
File:                     39e3d2a9-0fb6-48c1-a484-17da3f3a355b.roa (raw, json)
Hash identifier:          pmdHm23FuySVn8Gl30Fw2vltQxhPeuv45PZ0nguvaH0=
Subject key identifier:   C3:50:B5:82:51:14:3A:BC:8E:37:64:5C:42:CE:0E:64:A8:AA:16:6D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0BE5F0D65EC4828E6BF8597D3FD84111B351E4FB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39e3d2a9-0fb6-48c1-a484-17da3f3a355b.roa
Signing time:             Sat 24 Aug 2024 00:00:00 +0000
ROA not before:           Sat 24 Aug 2024 00:00:00 +0000
ROA not after:            Sat 28 Sep 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e5:f0:d6:5e:c4:82:8e:6b:f8:59:7d:3f:d8:41:11:b3:51:e4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 24 00:00:00 2024 GMT
            Not After : Sep 28 23:59:59 2024 GMT
        Subject: serialNumber=1d122179feac06acdc227cd6c11d74784c3caaebe224f8c08e848904cf1da753, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:0c:46:ab:ea:e3:ae:9d:77:b2:c7:ef:b7:
                    d8:ca:c6:c4:34:f4:74:10:66:99:7b:b5:0f:bb:86:
                    d1:57:cf:6f:13:7c:aa:5c:6d:8a:7b:ed:5f:2f:a5:
                    23:1f:53:3b:04:03:2d:8f:c5:52:3c:f7:8e:37:52:
                    41:c0:22:81:78:bb:06:9b:67:7b:a8:68:29:a9:9b:
                    b3:20:3e:b9:ae:90:e6:ee:19:21:a7:7f:f8:36:5e:
                    ca:8d:57:40:7e:d5:c1:c6:97:8f:22:e1:b6:c4:5d:
                    34:00:88:e1:1a:6e:68:87:7f:e5:65:48:dc:a4:95:
                    5b:37:23:0a:33:47:83:28:5c:19:36:8e:53:09:91:
                    ae:46:2f:41:9c:7d:45:60:da:41:7b:a5:a7:b4:3d:
                    bd:34:f3:ba:fd:c8:c7:be:10:0b:ca:32:80:23:47:
                    96:7b:90:e3:b8:eb:aa:8b:bb:a3:7b:4a:1d:86:72:
                    98:7c:9a:fc:a2:8e:e4:2c:8b:a9:2c:e9:fd:d0:96:
                    ad:18:43:1b:7f:3d:e6:c4:12:11:4d:6b:8c:d3:69:
                    c0:68:da:67:e2:3b:92:41:1b:bd:08:7c:57:b6:02:
                    d1:1f:65:20:18:56:8f:9b:55:93:2d:0c:09:59:08:
                    13:40:47:2e:d4:11:d9:2d:31:8e:da:8d:01:78:76:
                    3b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:50:B5:82:51:14:3A:BC:8E:37:64:5C:42:CE:0E:64:A8:AA:16:6D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39e3d2a9-0fb6-48c1-a484-17da3f3a355b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b0:a7:f8:38:cb:8a:25:d1:03:34:0c:96:c3:f6:46:e5:bd:
         28:e2:2e:32:d0:cd:22:97:71:ab:85:f0:f3:fd:fc:94:3d:56:
         8e:e4:23:79:7e:e0:3e:f9:ff:fa:4d:32:b4:70:b8:98:93:07:
         53:59:1c:0e:17:fa:06:e2:1a:c9:84:13:8b:42:49:f8:8c:c5:
         74:b7:2b:6f:75:29:f9:df:af:b7:e2:f7:f3:35:d3:01:7f:a6:
         15:50:b3:54:e8:e6:7f:d0:87:d0:e6:a1:3d:0f:0d:c2:11:71:
         7c:1d:ca:a9:b5:6e:cc:f6:cf:db:55:dc:6c:9f:6a:c5:54:ee:
         ed:d5:2b:e0:29:ae:13:13:3e:6c:ab:32:92:7e:47:e7:dc:e4:
         3e:04:14:c6:d0:8c:db:da:db:76:05:5e:57:da:ed:c1:e5:a1:
         11:17:55:2f:8a:70:ef:60:dc:6f:0c:8e:e3:5e:9f:45:ca:da:
         b5:4f:3a:14:19:2d:5e:6c:9a:60:8b:1a:11:f8:dc:56:ee:e2:
         d0:c2:dc:5f:ba:9e:0e:27:30:94:2a:b4:5a:6a:c7:4e:dd:ec:
         27:c1:7d:4a:00:88:78:2b:de:92:46:58:85:31:dd:cc:f7:5c:
         ce:f9:3a:0d:e5:dc:ac:0d:39:2e:d0:16:41:6e:0d:3a:9f:ba:
         1b:d7:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----