Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a55604f-f8b1-4ce4-b71f-df729174efec.roa
File:                     3a55604f-f8b1-4ce4-b71f-df729174efec.roa (raw, json)
Hash identifier:          cmAh7KUdmjHbNpiXbM1UnTI+rcWFz1SlMo/zidH0TaQ=
Subject key identifier:   74:C9:2E:49:46:A7:8F:25:D6:C1:E1:43:86:57:24:84:E2:65:43:50
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7E419653B672FD6ED1BF727AE2754D4733470BB5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a55604f-f8b1-4ce4-b71f-df729174efec.roa
Signing time:             Tue 19 Mar 2024 00:00:00 +0000
ROA not before:           Tue 19 Mar 2024 00:00:00 +0000
ROA not after:            Tue 23 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:41:96:53:b6:72:fd:6e:d1:bf:72:7a:e2:75:4d:47:33:47:0b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 19 00:00:00 2024 GMT
            Not After : Apr 23 23:59:59 2024 GMT
        Subject: serialNumber=869dceb0dc5ebca90a5c7e86cbcd2bec238a388ffe2ecbf441de931d74aff7b4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:25:ad:48:c3:76:5d:69:34:f9:45:b5:45:
                    4d:b3:35:a1:fe:5a:ca:23:50:ac:8b:95:c3:44:79:
                    cc:79:78:d7:0f:f6:77:7e:b0:0d:d5:aa:e0:df:1e:
                    5a:19:e8:6b:37:7a:24:48:00:f1:66:37:6d:8f:8a:
                    c5:3b:37:94:e4:8d:61:4d:b7:83:31:64:ef:73:df:
                    8f:56:41:39:1f:e0:77:cf:94:1d:3f:e3:95:38:8c:
                    58:03:fc:21:63:e6:75:d8:be:74:f6:ee:1f:b0:ec:
                    de:1c:b5:c9:00:1a:cc:bc:f3:6f:42:d2:12:f5:b5:
                    f1:42:1f:86:db:ca:65:2f:39:ef:42:24:b2:fa:b9:
                    ed:33:cf:b9:79:f9:4d:07:fe:f1:c9:9f:c6:fa:c9:
                    5e:8d:ba:0e:81:a5:c0:b7:d1:e4:22:f0:70:33:64:
                    be:a7:78:ec:de:f3:c0:69:e3:58:f8:3f:7b:a6:18:
                    97:9f:a3:6f:65:7e:60:83:b8:04:4d:6f:4f:42:32:
                    fe:62:d6:1d:81:aa:db:ee:2b:bd:46:b6:8a:9c:61:
                    fd:3c:c6:8a:df:6b:0b:e1:30:fd:69:19:df:72:d1:
                    43:7a:ad:47:1c:fe:b7:cb:58:d4:4d:73:cd:23:a2:
                    6c:b5:9f:26:67:56:91:10:4f:a2:a8:de:99:51:77:
                    55:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C9:2E:49:46:A7:8F:25:D6:C1:E1:43:86:57:24:84:E2:65:43:50
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a55604f-f8b1-4ce4-b71f-df729174efec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:ee:e7:32:2f:1c:c7:26:85:7c:f9:57:67:c4:da:22:45:44:
         1d:32:fa:c8:23:5f:43:7a:36:ab:66:76:92:96:ae:f4:a1:86:
         21:c6:fd:87:50:af:f7:04:aa:7b:96:c7:53:6c:8d:7e:c4:ca:
         c2:3a:c1:54:b1:17:7c:fc:6d:3c:ad:3f:cb:3f:71:24:ca:7a:
         6d:22:2f:f2:78:2b:44:c5:e6:d4:0f:04:44:05:50:ef:a1:16:
         d4:61:b0:ff:c0:df:00:dd:94:5c:69:72:60:46:d2:3c:15:91:
         8a:70:2e:3f:a0:b0:ab:bd:00:4e:55:66:2a:e1:4b:0b:c4:72:
         2e:12:94:b8:a7:fc:92:68:81:64:88:e0:c4:5c:46:f3:a7:76:
         ee:3e:27:87:ef:4c:dc:46:6d:98:5d:f9:06:02:2c:0d:dc:14:
         1c:aa:53:89:d6:35:73:53:73:9b:bb:1e:b6:d8:7b:d9:ed:6a:
         49:fb:e3:dd:db:6b:de:7d:5b:b4:bc:09:49:7a:02:98:9f:93:
         56:c6:70:e5:48:27:cd:a9:9f:f4:da:82:6f:4e:30:46:4c:7d:
         83:c7:47:86:21:b7:17:00:24:bd:19:98:3d:3d:f0:36:79:77:
         a4:05:95:3b:6c:d7:79:03:32:3d:c3:e7:58:ef:64:ad:1a:1a:
         9c:3f:3f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----