Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/43182473-5629-4213-b7a6-c6e844d8eaae.roa
File:                     43182473-5629-4213-b7a6-c6e844d8eaae.roa (raw, json)
Hash identifier:          9EKN/GsrNnZ9+6LnVxrn0yGsS1Fa5dHup1EqLGSj4h8=
Subject key identifier:   39:D2:CF:C4:8D:6A:29:5C:B8:4B:4C:FF:E1:AE:98:8F:83:4D:79:AD
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       38C02412B8165B4083CDA16A3C38B80D1AF8DB29
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/43182473-5629-4213-b7a6-c6e844d8eaae.roa
Signing time:             Fri 12 Jul 2024 00:00:00 +0000
ROA not before:           Fri 12 Jul 2024 00:00:00 +0000
ROA not after:            Fri 16 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c0:24:12:b8:16:5b:40:83:cd:a1:6a:3c:38:b8:0d:1a:f8:db:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 12 00:00:00 2024 GMT
            Not After : Aug 16 23:59:59 2024 GMT
        Subject: serialNumber=07c4a10f7df9e66f48b7085d5cb4946049da42f8bef5ee6295462fc678409355, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:74:5f:c1:5f:c5:da:f7:c7:25:21:98:c3:
                    ec:83:ab:86:f3:6d:4f:92:1e:72:e3:b1:62:ce:87:
                    d3:f6:b9:70:64:9c:1b:f4:ef:9b:3a:3a:9f:aa:e4:
                    49:72:b5:2d:cb:b0:b3:ca:9c:b0:4d:a8:65:b1:57:
                    35:3a:4f:97:7f:3b:06:49:e7:eb:ca:0d:8e:c8:49:
                    2c:2a:35:d6:5c:b8:6e:4f:a0:a8:61:4e:3b:b8:93:
                    88:43:5c:00:c6:8d:8c:0c:2c:f0:2b:e3:16:59:a7:
                    11:60:f4:a9:87:8a:9d:ee:30:57:17:dc:da:da:22:
                    d4:e4:c7:1f:95:20:8a:25:1f:30:11:02:b9:f4:1e:
                    68:ad:5f:81:b6:f4:59:68:1d:87:a5:d3:8f:a3:aa:
                    70:68:64:7f:3a:c0:9c:b0:27:41:33:0b:e5:1f:4b:
                    c1:52:c3:c7:b3:de:83:b4:72:75:4a:8f:12:5b:77:
                    68:6b:81:ba:d8:5b:36:9c:ab:01:fb:d3:69:dc:da:
                    cd:8e:bf:a8:cf:b0:f1:ac:e1:67:95:56:07:7f:88:
                    61:60:82:91:94:e1:35:1b:cb:f9:8d:70:16:7b:fe:
                    71:16:d7:f1:6f:40:d3:73:0a:49:e3:86:7d:0e:5c:
                    d0:91:33:fd:2c:09:bc:cc:10:5d:93:9e:6f:df:43:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D2:CF:C4:8D:6A:29:5C:B8:4B:4C:FF:E1:AE:98:8F:83:4D:79:AD
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/43182473-5629-4213-b7a6-c6e844d8eaae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:09:cf:a6:ee:27:13:a8:f9:a5:5c:e2:ec:2e:e5:cf:2d:a1:
         41:f1:e3:ba:c0:48:2e:36:34:38:ba:08:6d:fe:7f:d3:3c:4b:
         6e:05:2d:de:74:7d:0d:5c:11:97:19:35:5c:50:e9:c7:44:43:
         17:1c:b9:55:6d:98:8b:6e:d8:0f:db:a3:9f:85:df:2f:66:2a:
         1a:f6:c9:48:74:8b:c1:a6:8d:77:06:81:f8:7a:4d:87:70:9f:
         ce:e4:04:e7:27:fe:60:5b:19:83:dd:39:f1:c1:ef:39:1b:e9:
         83:9b:b8:52:af:83:d3:11:b8:25:2a:74:66:d4:e7:0b:49:aa:
         88:97:9c:14:97:81:b6:78:01:1c:5d:ad:0c:c2:64:8c:b3:eb:
         c9:e1:a6:fc:93:28:4f:f0:27:2c:12:1e:15:c7:da:6f:5d:5d:
         18:eb:85:90:03:23:63:62:a0:f5:53:9b:aa:82:63:c4:14:bb:
         03:b3:4f:11:f3:a1:a7:f9:26:00:9d:d0:90:4b:dd:8a:63:d9:
         62:fb:1e:c6:98:c5:dd:05:aa:6b:31:14:f0:b8:0e:3a:17:5c:
         10:30:38:45:94:9a:49:2f:3b:8a:74:b7:1a:a4:b6:87:4b:e6:
         68:f8:d8:e8:ed:a1:3b:f3:79:e8:d3:3c:57:18:ba:02:42:9c:
         73:8e:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----