Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58c86d76-a6b5-4057-9e4b-0d8f9e6f274e.roa
File:                     58c86d76-a6b5-4057-9e4b-0d8f9e6f274e.roa (raw, json)
Hash identifier:          dObft3W99pfy3It4qU5fOUqdAc36TLmaJDogiUQvr8o=
Subject key identifier:   35:45:16:A8:C1:E4:47:28:6B:4A:FB:C0:2C:37:AF:52:AC:67:28:74
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1A1B55AA8B63F3D1CD63543CC62FB36C2240D9E1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58c86d76-a6b5-4057-9e4b-0d8f9e6f274e.roa
Signing time:             Wed 20 Mar 2024 00:00:00 +0000
ROA not before:           Wed 20 Mar 2024 00:00:00 +0000
ROA not after:            Wed 24 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1b:55:aa:8b:63:f3:d1:cd:63:54:3c:c6:2f:b3:6c:22:40:d9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 20 00:00:00 2024 GMT
            Not After : Apr 24 23:59:59 2024 GMT
        Subject: serialNumber=d938a65cd85896f99c07611b5176f3553713766ca72de385cfdb1ce8711c5dec, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:1a:90:3e:de:e4:11:9f:25:a8:60:1c:81:
                    d5:3e:d2:40:9e:4d:16:90:b8:a3:ee:60:6e:8f:db:
                    ae:ed:28:3d:dc:6a:4a:9d:7d:f5:b2:fe:12:66:97:
                    0e:c8:4b:f6:78:a8:5d:f8:9a:57:75:8d:9b:eb:21:
                    55:2a:c2:15:ee:5d:b1:1d:23:69:82:40:96:e8:03:
                    51:c3:23:9e:a8:f6:43:33:aa:d6:5f:3e:ad:9f:f3:
                    95:7d:57:9c:63:77:23:b6:c8:03:19:ac:5b:39:f8:
                    17:96:06:fe:6b:02:56:33:3d:6b:1a:9c:94:8d:0f:
                    92:75:d8:0e:0e:cf:f4:4e:8b:02:9a:c9:aa:8c:d5:
                    7f:a8:fd:18:8f:70:18:58:97:67:b6:fa:d2:49:9d:
                    00:1c:5a:73:83:6e:33:75:11:95:c7:44:22:73:27:
                    1e:65:61:8e:90:77:67:b1:d1:e5:3c:fa:de:b0:1c:
                    54:55:f1:b1:6f:9c:68:9e:fc:6c:c0:26:ac:cc:ea:
                    2c:40:fe:99:c9:8f:dc:70:6f:3d:61:df:cf:69:bb:
                    ed:cb:a9:5a:5c:51:13:63:3b:61:db:3d:83:51:d5:
                    70:0d:5a:f9:b0:20:3b:06:31:a6:f9:b6:7b:66:bb:
                    91:3e:ba:1b:e9:15:da:9a:82:aa:dc:03:8a:74:58:
                    c1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:45:16:A8:C1:E4:47:28:6B:4A:FB:C0:2C:37:AF:52:AC:67:28:74
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58c86d76-a6b5-4057-9e4b-0d8f9e6f274e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:86:ed:90:85:42:5b:f8:c3:75:8e:a6:5b:9a:b2:67:87:c1:
         24:d3:c4:c5:09:32:27:a5:59:c1:41:8b:d9:bf:fd:1a:f0:dd:
         05:46:3b:f4:03:a9:78:0d:50:a4:98:54:b8:63:a4:b0:12:12:
         4d:8a:3a:f6:c0:e4:54:7a:46:7e:b5:cb:74:ba:4f:05:84:c8:
         3f:a2:c1:e8:e9:f6:53:ff:c2:fb:08:27:50:9c:45:a0:66:d2:
         6c:94:b4:c7:c3:e4:50:08:2a:ec:99:e3:6e:b2:41:47:21:c3:
         fc:1e:36:87:8f:31:8b:ba:d9:8f:34:06:8e:04:26:45:df:d2:
         6c:98:6f:4d:af:4c:a9:d9:30:9d:e0:09:41:5b:0a:35:d0:e2:
         fe:28:e9:44:fb:7e:19:a9:17:5c:50:d0:6e:6b:05:15:4a:c7:
         cb:f0:90:f4:4a:97:cb:27:c1:1e:05:6d:e1:d3:49:6c:7a:d0:
         12:21:ff:c2:b3:47:a0:95:5b:de:e0:32:0d:72:2b:b0:ea:75:
         76:67:8b:51:48:b0:5b:0e:15:57:a0:8a:95:7d:34:f6:ee:b2:
         f1:ba:df:d5:e9:2c:96:f1:7b:6e:dc:4e:a4:83:ab:c0:2c:1b:
         12:b4:a1:db:90:c2:0d:98:98:12:49:40:79:d4:89:1b:0d:3a:
         dc:90:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----