Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/607d204e-8a61-4224-bbcf-5f1ba1471d2f.roa
File:                     607d204e-8a61-4224-bbcf-5f1ba1471d2f.roa (raw, json)
Hash identifier:          LbbR4QLZFv9GPNHM/pqzTuJpw8q+rsRtmwTKTG20KJs=
Subject key identifier:   62:84:FC:73:A7:92:5E:51:60:87:4F:92:3B:49:11:B8:83:7D:86:02
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2F6A69426A0B7B868AC73A485513BC7FADD72DE1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/607d204e-8a61-4224-bbcf-5f1ba1471d2f.roa
Signing time:             Tue 13 Aug 2024 00:00:00 +0000
ROA not before:           Tue 13 Aug 2024 00:00:00 +0000
ROA not after:            Tue 17 Sep 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6a:69:42:6a:0b:7b:86:8a:c7:3a:48:55:13:bc:7f:ad:d7:2d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 13 00:00:00 2024 GMT
            Not After : Sep 17 23:59:59 2024 GMT
        Subject: serialNumber=7839be19a22eed77111969ed68328d697d102e895f3e498cae513d77b76c63e5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:4c:1c:10:3d:bf:aa:cf:a3:4c:ca:94:63:
                    1a:a7:70:06:33:67:78:f7:cc:48:ac:60:21:e4:c5:
                    3c:a1:81:31:e5:6f:b0:12:da:e1:55:3c:df:f1:2c:
                    19:d8:3a:45:cf:00:f4:09:f2:b7:86:5b:84:8d:df:
                    4e:48:1f:2e:72:3a:a4:45:52:05:23:0d:a3:8c:b8:
                    2f:19:f5:c4:4f:c9:3d:67:32:60:b5:e4:93:44:87:
                    3e:b2:65:c0:97:40:ea:06:74:b2:6d:b6:72:b9:5a:
                    69:ce:b2:62:7c:bb:b5:9c:f8:30:d7:b4:65:22:1c:
                    07:c1:32:61:89:52:63:1d:7c:02:70:28:df:e2:92:
                    0b:7c:bf:69:d1:8a:ea:a8:1d:9a:0f:1a:7a:f7:52:
                    db:28:28:df:45:de:20:be:46:46:90:2e:d1:6c:b3:
                    ec:6a:4d:91:73:12:d1:08:67:47:dd:b3:4a:41:a4:
                    f2:02:e6:d8:b3:27:01:d0:af:40:2a:0e:b7:15:df:
                    1c:f8:f5:28:2d:28:45:10:f6:5a:aa:2a:68:e1:29:
                    eb:85:f5:ed:bd:26:f6:12:7b:d5:f4:50:09:79:f5:
                    63:ed:3b:c1:11:b3:05:63:de:ac:3d:dd:ff:53:b5:
                    86:84:b7:c7:16:27:fe:af:d2:04:4a:8e:7b:f7:63:
                    bb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:84:FC:73:A7:92:5E:51:60:87:4F:92:3B:49:11:B8:83:7D:86:02
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/607d204e-8a61-4224-bbcf-5f1ba1471d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:0e:ec:65:ac:6a:41:70:a5:e0:19:4a:ab:31:85:d8:c0:
         06:e6:aa:1a:93:e1:38:42:f2:c6:dd:db:6a:7e:e5:bd:20:dd:
         81:96:09:87:e5:f2:03:9c:3f:c5:c8:10:d4:6d:41:bd:b1:54:
         f4:0b:ab:52:0a:c8:5f:69:d1:86:63:b8:60:ec:b3:3c:09:9b:
         fc:4c:8a:65:ea:8e:83:5e:e6:2c:d9:41:1e:4b:5b:c4:82:0f:
         52:fd:99:28:9e:3f:dd:f5:7f:cf:11:49:95:84:a8:e1:45:53:
         39:da:2d:f1:f5:2c:df:37:89:51:83:69:0e:ae:e0:2c:5d:9c:
         79:e6:71:2c:32:95:39:2a:cb:9d:f8:5e:f1:50:13:f3:93:72:
         ee:8b:7c:62:b6:46:01:30:77:e4:dc:08:ca:36:62:5b:97:12:
         44:a6:35:42:8f:4b:50:14:fa:98:3e:ff:67:d9:15:a7:53:22:
         8b:33:d9:41:2d:f9:15:b3:28:42:47:e3:73:ba:90:c5:6a:d9:
         f1:3d:49:9f:93:31:8c:29:15:c7:7e:41:ec:ba:45:3e:da:30:
         a8:be:bc:4d:33:e7:b1:a0:d0:e8:29:58:26:29:53:89:60:17:
         11:7f:20:dd:6c:f8:92:15:85:cd:31:d8:42:c4:cc:6a:88:69:
         43:d9:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----