Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6343a616-d612-42d3-a778-ceedfc100822.roa
File:                     6343a616-d612-42d3-a778-ceedfc100822.roa (raw, json)
Hash identifier:          d5GeJ2fcGS//SH+bXsy5AtI+Po24yct3kYffB/Rfp+E=
Subject key identifier:   8C:CE:DC:FE:05:B7:C8:E8:D9:58:87:13:BE:CA:FA:34:68:44:C2:81
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       405F86FA0055D66ABEDF00E56E7BE3772B886639
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6343a616-d612-42d3-a778-ceedfc100822.roa
Signing time:             Thu 16 May 2024 00:00:00 +0000
ROA not before:           Thu 16 May 2024 00:00:00 +0000
ROA not after:            Thu 20 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5f:86:fa:00:55:d6:6a:be:df:00:e5:6e:7b:e3:77:2b:88:66:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 16 00:00:00 2024 GMT
            Not After : Jun 20 23:59:59 2024 GMT
        Subject: serialNumber=f7f9884f88e8902300b534f77604c3553165deb5bc36b793027036fab6d3402a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:2f:a3:9a:b7:1a:c3:93:82:1a:ad:dc:4a:
                    4c:a2:b8:dd:d8:a9:f7:78:e1:be:90:da:f0:bd:c4:
                    38:b4:98:b0:4d:81:d1:0a:12:88:6e:9f:e8:f5:1f:
                    0a:aa:1e:c7:f8:8a:5d:24:33:4e:b9:9c:89:2d:fd:
                    63:ba:41:54:26:02:37:00:d4:e4:75:1c:0a:29:5e:
                    87:4d:e9:28:4a:89:89:ad:20:81:7b:3b:fe:2d:a8:
                    57:3f:e1:a5:2a:5d:b1:17:8d:74:b5:d1:89:4a:2b:
                    9b:d3:fe:d7:37:76:67:52:8c:22:d9:08:34:34:d5:
                    8a:ba:82:81:02:1c:87:e8:80:57:d0:a9:d1:91:90:
                    ba:19:aa:48:c8:5e:20:01:28:6f:43:aa:01:94:44:
                    93:6b:95:6a:dc:67:10:7c:dc:12:c9:33:cd:13:e2:
                    9a:de:3f:d3:01:43:c6:97:05:8d:93:56:87:b9:8f:
                    d1:35:31:c0:a0:1c:f2:c1:50:dd:7c:25:6c:63:82:
                    69:95:53:7f:91:c9:ff:f3:ca:41:23:10:ef:3b:57:
                    c0:1a:7a:e1:8f:bf:7d:c3:01:20:92:6a:d6:5c:04:
                    12:8a:b3:73:78:18:a4:7e:3f:52:4d:8f:6c:df:d5:
                    c8:ff:92:5e:c0:ec:7b:cd:d4:df:87:7e:de:d1:53:
                    04:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CE:DC:FE:05:B7:C8:E8:D9:58:87:13:BE:CA:FA:34:68:44:C2:81
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6343a616-d612-42d3-a778-ceedfc100822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:d4:4e:3b:c9:ec:9b:5b:f9:cb:ad:d5:d7:69:bd:2b:b9:3d:
         76:7f:9d:b7:d9:8a:a8:14:b7:40:cd:bb:b5:37:3a:71:04:cb:
         64:60:40:81:58:d7:df:df:fa:5b:6e:50:df:b6:7c:c8:b1:0f:
         e3:23:32:d0:ab:99:58:c6:b7:a1:ab:a3:04:c6:48:b3:fb:8f:
         81:ee:f3:f1:5d:12:e7:fd:1e:26:27:44:78:a4:c1:0c:73:dc:
         94:52:e2:29:02:9a:ca:39:4c:52:1e:ef:0d:24:ff:38:a7:c1:
         d7:ad:49:5d:be:77:87:fa:7d:b8:58:e9:e3:cf:1b:5c:db:00:
         03:26:63:a0:b0:c1:72:47:2c:04:36:35:66:71:c1:11:5e:de:
         1e:10:66:59:7a:a1:ed:04:7a:18:cd:7a:16:5f:9b:20:8e:05:
         c8:8f:10:cf:5a:47:00:f6:e9:03:69:1f:22:8f:84:7f:a0:2c:
         a7:65:c9:77:b7:fe:66:de:92:a5:1f:93:71:86:ac:fc:57:ab:
         fc:39:65:b6:8e:ca:69:53:f6:0a:29:86:96:a6:2a:28:28:e7:
         fc:9a:84:cc:cb:e3:e7:00:ec:c1:dc:07:d4:76:62:df:6e:78:
         65:ef:04:8e:bd:ab:b4:59:ef:ac:d8:27:cc:10:50:1f:54:d3:
         57:2a:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----